Report - 156.54.128.63/caltagirone/po/po

Report Overview

Submitted URL
156.54.128.63/caltagirone/po/po_exlogin.php
IP
156.54.128.63
ASN
#20746 Telecom Italia
Submitted
2024-03-28 11:43:05
Access
public
Website Title
Atti Amministrativi Comune di Caltagirone
Final URL
156.54.128.63/caltagirone/po/po_exlogin.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
156.54.128.63	unknown	unknown	2017-02-18	2024-01-09	7.1 kB	2.0 MB	156.54.128.63

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed
2024-03-28	medium	156.54.128.63	Sinkholed

ThreatFox

No alerts detected

JavaScript (21)

	URL	Size	First Seen	Last Seen
	unknown	2.8 kB	2023-04-16	2024-04-06
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-06 15:22:42 Times Seen164 Hash 9afe2d5745ab56a5abbcda7fcd70567a f7b737e4da9cabbbbba4d0fbf5e8eb97ec62b26c e2df4096b1dced0c82975f69a9418f79412b8eae2b6433836edbfb86ee0ef744 Loading...

	unknown	29 B	2023-07-06	2024-03-28
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-07-06 13:19:22 Last Seen2024-03-28 12:43:06 Times Seen9 Hash d0347614cf67fc0cabf75ff2cd4e2f8f d570fc5c07973bade28fbba5073224ca86fd7cfb 3578d649a6ebbe361964e445bf76eb3dec1130c19edc96bc2be9b717ca1c7c0f Loading...

	156.54.128.63/caltagirone/po/po_exlogin.php	134 B	2024-03-28	2024-03-28
Pretty URL 156.54.128.63/caltagirone/po/po_exlogin.php IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 12:43:06 Last Seen2024-03-28 12:43:06 Times Seen1 Hash 230138f83eec2ddd181511cd358007eb be8897fee4859a1921f490451d30847aef9f13dc 485cfd067785ae42297179fd1fb63c30a12e0e77f8a0c2df518830a844f5170d Loading...

	156.54.128.63/caltagirone/po/po_exlogin.php	224 B	2023-11-16	2024-03-28
Pretty URL 156.54.128.63/caltagirone/po/po_exlogin.php IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-16 10:12:15 Last Seen2024-03-28 12:43:06 Times Seen2 Hash 1f6d985d5d1bbaecd90dda7ec20ef1cf 630435513cd4602a645bfe6d8b2cd6836610f1cd 6a43e09716abf681ff2ff0e1d13ee4a5e7901f246dc555b7e6bc1e61c859a7f9 Loading...

	156.54.128.63/caltagirone/km/bootstrap/bootstrap.halley.js	2.0 kB	2023-03-09	2024-04-06
Pretty URL 156.54.128.63/caltagirone/km/bootstrap/bootstrap.halley.js IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:11:28 Last Seen2024-04-06 15:22:42 Times Seen37 Hash 1287e08ee5b02b3d1e85e5ba42c0687f 454877bbbad1e08c7a88c21d5e58686b03eabdc1 c6ecc4f83c81c503bb2b8b19f28c05b067ca77964f4c9c6f278fd65ce1a1df6b Loading...

	unknown	2.3 kB	2023-04-16	2024-04-21
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-21 23:58:01 Times Seen218 Hash e2c89a3a47c7325d779a7a642315bca3 da743b26ca86568d988234fc0353ab9f16817e59 4a339cbb8d5372ded257810b1638d2955f59d043449889c10f421159a21e6c9d Loading...

	unknown	9.2 kB	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:58 Times Seen380 Hash 6b62f35754989798a407fb92a7b9380f 6229f2901f99d317009feb0442278b4b30cdf277 5b55936fa7b6f1614315b7c94f55cd0a3663a2b1b22ee9c4107f94f41105c1c8 Loading...

	unknown	2.4 kB	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:55 Times Seen380 Hash 95694391e7a3679271a3a1f9488d53bc 6ace1bdcae479156a029441c968b1a104240cde4 deda9ea97af16a60a0d1039bb4f78a1594ced8ab0b7a9c2ce7a916aaeb5db1fb Loading...

