Report - 88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp

Report Overview

Visited public
2024-02-28 05:58:02
Tags
URL
88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Finishing URL
88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
IP / ASN
88.55.106.180
#3269 Telecom Italia
Title
Login

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
88.55.106.180:81	unknown	unknown	No data	No data	13 kB	439 kB	88.55.106.180

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed
2024-02-28	medium	88.55.106.180	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	From	Size	First Seen	Last Seen
	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/utils.js?v20200716	ScriptElement	19 kB	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/utils.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash fb115964e165e7dbcf4c942b808eaf26 9faa515316ed7f4183dbd3271b97afbcc4410453 9d8aa372cb48a4140f9c27a1531af24296e0b59c7e5d3a14f15cfc04369c7e09 Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/scripts.js?v20230925	ScriptElement	70 kB	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/scripts.js?v20230925 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash bc3d4d3e4201ca53fd19c98ad998a8f2 8e8b2da0b6857ffdab730b819b74678ded1a9995 7077e648c1f45e4b7f08f6522fc4b7b4f7a0fae04d5ef1b5c99f5e9d2096c07f Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.min.js?v20200716	ScriptElement	96 kB	2023-03-07	2025-04-30
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.min.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25 Last Seen2025-04-30 13:25 Times Seen792 Hash d4a20d75db01a33e2d65e303ce5c34f3 b14a228c3632ebfe3d20e5ea830ceea313523353 4b940065e2a67c37e3bd02b23c651f4744a3c219aba2d4fb99a631113494d376 Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile-1.4.5.min.js?v20200716	ScriptElement	200 kB	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile-1.4.5.min.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash 2d67ceb81971a10dc93bed7d76a90ac3 a7eefcaf6c85e95770e973f9d5743d9a19c4896d 33b8d43df8a6a47b84f9bf43c11ac286f94924979e60b66e480a92e2ef975bb5 Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery-barcode.min.js?v20200716	ScriptElement	25 kB	2023-11-21	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery-barcode.min.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-21 23:13 Last Seen2024-08-20 18:25 Times Seen3 Hash 624f0d3dc206fce7c0237934571079bc 0ae88fe32d736528d38627b988e32aa59c21ba99 bd5dbcaf23106273aa9d4c0606d259e6c94a9b19b38bce83dfb9325bad59e6e5 Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.min.js?v20200716	ScriptElement	59 kB	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.min.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash 5b6dd40cc1aaa793ee46fa952da37ce1 638da5472c3186849e5f1b66ea3643e5aa5a11b2 a6c54367b34975c8db8b6e30c2fd068451285b0185d65445333be1ec04181f79 Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.i18n.it.utf8.min.js?v20200716	ScriptElement	1.5 kB	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.i18n.it.utf8.min.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash 402c8b38e50f55a6918e5501bfae23d1 41e899945fa2636ae8173019a25a225a67b75203 c8d5997533c4bb68dbaa76011d4cb089ea17b52445aac9f4c596e227b3171796 Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/moment.js?v20200716	ScriptElement	206 kB	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/moment.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash 92b6e2d258f9286b9998aac3ced6d875 2cdf7cbbc46d20884c0fd2e1f7e0d61f4d2117e6 a5f3ebf9183b7110872b9b945da2fa97bfc59a9010841525fc1a1b08cd50865f Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.scrollTo.min.js?v20200716	ScriptElement	2.4 kB	2023-03-07	2025-04-15
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.scrollTo.min.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27 Last Seen2025-04-15 03:29 Times Seen38 Hash 3b0ec5c1f800153903d0d0119e299be7 77a99ba69b39b9a9b722463bd6cf25d41b28e1f9 0abdb17438d8f505f2be56e3e0454906b7d5e62720fb82100e615d2b9ab125aa Loading...

	88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/settings.js?v20200716	ScriptElement	397 B	2024-08-20	2024-08-20
Pretty URL 88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/settings.js?v20200716 IP 88.55.106.180 ASN #3269 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 08:42 Last Seen2024-08-20 08:42 Times Seen1 Hash 42e99f37779c443707b50b6b468228a8 22d601bea088c33ec61044d19835b1c6784814ea d3f638d485eb82d4f866a3e38a54158ad734e3317d5925553e0e16127b018650 Loading...

