Report - numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte

Report Overview

Submitted URL
numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte
IP
104.225.1.117
ASN
#36236 NETACTUATE
Submitted
2024-04-25 14:06:57
Access
public
Website Title
Tutto Quello Che C’è Da Sapere Sul Corso Sull’assicurazione D’arte – An Excellent Online Source
Final URL
numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	2.7 kB	56 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	593 B	22 kB	142.250.74.106
secure.gravatar.com	1671	2004-07-15	2012-05-22	2024-04-24	472 B	4.7 kB	192.0.73.2
numismaticblog.com	unknown	unknown	2018-06-07	2024-03-18	8.8 kB	262 kB	104.225.1.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed
2024-04-25	medium	numismaticblog.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	numismaticblog.com/wp-includes/js/jquery/jquery.min.js	88 kB	2023-11-03	2024-05-05
Pretty URL numismaticblog.com/wp-includes/js/jquery/jquery.min.js IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-03 09:26:43 Last Seen2024-05-05 00:04:14 Times Seen44119 Hash 826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf Loading...

	numismaticblog.com/wp-includes/js/jquery/jquery-migrate.min.js	14 kB	2023-05-09	2024-05-05
Pretty URL numismaticblog.com/wp-includes/js/jquery/jquery-migrate.min.js IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 19:21:05 Last Seen2024-05-05 00:04:14 Times Seen82536 Hash 9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89 Loading...

	numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js	189 kB	2023-03-12	2024-05-04
Pretty URL numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 22:34:58 Last Seen2024-05-04 20:44:04 Times Seen45 Hash 2b8440c5547bfec143d1d6828fa11c49 ebf61d167329dd167d26ab05236b04e8f090939a 7ebc13064f88425d072ed2d28354e0f5a84247ea0caa23c48b5d0af38e53addf Loading...

	numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js	3.0 kB	2023-03-07	2024-05-04
Pretty URL numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:06 Last Seen2024-05-04 20:44:04 Times Seen2019 Hash 49493316c090bb3d7cca5bc09031037c b77b6525d82691c3d4ca05948e846500ea0cb1d3 fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c Loading...

	numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js	685 B	2023-03-07	2024-05-04
Pretty URL numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:06 Last Seen2024-05-04 20:44:04 Times Seen3310 Hash 93d421fd7576b0ca9c359ffe2fa16113 eacce35258f14fcd79bea2bc23f4140d25874322 14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2 Loading...

	numismaticblog.com/wp-includes/js/wp-emoji-release.min.js	19 kB	2024-03-13	2024-05-05
Pretty URL numismaticblog.com/wp-includes/js/wp-emoji-release.min.js IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 16:02:37 Last Seen2024-05-05 00:50:31 Times Seen2834 Hash b976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3 Loading...

	numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/	3.2 kB	2024-04-25	2024-04-25
Pretty URL numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/ IP 104.225.1.117 ASN #36236 NETACTUATE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 16:06:58 Last Seen2024-04-25 16:06:58 Times Seen1 Hash 1a5937640814b03c8c9c07cdb05a0cb5 eecfb8b71a520ccbfe553bb3fee216a0684ba582 fe30f3aea33b7430ccd8f0cf8f8d11f33c7f309592eb77d00d3d0b044549e2e0 Loading...

HTTP Transactions (23)

URL IP Response Size

numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte

104.225.1.117

301 Moved Permanently

0 B

URL User Request GET HTTP/2
numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Thu, 25 Apr 2024 14:06:27 GMT
x-redirect-by: WordPress
location: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
vary: Accept-Encoding
content-length: 0
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/

104.225.1.117

200 OK

8.8 kB

URL User Request GET HTTP/2
numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9462)
Size
8.8 kB (8767 bytes)
Hash
15d139cb4c9066ac405d5a9c097fc3a8
5386cfb346614512f1024308a5234a3689872ba0
a024348c67959429452c955b2c14403a0e7d20d5bd0c15387d7b5c1487efa001