	156.54.128.63/caltagirone/km/bootstrap/js/bootstrap.min.js	28 kB	2023-03-07	2024-04-23
Pretty URL 156.54.128.63/caltagirone/km/bootstrap/js/bootstrap.min.js IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:21 Last Seen2024-04-23 21:51:29 Times Seen1248 Hash 9e25e8e29ef0ea358e9778082ffd97d8 75a42212affc118fef849aba4b9326a7da2acda1 54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7 Loading...

	unknown	157 B	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:58 Times Seen411 Hash a762d9bae9cbec2a7bfce47a668d5166 97953cada75d709adab16aead2195e989539efd8 f47605be5be5a996f06150aa8e8330775428779f49343b7ec0e1b05a27c07dab Loading...

	unknown	281 B	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:57 Times Seen402 Hash ce2501affe8fc39effee46cf9d323ed9 1184d84dc6503a4828f5839d8c6ac63ce34228c7 21a718d64a7e7733b79a534163150afdbf641ab89689cb4272c0f489dba2f314 Loading...

	unknown	1.6 kB	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:57 Times Seen400 Hash 164517b29df6459d3cc8754bc902810f f560d85ec027e1d37ce5a21bd33830ddff87d87a 927a8995c8b4d133cd2088ed11033d10dab309357d844720e60cd4e5158c2302 Loading...

	156.54.128.63/caltagirone/po/po_exlogin.php	411 B	2024-03-28	2024-03-28
Pretty URL 156.54.128.63/caltagirone/po/po_exlogin.php IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 12:43:07 Last Seen2024-03-28 12:43:07 Times Seen1 Hash 950e317d6a02d513b3f271e3a5f4bf3a 6237743d7d541eb64be5f287390e8d2a800f69bc 4e587708f6983cb7a048768e09702c70d039ae1677d93576d291287c9fd559f9 Loading...

	156.54.128.63/caltagirone/km/scripts.js?041430&tm=1602849134	1.0 MB	2023-06-26	2024-03-28
Pretty URL 156.54.128.63/caltagirone/km/scripts.js?041430&tm=1602849134 IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-26 11:00:35 Last Seen2024-03-28 12:43:07 Times Seen14 Hash bec44e06494dd283d806e957d9158a62 c132488d54fd2992cb310cedf906a124ed57c699 28bc78ca270d1c7e1998b4268513b7146932cbcd6c782fcf806da6000cd17f1e Loading...

	156.54.128.63/caltagirone/editor/CKeditor/ckeditor.js	510 kB	2023-10-19	2024-04-06
Pretty URL 156.54.128.63/caltagirone/editor/CKeditor/ckeditor.js IP 156.54.128.63 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-19 14:14:21 Last Seen2024-04-06 15:22:42 Times Seen22 Hash 7263b7cf19124619cef076c9c42a3451 d6e95042a2f12a98d6e528f21384ab9ff1b2f756 b9d1e2463470376f96d04d5e05c1c54acf59043e058be88d35454a6e2177830a Loading...

	unknown	1.1 kB	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:57 Times Seen408 Hash 6c41d068660cd241101fe424b7fd4807 23e6eaa99edc45f6724428dd83759deb6cebf89a 2a1ef222eefd377a1500076feb680a0ec0fed8d7eba38bd6dda002dcffebf099 Loading...

	unknown	439 B	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:57 Times Seen391 Hash 7ea97d744fe22869bdcd1e904ea8d63d 6efbee2b1d0c6d9d74c089f6e668e747ab736a4c aed2a6c1a9c0b595b4650915f8ad1ab5be86dfdf3592f5e665390ecae47fa656 Loading...

	unknown	3.5 kB	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:57 Times Seen343 Hash 802bd6964c9b47ba2f6db5ad2850d659 3fa8378ab2b88e125818f430db7f2402f801e3ba 07d8704b82489cfce192852a88b2aca1deed315d177160e8485a6b385289d6ae Loading...

	unknown	2.0 kB	2023-04-16	2024-04-21
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-21 23:57:59 Times Seen153 Hash cacd94cb886c19bc93c99047b8771a08 32ad5793d6f3ad1202e2ecc2a029201bb15f56a9 0b7f03c8808cf8879fd95219a6684a6b3da4c31b444436936bd79989d14b6907 Loading...