HTTP Transactions (27)

URL IP Response Size

88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A

88.55.106.180

88 kB

URL
88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
HTML document, ISO-8859 text, with very long lines (497), with CRLF line terminators
Size
88 kB (87648 bytes)
Hash
bfe2d1b120f806ed9732fef69b668d86
0df67552d05d66dc7cd85417d111e964c26fb125
7e4a5727269735e56fa1245b57d3a4a083eb0b485a4e9df625269a8b3dc7b9a4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Server: Microsoft-IIS/8.5
MgxpaMiddlewareWaitTime: 0
Access-Control-Allow-Headers: MgxpaRIAglobalUniqueSessionID, Cache-Control
Access-Control-Expose-Headers: MgxpaNextSessionCounter
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 87648

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.min.js?v20200716

88.55.106.180

33 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.min.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
JavaScript source, ASCII text, with very long lines (32086)
Size
33 kB (33335 bytes)
Hash
d4a20d75db01a33e2d65e303ce5c34f3
b14a228c3632ebfe3d20e5ea830ceea313523353
4b940065e2a67c37e3bd02b23c651f4744a3c219aba2d4fb99a631113494d376

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.min.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 08:23:37 GMT
Accept-Ranges: bytes
ETag: "80a4ca227d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 33335

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/cortina.min.css?v20200716

88.55.106.180

3.1 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/cortina.min.css?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with very long lines (12662), with CRLF line terminators
Size
3.1 kB (3100 bytes)
Hash
5a68144c5b670d78a0fdc772855ca796
785ced8f422e43e5e731e5093aa42bac26c7c1ce
ade95fa6d4c131056880f0ca7b5f1bcb3bcb29890f06938ca450c8d0e361b684

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/cortina.min.css?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 21 Jan 2016 15:04:27 GMT
Accept-Ranges: bytes
ETag: "804f6a55d54d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 3100

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css?v20200716

88.55.106.180

10 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with very long lines (65398)
Size
10 kB (10200 bytes)
Hash
1544ca9f803edff31be0577b9f985853
12db16f24c602523fe6610221b56928fc090da96
e1d94776078325c58b4cd50eedb8a10e8db7860d5d353618934b117057f8db8c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 08:23:38 GMT
Accept-Ranges: bytes
ETag: "0a19cca227d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 10200

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716

88.55.106.180

384 B

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with CRLF line terminators
Size
384 B (384 bytes)
Hash
cb82205fa598653eeda5901a3afb0452
74bc5ff1a0141d890852c9e34387166fd049d983
f34f64b93345a79ad33f5139dbb0714fca2467ab36b592b59bf5aa0be6bcc655

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 09:48:20 GMT
Accept-Ranges: bytes
ETag: "04ab89f2e7d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 384

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/jquerymobile.datebox.min.css?v20200716

88.55.106.180

200 OK

1.2 kB

URL GET HTTP/1.1
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/jquerymobile.datebox.min.css?v20200716
IP
88.55.106.180:81
ASN
#3269 Telecom Italia

Requested by
http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A

File type
ASCII text, with very long lines (4360)
Size
1.2 kB (1206 bytes)
Hash
f91785d43c1fd7b6567f06d465a101b2
811eacf2400b4c8d849ea68800ed0a7dcf719509
0a71af03e1c731e04f28de408ff4299eaa002e95bb5fa0022dff3285305d412b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/css/jquerymobile.datebox.min.css?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 08:23:35 GMT
Accept-Ranges: bytes
ETag: "80ddd2c8227d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 1206

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/jquery.mobile.icons.min.css?v20200716