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/ HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:27 GMT
link: <https://numismaticblog.com/wp-json/>; rel="https://api.w.org/", <https://numismaticblog.com/wp-json/wp/v2/posts/405>; rel="alternate"; type="application/json", <https://numismaticblog.com/?p=405>; rel=shortlink
vary: Accept-Encoding
content-encoding: br
content-length: 8767
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/style.css

104.225.1.117

200 OK

812 B

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/style.css
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
ASCII text, with very long lines (667)
Size
812 B (812 bytes)
Hash
d1863e30b2646d7dda4f649b1a6c3d6b
636e58df3c25aa382c37ee824a5e8ef66cce4128
d957baf7ff6fe3fcee8ff3f3bc0ae6ef674dc5ef0cfa97264d1d88587ca7fa52

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/style.css HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "6a6-6159a51ca3598-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 812
content-type: text/css
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-includes/css/dist/block-library/style.min.css

104.225.1.117

200 OK

14 kB

URL GET HTTP/2
numismaticblog.com/wp-includes/css/dist/block-library/style.min.css
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
ASCII text, with very long lines (59701)
Size
14 kB (13902 bytes)
Hash
51a8390b47aa0582cf2d9c96c5addee2
b16a640874025d085c38119a1a02a3460f83f2de
98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Tue, 02 Apr 2024 18:53:01 GMT
etag: "1bae5-615219d91c4cc-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 13902
content-type: text/css
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/woocommerce/woocommerce.css

104.225.1.117

200 OK

829 B

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/woocommerce/woocommerce.css
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
ASCII text, with very long lines (4708), with no line terminators
Size
829 B (829 bytes)
Hash
609a11b14e7b1313bb1cce514a7ac1df
9439361c189e5c506b6faf2f25ca41e749ca32f9
8bd565b30ca3ced7ef905807172500ebd3cd7845c05820a5f4269be9a76df7b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/woocommerce/woocommerce.css HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "1264-6159a51c9f718-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 829
content-type: text/css
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-includes/js/jquery/jquery-migrate.min.js

104.225.1.117

200 OK

4.7 kB

URL GET HTTP/2
numismaticblog.com/wp-includes/js/jquery/jquery-migrate.min.js
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
4.7 kB (4685 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Thu, 28 Sep 2023 18:52:29 GMT
etag: "3509-6066fcf4ae2a9-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4685
content-type: text/javascript
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-includes/js/jquery/jquery.min.js

104.225.1.117

200 OK

30 kB

URL GET HTTP/2
numismaticblog.com/wp-includes/js/jquery/jquery.min.js
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (29769 bytes)
Hash
826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Sun, 24 Dec 2023 08:15:03 GMT
etag: "15601-60d3d0bdf14e3-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 29769
content-type: text/javascript
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css

104.225.1.117

200 OK

31 kB

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
ASCII text, with very long lines (42065)
Size
31 kB (31163 bytes)
Hash
ae94ac1d9d8de73f0425ea993cb60e6e
de155cefc328fd1b02b6cc7e0f5cf1c0e40358a5
9873032b7cb5348c9edbda2189695132064da77d00d16b60cce957fd7a15589c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "38872-6159a51c95309-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 31163
content-type: text/css
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js

104.225.1.117

200 OK

333 B

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
ASCII text
Size
333 B (333 bytes)
Hash
93d421fd7576b0ca9c359ffe2fa16113
eacce35258f14fcd79bea2bc23f4140d25874322
14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/skip-link-focus-fix.js HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "2ad-6159a51c9ace0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 333
content-type: text/javascript
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js

104.225.1.117

200 OK

957 B

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
ASCII text
Size
957 B (957 bytes)
Hash
49493316c090bb3d7cca5bc09031037c
b77b6525d82691c3d4ca05948e846500ea0cb1d3
fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/assets/src/js/libraries/navigation.js HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "b97-6159a51c9a128-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 957
content-type: text/javascript
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js