	unknown	3.3 kB	2023-04-16	2024-04-06
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-06 15:22:42 Times Seen135 Hash ddec3038be348a53396f97d82cb161c3 78de55c06eebe539f92b1e97d011fd2ca83395ce 55ec175a9725a273bc62e6087d4bdb51dc155341ec1b04bf8ceabbd3d8a48ea0 Loading...

	unknown	977 B	2023-04-16	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-16 12:11:11 Last Seen2024-04-24 12:44:57 Times Seen408 Hash 6d30e8eb0e935368657203356d8ab3ad 4c40fda108e97d182be2b63fc4ef39af7cc5e601 6bed558d0b97101e7acbed8ce81fb15cc83c0a7a184bff84cb1b49a9a054dcac Loading...

HTTP Transactions (16)

URL IP Response Size

156.54.128.63/caltagirone/po/po_exlogin.php

156.54.128.63

200 OK

13 kB

URL User Request GET HTTP/1.1
156.54.128.63/caltagirone/po/po_exlogin.php
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

File type
HTML document, ISO-8859 text, with very long lines (2221), with CRLF, LF line terminators
Size
13 kB (12707 bytes)
Hash
951df843486a4390439c994b58273a46
3f8fba0cf0a336fa210cca3069258cac1d1b6d58
c8a702d552356703c5559672c04162f6adbf7e3cd099f6cb830210d2aabf2077

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/po/po_exlogin.php HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:38 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
X-Powered-By: PHP/5.6.31
Set-Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: public, s-maxage=3600
Pragma: no-cache
P3P: CP="NOI ADM DEV COM NAV OUR STP"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-1

156.54.128.63/caltagirone/km/bootstrap/bootstrap.halley.js

156.54.128.63

200 OK

2.0 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/bootstrap/bootstrap.halley.js
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
JavaScript source, ISO-8859 text, with CRLF line terminators
Size
2.0 kB (2040 bytes)
Hash
ce01f73247f78bee881e6b225d93045c
bb28a3a896ace70b982aa67a229dc0f5870f2ba8
ca864c6eaf22b85efadf8e28f515afd369abf5222aa2484b77f95df5d2cdcacd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/bootstrap/bootstrap.halley.js HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Wed, 13 Jun 2018 07:10:18 GMT
ETag: "7f8-56e80acd40a80"
Accept-Ranges: bytes
Content-Length: 2040
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

156.54.128.63/caltagirone/km/bootstrap/js/bootstrap.min.js

156.54.128.63

200 OK

28 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/bootstrap/js/bootstrap.min.js
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
JavaScript source, ASCII text, with very long lines (27605)
Size
28 kB (27726 bytes)
Hash
9e25e8e29ef0ea358e9778082ffd97d8
75a42212affc118fef849aba4b9326a7da2acda1
54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Wed, 30 Oct 2013 16:10:36 GMT
ETag: "6c4e-4e9f792cdd700"
Accept-Ranges: bytes
Content-Length: 27726
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

156.54.128.63/caltagirone/km/bootstrap/bootstrap-override.css

156.54.128.63

200 OK

2.4 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/bootstrap/bootstrap-override.css
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
ASCII text, with CRLF, LF line terminators
Size
2.4 kB (2393 bytes)
Hash
5a69931809a908e625cecab7034819f0
ae2d93eeacc2e557397de0a34fd1138c013e536b
1624e1a793778a7bee29e569e1a04d62006cdbbb9435ac3895fda13992295da4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/bootstrap/bootstrap-override.css HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Mon, 09 Apr 2018 15:36:37 GMT
ETag: "959-5696c2bdf6b40"
Accept-Ranges: bytes
Content-Length: 2393
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

156.54.128.63/caltagirone/km/css/accessibilita.php?nocache=1711626159

156.54.128.63

200 OK

2 B

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/css/accessibilita.php?nocache=1711626159
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
ASCII text, with CRLF line terminators
Size
2 B (2 bytes)
Hash
81051bcc2cf1bedf378224b0a93e2877
ba8ab5a0280b953aa97435ff8946cbcbb2755a27
7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/css/accessibilita.php?nocache=1711626159 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
X-Powered-By: PHP/5.6.31
Content-Length: 2
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css;charset=ISO-8859-1