88.55.106.180

13 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/jquery.mobile.icons.min.css?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with very long lines (65398)
Size
13 kB (13037 bytes)
Hash
1299bcc0c86b9c76f6c8730d3ea5a8ae
6355ddce07865d75088f1fe3fbeea8a0c20f24da
dc32dc43be1675a0e6ce0af34e8e5339e35651e26c70d6d00d0102830b7894d7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/jquery.mobile.icons.min.css?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 07:34:56 GMT
Accept-Ranges: bytes
ETag: "0d0f6fc1b7d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 13037

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/style.css?v20230925_1

88.55.106.180

7.0 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/style.css?v20230925_1
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
troff or preprocessor input, ASCII text, with very long lines (1103), with CRLF line terminators
Size
7.0 kB (6964 bytes)
Hash
ba642e2daa5d47cb688f7d3053dc414d
a22f5cf3396dc3d9690d10131ff1a6fb8ad81c2a
555a3469dba23d46e31bc0be354aba30c1e76e2e64a68b34238d286b6e2d286d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/css/style.css?v20230925_1 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Fri, 29 Sep 2023 09:40:02 GMT
Accept-Ranges: bytes
ETag: "0551ebb8f2d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 6964

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/media.css?v20200716

88.55.106.180

1.1 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/media.css?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with CRLF line terminators
Size
1.1 kB (1066 bytes)
Hash
7c47f06b18d1204f7bf50bfcc66915e5
4e08dbe0cdd4222efbd01442e126d971f4a741d8
60c6578531022999eb7c53e3b80306be435367238b95cf5614785b72b5c7d38d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/css/media.css?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 27 Jan 2016 17:33:49 GMT
Accept-Ranges: bytes
ETag: "3a2610e22859d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 1066

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery-barcode.min.js?v20200716

88.55.106.180

8.2 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery-barcode.min.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
JavaScript source, ASCII text, with very long lines (24292)
Size
8.2 kB (8192 bytes)
Hash
624f0d3dc206fce7c0237934571079bc
0ae88fe32d736528d38627b988e32aa59c21ba99
bd5dbcaf23106273aa9d4c0606d259e6c94a9b19b38bce83dfb9325bad59e6e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery-barcode.min.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 08:23:37 GMT
Accept-Ranges: bytes
ETag: "80a4ca227d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 8192

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.i18n.it.utf8.min.js?v20200716

88.55.106.180

1.5 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.i18n.it.utf8.min.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with very long lines (1327), with CRLF line terminators
Size
1.5 kB (1477 bytes)
Hash
402c8b38e50f55a6918e5501bfae23d1
41e899945fa2636ae8173019a25a225a67b75203
c8d5997533c4bb68dbaa76011d4cb089ea17b52445aac9f4c596e227b3171796

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.i18n.it.utf8.min.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 05 Nov 2015 17:50:53 GMT
Accept-Ranges: bytes
ETag: "8ffbdb83f217d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 1477

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.scrollTo.min.js?v20200716

88.55.106.180

2.4 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.scrollTo.min.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
JavaScript source, ASCII text, with very long lines (2269), with CRLF line terminators
Size
2.4 kB (2444 bytes)
Hash
3b0ec5c1f800153903d0d0119e299be7
77a99ba69b39b9a9b722463bd6cf25d41b28e1f9
0abdb17438d8f505f2be56e3e0454906b7d5e62720fb82100e615d2b9ab125aa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.scrollTo.min.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 15 Oct 2015 08:23:39 GMT
Accept-Ranges: bytes
ETag: "6b5caecb227d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 2444

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/settings.js?v20200716

88.55.106.180

397 B

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/settings.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with CRLF line terminators
Size
397 B (397 bytes)
Hash
42e99f37779c443707b50b6b468228a8
22d601bea088c33ec61044d19835b1c6784814ea
d3f638d485eb82d4f866a3e38a54158ad734e3317d5925553e0e16127b018650

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/settings.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 06 Feb 2018 09:21:10 GMT
Accept-Ranges: bytes
ETag: "bff98ed32b9fd31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 397

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/utils.js?v20200716

88.55.106.180

5.8 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/utils.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
5.8 kB (5755 bytes)
Hash
92bdd75cadc10b105384535045cb1522
ee07a566a8a5c6ebd710a2017151c56d34c90ca0
d1b63e82a518f3fabff55409e94e3835bc25a88097a6984c91c86d158393b172