104.225.1.117

200 OK

50 kB

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
50 kB (49842 bytes)
Hash
2b8440c5547bfec143d1d6828fa11c49
ebf61d167329dd167d26ab05236b04e8f090939a
7ebc13064f88425d072ed2d28354e0f5a84247ea0caa23c48b5d0af38e53addf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/js/bundle.min.js HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:28 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "2e14d-6159a51c99d40-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 49842
content-type: text/javascript
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2

216.58.207.227

200 OK

8.0 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Size
8.0 kB (8000 bytes)
Hash
72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://numismaticblog.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 22:05:29 GMT
expires: Sun, 20 Apr 2025 22:05:29 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 403260
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2

216.58.207.227

200 OK

7.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Size
7.8 kB (7816 bytes)
Hash
25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://numismaticblog.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:23:47 GMT
expires: Tue, 22 Apr 2025 16:23:47 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 250962
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0

104.225.1.117

200 OK

77 kB

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:29 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "12d68-6159a51c985d1"
accept-ranges: bytes
content-length: 77160
vary: Accept-Encoding
content-type: font/woff2
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/feather/feather.woff?t=1525787366991

104.225.1.117

200 OK

30 kB

URL GET HTTP/2
numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/feather/feather.woff?t=1525787366991
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
Web Open Font Format, TrueType, length 29500, version 1.0
Size
30 kB (29500 bytes)
Hash
3d2fa2e544004aef2ea641698b715af6
7e6a306e6fb6178f325e6ad9a99c761ba5074044
ef3c47cb702e040372a3a4bce66d5e0ecc46c56325ec40f8c00b91da0d1d3f46

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/gucherry-blog/everestthemes/assets/dist/fonts/feather/feather.woff?t=1525787366991 HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/wp-content/themes/gucherry-blog/everestthemes/assets/dist/css/main-style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:29 GMT
last-modified: Mon, 08 Apr 2024 18:53:21 GMT
etag: "733c-6159a51c962a9"
accept-ranges: bytes
content-length: 29500
vary: Accept-Encoding
content-type: font/woff
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2

216.58.207.227

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://numismaticblog.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 03:21:03 GMT
expires: Wed, 23 Apr 2025 03:21:03 GMT
cache-control: public, max-age=31536000
age: 211526
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Cormorant+Garamond%3A400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%26display%3Dswap%7CPoppins%3A400%2C400i%2C500%2C600%2C700%2C700i&subset=latin%2Clatin-ext&ver=6.5.2

142.250.74.106

200 OK

21 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Cormorant+Garamond%3A400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%26display%3Dswap%7CPoppins%3A400%2C400i%2C500%2C600%2C700%2C700i&subset=latin%2Clatin-ext&ver=6.5.2
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
21 kB (21216 bytes)
Hash
8a9d09eb76a8f00be867cf7353eddfd7
a849181bebd8137e64ff8b8adfd186f08ca5b6c6
0826a580fa21e6c6ed345e1ba515d3f6b0d175ec5babe1f28179ec459e47fd14

HTTP Headers

GET /css?family=Cormorant+Garamond%3A400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%26display%3Dswap%7CPoppins%3A400%2C400i%2C500%2C600%2C700%2C700i&subset=latin%2Clatin-ext&ver=6.5.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 14:06:28 GMT
date: Thu, 25 Apr 2024 14:06:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

216.58.207.227

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://numismaticblog.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 03:25:26 GMT
expires: Wed, 23 Apr 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 211263
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

numismaticblog.com/wp-includes/js/wp-emoji-release.min.js

104.225.1.117

200 OK

4.7 kB

URL GET HTTP/2
numismaticblog.com/wp-includes/js/wp-emoji-release.min.js
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
JavaScript source, ASCII text, with very long lines (15752)
Size
4.7 kB (4667 bytes)
Hash
b976b651932bfd25b9ddb5b7693d88a7
7fcb7cb5c11227f9213b1e08a07d0212209e1432
4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:29 GMT
last-modified: Tue, 02 Apr 2024 18:53:01 GMT
etag: "4926-615219d8af2c0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4667
content-type: text/javascript
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

secure.gravatar.com/avatar/17389a1a2492a96f5e92dbfd4280cc31?s=300&d=mm&r=g

192.0.73.2

200 OK

4.2 kB

URL GET HTTP/2
secure.gravatar.com/avatar/17389a1a2492a96f5e92dbfd4280cc31?s=300&d=mm&r=g
IP
192.0.73.2:443
ASN
#2635 AUTOMATTIC

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerSectigo Limited
Subject*.gravatar.com
Fingerprint28:34:17:4E:69:95:4B:B9:70:DF:D4:0F:AA:2C:8D:60:F2:45:E7:D0
ValidityTue, 05 Dec 2023 00:00:00 GMT - Sat, 04 Jan 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3
Size
4.2 kB (4211 bytes)
Hash
8756e5ae592d3aacc5274303609052e4
87d7b91f1732dd623eaaaedc8a54a9da60bbcea0
47196664990de7f2d84a92a84d73a3f58f4ac0396ec064bb2b7a1a3e2ade4426

HTTP Headers

GET /avatar/17389a1a2492a96f5e92dbfd4280cc31?s=300&d=mm&r=g HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 14:06:29 GMT
content-type: image/jpeg
content-length: 4211
last-modified: Wed, 11 Jan 1984 08:00:00 GMT
link: <https://gravatar.com/avatar/17389a1a2492a96f5e92dbfd4280cc31?s=300&d=mm&r=g>; rel="canonical"
access-control-allow-origin: *
content-disposition: inline; filename="17389a1a2492a96f5e92dbfd4280cc31.png"
expires: Thu, 25 Apr 2024 14:11:29 GMT
cache-control: max-age=300
x-nc: HIT arn 4
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

numismaticblog.com/favicon.ico

104.225.1.117

302 Found

0 B

URL GET HTTP/2
numismaticblog.com/favicon.ico
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Thu, 25 Apr 2024 14:06:29 GMT
link: <https://numismaticblog.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://numismaticblog.com/wp-includes/images/w-logo-blue-white-bg.png
vary: Accept-Encoding
content-length: 0
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

numismaticblog.com/wp-includes/images/w-logo-blue-white-bg.png

104.225.1.117

200 OK

4.1 kB

URL GET HTTP/2
numismaticblog.com/wp-includes/images/w-logo-blue-white-bg.png
IP
104.225.1.117:443
ASN
#36236 NETACTUATE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerLet's Encrypt
Subjectnumismaticblog.com
Fingerprint1E:85:2B:56:6E:94:1C:EE:BA:AC:A7:B0:CC:00:0C:89:5B:D3:C8:BC
ValidityFri, 15 Mar 2024 01:08:42 GMT - Thu, 13 Jun 2024 01:08:41 GMT

File type
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Size
4.1 kB (4119 bytes)
Hash
000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: numismaticblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 14:06:29 GMT
last-modified: Thu, 28 Sep 2023 18:52:29 GMT
etag: "1017-6066fcf4e612c"
accept-ranges: bytes
content-length: 4119
content-type: image/png
x-powered-by: PHP/7.3.33
server: Apache
X-Firefox-Spdy: h2

fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fvg-I.woff2

216.58.207.227

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fvg-I.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://numismaticblog.com/tutto-quello-che-ce-da-sapere-sul-corso-sullassicurazione-darte/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20168, version 1.0
Size
20 kB (20168 bytes)
Hash
4ff7d98c0d7472644c210dffd62171f7
ed3fa14c311ba0329bd15bc59ebc4761dc6b66a1
e15b441759854e4477fe214540848ceb993199d31c04bc59691dde7ed5621eb7

HTTP Headers

GET /s/cormorantgaramond/v16/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fvg-I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://numismaticblog.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20168
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:14:24 GMT
expires: Wed, 23 Apr 2025 07:14:24 GMT
cache-control: public, max-age=31536000
age: 197525
last-modified: Tue, 09 Aug 2022 02:13:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL User Request GET HTTP/2

IP

ASN

Certificate