156.54.128.63/caltagirone/km/bootstrap/css/bootstrap.min.css

156.54.128.63

200 OK

124 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/bootstrap/css/bootstrap.min.css
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
ASCII text, with very long lines (64996), with CRLF line terminators
Size
124 kB (123616 bytes)
Hash
8d396d67e48defcb4676b3539b27c2fd
1eca1b10fbb044e1c69a7170c877ea774c2c87d7
a56535187bb4bc141b26f2b468074e34864ee62ede6c7d7ac07828c6b7cecfc3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 17 Jul 2015 08:18:05 GMT
ETag: "1e2e0-51b0dd3c54940"
Accept-Ranges: bytes
Content-Length: 123616
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

156.54.128.63/caltagirone/km/scripts.js?041430&tm=1602849134

156.54.128.63

200 OK

1.0 MB

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/scripts.js?041430&tm=1602849134
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
ISO-8859 text, with very long lines (361), with CRLF, LF line terminators
Size
1.0 MB (1040825 bytes)
Hash
5743353a7132c0aac8ffddec397bdaa9
44573968fddf6bdcc92b0f120eb2fb0ef7320a9e
927d06a3be8ff26cdfc5e94b82a441e0fa1bdb69249159e86f1dcd72b89240df

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/scripts.js?041430&tm=1602849134 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 16 Oct 2020 11:52:14 GMT
ETag: "fe1b9-5b1c86546f24e"
Accept-Ranges: bytes
Content-Length: 1040825
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

156.54.128.63/caltagirone/km/style.css?041430&tm=1602849135

156.54.128.63

200 OK

188 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/style.css?041430&tm=1602849135
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
ASCII text, with very long lines (23577), with CRLF, LF line terminators
Size
188 kB (187895 bytes)
Hash
cb00ae20dfa0f617f149516d47b304ff
cb2e5fae4f7d16f3ca0c704c5d8b6930d873b866
077d0bf63cb3cf9ae17c99a5b6fbc03957398455a180ecb547306fec63882656

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/style.css?041430&tm=1602849135 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 16 Oct 2020 11:52:15 GMT
ETag: "2ddf7-5b1c865535e0b"
Accept-Ranges: bytes
Content-Length: 187895
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

156.54.128.63/caltagirone/editor/CKeditor/ckeditor.js

156.54.128.63

200 OK

510 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/editor/CKeditor/ckeditor.js
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (594)
Size
510 kB (510243 bytes)
Hash
853e1d72f9f3524c6db3e20b7ea490ad
3a4d4cff33756a0f3c5d52cca7737b06896db276
85d5d0664b7a1ae0a33726ab3ea5e40d96189ad3ad7aecb3044454114e62fff9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/editor/CKeditor/ckeditor.js HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Mon, 21 Aug 2023 11:00:54 GMT
ETag: "7c923-6036ccacc4580"
Accept-Ranges: bytes
Content-Length: 510243
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-javascript

156.54.128.63/caltagirone/immagini/valid_css3.png

156.54.128.63

200 OK

802 B

URL GET HTTP/1.1
156.54.128.63/caltagirone/immagini/valid_css3.png
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
PNG image data, 80 x 15, 8-bit colormap, non-interlaced
Size
802 B (802 bytes)
Hash
d1139a81312c86715122c2052bc17f09
1fe8f55c41b3df6b1371ef27d447efc31caac9e7
cf01ec1b2bfd19c0361df4e42eb5c573cc7ba8ac65ee3e24b9dfb012140aa4a5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/immagini/valid_css3.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 09 Aug 2013 16:00:22 GMT
ETag: "322-4e385df383180"
Accept-Ranges: bytes
Content-Length: 802
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

156.54.128.63/caltagirone/immagini/sfondomenu.png

156.54.128.63

200 OK

4.1 kB

URL GET HTTP/1.1
156.54.128.63/caltagirone/immagini/sfondomenu.png
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
PNG image data, 240 x 518, 8-bit/color RGBA, non-interlaced
Size
4.1 kB (4059 bytes)
Hash
1da8f2bf973fed26a3e245a679d342cd
a1420de4b0321743523c304aa6689c521aa15b49
dc22ef9c68a42437695787e5730c2ab0636312cf8fddfcf7b1bd0bae0293fd71