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/utils.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 14 Jul 2020 13:06:56 GMT
Accept-Ranges: bytes
ETag: "01880a6df59d61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 5755

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/moment.js?v20200716

88.55.106.180

200 OK

46 kB

URL GET HTTP/1.1
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/moment.js?v20200716
IP
88.55.106.180:81
ASN
#3269 Telecom Italia

Requested by
http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (32004), with CRLF line terminators
Size
46 kB (45643 bytes)
Hash
06f7189569691b320afe97cb552e5891
3f32443e87519e2ccc4d0072bf31bbf8efe76d43
264b69e09cb07e8ed345de564a293c819c7693d4bf066ee57b018f8847d5887e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/moment.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 08:23:39 GMT
Accept-Ranges: bytes
ETag: "803735cb227d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 45643

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile-1.4.5.min.js?v20200716

88.55.106.180

200 OK

56 kB

URL GET HTTP/1.1
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile-1.4.5.min.js?v20200716
IP
88.55.106.180:81
ASN
#3269 Telecom Italia

Requested by
http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (32080), with CRLF line terminators
Size
56 kB (55705 bytes)
Hash
9fba90e336cea36faa5c408db92220fe
a679154c878ee11671534ba1c71aa92debb4e7bd
4bf25a01eb9880d721cc48030dd66b7573cd3c9d9202a7371eab5950ecac6f7b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/jquery.mobile-1.4.5.min.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 15 Oct 2015 08:23:38 GMT
Accept-Ranges: bytes
ETag: "0a19cca227d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:37 GMT
Content-Length: 55705

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/scripts.js?v20230925

88.55.106.180

11 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/scripts.js?v20230925
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
ASCII text, with very long lines (342), with CRLF line terminators
Size
11 kB (11236 bytes)
Hash
bc3d4d3e4201ca53fd19c98ad998a8f2
8e8b2da0b6857ffdab730b819b74678ded1a9995
7077e648c1f45e4b7f08f6522fc4b7b4f7a0fae04d5ef1b5c99f5e9d2096c07f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/scripts.js?v20230925 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 27 Sep 2023 09:23:03 GMT
Accept-Ranges: bytes
ETag: "80751e3724f1d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 11236

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.min.js?v20200716

88.55.106.180

17 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.min.js?v20200716
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
JavaScript source, ASCII text, with very long lines (32072)
Size
17 kB (16597 bytes)
Hash
5b6dd40cc1aaa793ee46fa952da37ce1
638da5472c3186849e5f1b66ea3643e5aa5a11b2
a6c54367b34975c8db8b6e30c2fd068451285b0185d65445333be1ec04181f79

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jtsage-datebox.min.js?v20200716 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 05 Nov 2015 16:27:56 GMT
Accept-Ranges: bytes
ETag: "04e34ede617d11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 16597

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/images/ico_s_estrattoConto.png

88.55.106.180

727 B

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/images/ico_s_estrattoConto.png
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
PNG image data, 36 x 40, 8-bit/color RGBA, non-interlaced
Size
727 B (727 bytes)
Hash
258d9a492205a7dcb7a6ecb8ac924776
35cde3323c0f340ff7e369b8e14b3d17d5e3e1f2
85c77623a55169a2e98bc80d62e01ac9a7b19a485c634fea167bfb2cb281f6c8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/images/ico_s_estrattoConto.png HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/style.css?v20230925_1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 12 Sep 2017 16:23:21 GMT
Accept-Ranges: bytes
ETag: "86902073e32bd31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 727

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Regular-webfont.woff2

88.55.106.180

404 Not Found

1.2 kB

URL GET HTTP/1.1
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Regular-webfont.woff2
IP
88.55.106.180:81
ASN
#3269 Telecom Italia

Requested by
http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Regular-webfont.woff2 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 1245

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Bold-webfont.woff2

88.55.106.180

1.2 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Bold-webfont.woff2
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Bold-webfont.woff2 HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 1245

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/images/icons_palette.png

88.55.106.180

59 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/images/icons_palette.png
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
PNG image data, 272 x 1544, 8-bit/color RGBA, non-interlaced
Size
59 kB (59031 bytes)
Hash
33bdf0326cb84ef5e8a7a4c0511ec2bd
e0d29388c72ddf418e314143d7ce0657a8f568a0
31dc872948e599000bcbf7338c54b7202c77c39cee9c79edc426d31db3fe942e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/images/icons_palette.png HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/style.css?v20230925_1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 21 Jan 2016 14:22:34 GMT
Accept-Ranges: bytes
ETag: "9dfeb02b5754d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 59031

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/images/ajax-loader.gif

88.55.106.180

6.2 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/images/ajax-loader.gif
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
GIF image data, version 89a, 46 x 46
Size
6.2 kB (6242 bytes)
Hash
8fd7e719b06cd3f701c791adb62bd7a6
2edfb2ffe3b5121f42113008cff449023db52f27
4283b7de52bd36949abd99c7f8f7a1301ecf3d67f60658fa8c6854eadcb91950

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/images/ajax-loader.gif HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/js/jquery.mobile-1.4.5/themes/cortina.min.css?v20200716
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Thu, 15 Oct 2015 07:34:56 GMT
Accept-Ranges: bytes
ETag: "0d0f6fc1b7d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 6242

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/images/mainLogo.png

88.55.106.180

7.0 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/images/mainLogo.png
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
PNG image data, 250 x 149, 8-bit/color RGBA, non-interlaced
Size
7.0 kB (6999 bytes)
Hash
6665583aa5c168be4b80b86697992225
8cc5e0f048e60fec07fab7df10b19749c4826ff2
ac1c9c2ee2819347f20d9668a05460725f268da3f75161d59337de36778d3ef5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/images/mainLogo.png HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/css/style.css?v20230925_1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 15 Oct 2015 07:51:33 GMT
Accept-Ranges: bytes
ETag: "3722c94f1e7d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 6999

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Bold-webfont.woff

88.55.106.180

25 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Bold-webfont.woff
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
Web Open Font Format, TrueType, length 24952, version 1.0
Size
25 kB (24952 bytes)
Hash
c110b4178800850677829ec223b67834
36ead445a1085cabf034ce4430873b62ace21d49
8eabf4645ad8856b3d36efecb34bc1de2d64563df86f8154b7e6874c476a9e80

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Bold-webfont.woff HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: font/x-woff
Last-Modified: Thu, 15 Oct 2015 08:23:35 GMT
Accept-Ranges: bytes
ETag: "92f94dc9227d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 24952

88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Regular-webfont.woff

88.55.106.180

25 kB

URL
88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Regular-webfont.woff
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
Web Open Font Format, TrueType, length 25152, version 1.0
Size
25 kB (25152 bytes)
Hash
f90ae69bbc4d53783c6da3c332711b1a
b56a33dad13c86e89e5d48b65cac6297d347d64d
b0a52fdb189a2389ac53d12e876c659aa166c711a7cadd16f642a46498af1833

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/Roboto-Regular-webfont.woff HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/eJob/WEBNET/Esterne/CoopCortina/fonts/roboto/stylesheet.css?v20200716
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: font/x-woff
Last-Modified: Thu, 15 Oct 2015 08:23:36 GMT
Accept-Ranges: bytes
ETag: "969872c9227d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 25152

88.55.106.180:81/favicon.ico

88.55.106.180

1.2 kB

URL
88.55.106.180:81/favicon.ico
IP
88.55.106.180:0
ASN
#3269 Telecom Italia

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.2 kB (1245 bytes)
Hash
5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 88.55.106.180:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://88.55.106.180:81/MagicScripts/MGrqispi.dll?APPNAME=eNewdis&PRGNAME=84_Webapp_Lancio&ARGUMENTS=-ACCT,-A
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET, ARR/3.0, ASP.NET
Date: Wed, 28 Feb 2024 05:57:38 GMT
Content-Length: 1245

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by