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/immagini/sfondomenu.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Tue, 19 Oct 2010 07:06:24 GMT
ETag: "fdb-492f2ee43bc00"
Accept-Ranges: bytes
Content-Length: 4059
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

156.54.128.63/caltagirone/immagini/valid_html5.png

156.54.128.63

200 OK

984 B

URL GET HTTP/1.1
156.54.128.63/caltagirone/immagini/valid_html5.png
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
PNG image data, 80 x 15, 8-bit/color RGBA, non-interlaced
Size
984 B (984 bytes)
Hash
337c3a6861c29095b81843d2ca643a31
d33ddf9d79736f41aaf76ac486194710b4a71690
be3aa6a5984d4d3c784a6245e34c310f848006b61b11512394fdbf69685892ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/immagini/valid_html5.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 09 Aug 2013 16:00:22 GMT
ETag: "3d8-4e385df383180"
Accept-Ranges: bytes
Content-Length: 984
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

156.54.128.63/caltagirone/km/css-static/print.css

156.54.128.63

200 OK

57 B

URL GET HTTP/1.1
156.54.128.63/caltagirone/km/css-static/print.css
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
ASCII text, with CRLF line terminators
Size
57 B (57 bytes)
Hash
1a595710445d9df1be00617e343e8703
86e5afeedf59745be4d6a7f8996d0da7d11bcf81
2bd714055a308be0c5cfa7bf0bb2e4a7936c754baafd08901776cd04ce8fa1fa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/km/css-static/print.css HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Mon, 27 Apr 2015 09:02:21 GMT
ETag: "39-514b100ef4140"
Accept-Ranges: bytes
Content-Length: 57
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

156.54.128.63/caltagirone/immagini/yellow_wai-aa.gif

156.54.128.63

200 OK

328 B

URL GET HTTP/1.1
156.54.128.63/caltagirone/immagini/yellow_wai-aa.gif
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
GIF image data, version 89a, 80 x 15
Size
328 B (328 bytes)
Hash
764bfa65307cd08b78baf3082a2128e4
98ad1fa2569bba0813b87c466f694acbb9c8425d
86455a6d9d1c9e84bc255d5e2c98675abb73e5b1e65ce82279b2258e8ef1fea1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /caltagirone/immagini/yellow_wai-aa.gif HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Thu, 30 Sep 2010 16:24:47 GMT
ETag: "148-4917c8436d1c0"
Accept-Ranges: bytes
Content-Length: 328
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

156.54.128.63/km/css-static/font-awesome/fonts/fontawesome-webfont.woff?v=4.3

156.54.128.63

200 OK

72 kB

URL GET HTTP/1.1
156.54.128.63/km/css-static/font-awesome/fonts/fontawesome-webfont.woff?v=4.3
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
Web Open Font Format, TrueType, length 71508, version 1.0
Size
72 kB (71508 bytes)
Hash
d9ee23d59d0e0e727b51368b458a0bff
56ce13e71c2150d81bc972940584915181bd6081
e3870de89716b72cb61a4bba0e17c75783b361cdaba35ea96961c3070bd8ca18

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /km/css-static/font-awesome/fonts/fontawesome-webfont.woff?v=4.3 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/km/style.css?041430&tm=1602849135
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:40 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Wed, 15 Jul 2015 13:53:30 GMT
ETag: "11754-51aea47a1aa80"
Accept-Ranges: bytes
Content-Length: 71508
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/font-woff

156.54.128.63/favicon.png

156.54.128.63

200 OK

1.6 kB

URL GET HTTP/1.1
156.54.128.63/favicon.png
IP
156.54.128.63:80
ASN
#20746 Telecom Italia

Requested by
http://156.54.128.63/caltagirone/po/po_exlogin.php

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
1.6 kB (1614 bytes)
Hash
d64de12f288e6a3405fc4d6740565bbb
014ba5af160f7b52f80aae8db41bc1c93b7a38e2
e40dc2abbb61458d486360247a35d79ff8efb4b3071ebeeba3962d1542cf37b2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:40 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Tue, 20 May 2014 10:33:14 GMT
ETag: "64e-4f9d2683b2e80"
Accept-Ranges: bytes
Content-Length: 1614
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (21)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML