{"report_id":"c0e564e4-d5d4-4386-8c20-b24b1c32a945","version":0,"status":"done","tags":[],"date":"2026-08-20T13:07:56Z","url":{"schema":"http","addr":"newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","fqdn":"newsletter.ediscomspa.com","domain":"ediscomspa.com","tld":"com"},"ip":{"addr":"178.255.74.150","port":0,"asn":206205,"as":"Logica S.r.l.","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","fqdn":"newsletter.ediscomspa.com","domain":"ediscomspa.com","tld":"com"},"title":"Visualizzazione Newsletter","dom":{"size":35475,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (705)","md5":"990b9b20cc11f02846ec0b689f297994","sha1":"73b63554ebce1013457c22988dc7f0414ff86459","sha256":"9f3bb8420af7204fc82f1a297499bf5580699425618aa4e79fccfb2f9a3cb18e","sha512":"58ed80031071178159a7d68695d6643bc5b94e82f76078935b9bab84a45c05a921c3176e6695a5a5a88c62019947c83c5a49df6a61a6c239640350344aa92e4d","ssdeep":"384:3Edmfz9KLWwO6ebzIedQuIecg9egOKOq6Zq1z3:3X9KLKZbznddncgMgOZq6M9","tlshash":"d4f21106eef2224d6466e46197263bf9bf78420747058c74bd5d73359f0e6a208a3bbc","dom_hash":"domhashe674a56977b6c3c2c47dcfb8874dd342","first_seen":"2026-08-20T13:07:57.53762Z","last_seen":"2026-08-20T13:07:57.53762Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","fqdn":"newsletter.ediscomspa.com","domain":"ediscomspa.com","tld":"com"},"ip":{"addr":"178.255.74.150","port":0,"asn":206205,"as":"Logica S.r.l.","country":"Italy","country_code":"IT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-24T13:07:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"newsletter.ediscomspa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"showmetheresource.com","ip":{"addr":"172.104.202.246","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"domain_registered":"2021-03-31","domain_rank":3759900,"first_seen":"2021-04-02T14:39:46Z","last_seen":"2026-02-24T14:05:34.246134Z","alert_count":0,"request_count":1,"received_data":493,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"specialdealbox.com","ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-19","domain_rank":1548854,"first_seen":"2018-12-14T13:09:18Z","last_seen":"2026-04-09T15:08:28.951745Z","alert_count":0,"request_count":6,"received_data":97571,"sent_data":3573,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"newsletter.ediscomspa.com","ip":{"addr":"178.255.74.150","port":443,"asn":206205,"as":"Logica S.r.l.","country":"Italy","country_code":"IT"},"domain_registered":"2006-03-10","domain_rank":0,"first_seen":"2012-07-31T14:18:41Z","last_seen":"2026-08-20T12:49:48.019705Z","alert_count":2,"request_count":2,"received_data":38341,"sent_data":1153,"comment":"","tags":null,"fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"showmetheresource.com/v2/open/06nlc4tq8llwtvlbbs8/%7Bemail%7D","fqdn":"showmetheresource.com","domain":"showmetheresource.com","tld":"com"},"ip":{"addr":"172.104.202.246","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.755Z","timestamp":1787231249755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"showmetheresource.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 04:34:07 GMT","end":"Mon, 05 Oct 2026 04:34:06 GMT"},"fingerprint":{"sha1":"FD:DA:AF:88:48:FC:2F:2C:91:4A:53:CA:89:70:24:92:64:80:0B:2F","sha256":"51:3A:65:4E:B2:CC:29:6E:D6:8A:C5:67:AF:3E:BA:5E:2E:4A:41:61:56:B0:4F:02:B1:14:C3:20:8C:AA:3C:CD"}}},"request":{"raw":"GET /v2/open/06nlc4tq8llwtvlbbs8/%7Bemail%7D HTTP/1.1\r\nHost: showmetheresource.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 20 Aug 2026 12:57:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-powered-by: PHP/7.4.28\r\nset-cookie: op[06nlc4tq8llwtvlbbs8]=1; expires=Sat, 19-Sep-2026 13:07:30 GMT; Max-Age=2592000; path=/; secure; SameSite=None\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: max-age=10\r\nx-robots-tag: noindex\r\nx-served-by: showmetheresource.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":493,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-08-20T13:47:32.22479Z","times_seen":69956,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":181,"connect":25,"send":0,"wait":60,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"specialdealbox.com/img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_250x250_amex_logo.jpg","fqdn":"specialdealbox.com","domain":"specialdealbox.com","tld":"com"},"ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.746Z","timestamp":1787231249746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialdealbox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:32:57 GMT","end":"Sat, 07 Nov 2026 23:32:40 GMT"},"fingerprint":{"sha1":"0E:51:06:CF:E5:02:E2:CC:99:78:9B:62:E7:04:61:3C:C0:98:B3:45","sha256":"7B:06:40:EF:89:0D:05:40:01:B1:10:53:19:60:45:DC:4D:53:95:D8:E0:87:FE:75:F3:15:68:95:83:04:C2:39"}}},"request":{"raw":"GET /img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_250x250_amex_logo.jpg HTTP/1.1\r\nHost: specialdealbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 07 Oct 2022 14:31:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 20 Aug 2026 13:07:30 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpMwbWqFOXvLGD99LexttuMGcvGSHTafXayBGaLbDHrqIawU2DksO41y2D6ZBxV40U6hVon1AFX1imHfa%2B69w3OGix%2FxfcURhbZ42CfITYIuND7yt%2Br7ZljrUlVDStFshVRn%2BFQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2e19f0f0edbdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23874\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23874,"size_decoded":24547,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"8958c2c38f3c2bae9789b3c79ffbc6f2","sha1":"ad8c262d9c6e7f5f8cf270d5f92238a94a838f56","sha256":"0bf9ebc7b14b4e0f9570465d0cd939047b0951251b53683c147161e450e6bb89","sha512":"89fdc84f4fb054de1326fc990b1a4408c0a516f63253827750e73a94a5cfd9cfbeca1f917968bce7a03e1740b145e8047436e56023df70a2055248fe0d205da5","ssdeep":"384:RsLm3mBVEI9pIdiEcmCl5l8n2FgCIR1g5n8/PfjhZMhu5kNN:o9TEI7Idi5B8n21II5n8H1ZMZN","tlshash":"e1b2cf37e2b45dbaefc3623aae28125b55e33901d152835c8a0e1455bc4e14dc8da8af","first_seen":"2023-10-20T20:55:36Z","last_seen":"2026-08-20T13:07:57.539702Z","times_seen":5,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":8,"connect":13,"send":0,"wait":255,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"specialdealbox.com/img-ed/AMEX/2022/Ottobre/Platino2/DDBWI.gif","fqdn":"specialdealbox.com","domain":"specialdealbox.com","tld":"com"},"ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.748Z","timestamp":1787231249748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialdealbox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:32:57 GMT","end":"Sat, 07 Nov 2026 23:32:40 GMT"},"fingerprint":{"sha1":"0E:51:06:CF:E5:02:E2:CC:99:78:9B:62:E7:04:61:3C:C0:98:B3:45","sha256":"7B:06:40:EF:89:0D:05:40:01:B1:10:53:19:60:45:DC:4D:53:95:D8:E0:87:FE:75:F3:15:68:95:83:04:C2:39"}}},"request":{"raw":"GET /img-ed/AMEX/2022/Ottobre/Platino2/DDBWI.gif HTTP/1.1\r\nHost: specialdealbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 07 Oct 2022 14:31:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/gif\r\ndate: Thu, 20 Aug 2026 13:07:29 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XO2URe9ndxOPoN8BJtL0gXqEj%2B2kCkgS1iCqEe6VtUnGZTOGvKI6V7oysZie5J9xXBDjDMulhXrt%2FTAcxtziKlAa4w3pjVxCIDWQhxn%2FdBtk9BjagDowg72s9MvgKdnXbTkYajw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2e19f0f0edcdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5458,"size_decoded":6127,"mime_type":"image/gif","magic":"GIF image data, version 89a, 225 x 114","md5":"8517b6664f5e2430e1eb3e6f11600363","sha1":"aa1cbc658a096f76a0097f3498ee1fb17d1f312f","sha256":"07feae8edecf082e82fa73c68c81235c67f12a540ce3b703eb7985a6aaa5bcd8","sha512":"1be52ae29cdcf407d9ed00337a9e1994c88622fb9e30eb543d93647efa2196fe6ec064d99b6d71140f8c82b7225f495835342c8c12773551601dc2a403bafdb2","ssdeep":"96:gp9q2UQs/ci8phd+k3J78vhT7VCbkDxHz2ueH9iHURbQDrKdIh/0IHg6Gg:gpoRe2k3F8BgkDIlkHURbQDrK6h/bA6v","tlshash":"9fb18e0f8b442941c888d2f01efbd2a33f0764d1aae42b9a927f859645691635ecf4e3","first_seen":"2026-08-20T13:07:57.54084Z","last_seen":"2026-08-20T13:07:57.54084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":8,"dns":5,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"specialdealbox.com/img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_card_logo.jpg","fqdn":"specialdealbox.com","domain":"specialdealbox.com","tld":"com"},"ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.749Z","timestamp":1787231249749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialdealbox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:32:57 GMT","end":"Sat, 07 Nov 2026 23:32:40 GMT"},"fingerprint":{"sha1":"0E:51:06:CF:E5:02:E2:CC:99:78:9B:62:E7:04:61:3C:C0:98:B3:45","sha256":"7B:06:40:EF:89:0D:05:40:01:B1:10:53:19:60:45:DC:4D:53:95:D8:E0:87:FE:75:F3:15:68:95:83:04:C2:39"}}},"request":{"raw":"GET /img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_card_logo.jpg HTTP/1.1\r\nHost: specialdealbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 07 Oct 2022 14:31:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 20 Aug 2026 13:07:30 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EZiBtYyUM6DbzCt2ilQ%2BIXXqR5IfCbq8q%2B%2BoD8i3UoJ6IAiLKGx0Zyg1XumiDhJi9UGvV0tAuUBgoHWczMcYFDW3hsaVD4z3EgK2OH6vI4%2F%2BorcsVjC8BO03bOPCpom%2FdaESRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2e19f0f0ed9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13706\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13706,"size_decoded":14383,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x158, components 3","md5":"41fa9225b6e844110f0127c17f3107dd","sha1":"63f84a7a7c5e627bced0ba25dfc9c1193fbe9ccc","sha256":"4a7f2393c40ce2b918a8f13fb9e8cd6e59cb4ba2cf479ba28c9e21d7635d9480","sha512":"f8759b9b2997f405b14c7f903167c2540f0d3a8bf45972a84095029c395e71c8c0d4d9e4e56e40571fa12ca7b3c5c1c0866b904919a257234a9ee853ee43f9cc","ssdeep":"384:/8Xrh9wNWV5ijNH3guHe5KAEP0tT4R+0cPExCrvZSH4q:/8X1OpjNH31HecAb8UCUrAH4q","tlshash":"5552cf72170f69cbd7b70af120e6d7b6d2440fda427952bd19a0ec0b503a6cf49a94b0","first_seen":"2026-08-20T13:07:57.542017Z","last_seen":"2026-08-20T13:07:57.542017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":8,"dns":4,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"specialdealbox.com/img-ed/AMEX/2022/Ottobre/Platino2/main_vis_desk.jpg","fqdn":"specialdealbox.com","domain":"specialdealbox.com","tld":"com"},"ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.750Z","timestamp":1787231249750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialdealbox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:32:57 GMT","end":"Sat, 07 Nov 2026 23:32:40 GMT"},"fingerprint":{"sha1":"0E:51:06:CF:E5:02:E2:CC:99:78:9B:62:E7:04:61:3C:C0:98:B3:45","sha256":"7B:06:40:EF:89:0D:05:40:01:B1:10:53:19:60:45:DC:4D:53:95:D8:E0:87:FE:75:F3:15:68:95:83:04:C2:39"}}},"request":{"raw":"GET /img-ed/AMEX/2022/Ottobre/Platino2/main_vis_desk.jpg HTTP/1.1\r\nHost: specialdealbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 07 Oct 2022 14:31:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 20 Aug 2026 13:07:30 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qu3%2BDpEq09HtZoozpEgnRoNabDyb9VRHu7fsFqAkDxGj5y7Btub9nvxv%2FOtxjuBQaASotM84Lh%2Fai4HqAxpLrJ0SyepY1J6cuEAk0dTWt4lLKsmShk48OyzLnGquWXiyG%2ByfWOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2e19f0f0edddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35980,"size_decoded":36653,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 550x320, components 3","md5":"c3f61226aa22820b8746e18a0d2dcf25","sha1":"ae1e4b603922208770764a9e8666387bb33846ef","sha256":"299f4358a73afcc96974e472e83008aab4ca443910b41f4b7bb573ff3d9272a0","sha512":"67a771d3ace35af60dee377adc102bb29591596e9eb20b6b36a08a86f1b4dbf47c24b3d59989e9a0776fdafadbdad66c283d2412bc027c1c8be1cd16f653ec6c","ssdeep":"768:ZodbG40bfVPW+TTif3Qufcix+xV6+Rm9jrMo+6WpJvoid:WYh7PiPQuf5aV6impM6WpJvoid","tlshash":"acf2f2226593b770dcdef03ac6ee71454c8e0a13d9e4c35aacf688e3ec193a1358558d","first_seen":"2026-08-20T13:07:57.543113Z","last_seen":"2026-08-20T13:07:57.543113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":8,"dns":3,"connect":0,"send":0,"wait":252,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"specialdealbox.com/img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_WSP-Grey.png","fqdn":"specialdealbox.com","domain":"specialdealbox.com","tld":"com"},"ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.757Z","timestamp":1787231249757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialdealbox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:32:57 GMT","end":"Sat, 07 Nov 2026 23:32:40 GMT"},"fingerprint":{"sha1":"0E:51:06:CF:E5:02:E2:CC:99:78:9B:62:E7:04:61:3C:C0:98:B3:45","sha256":"7B:06:40:EF:89:0D:05:40:01:B1:10:53:19:60:45:DC:4D:53:95:D8:E0:87:FE:75:F3:15:68:95:83:04:C2:39"}}},"request":{"raw":"GET /img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_WSP-Grey.png HTTP/1.1\r\nHost: specialdealbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 07 Oct 2022 14:31:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Thu, 20 Aug 2026 13:07:30 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfgJHcMw%2Bajn1iB%2BJSta2UVrNIsH%2BU2Pr919SB6vToWKtq8UjUNy1pMUB4C7E6AvTAEhnU7n1o2zYpOUzyDe%2BCQ00etfkdTAH0sdJJmGDB2a2DgwkdoE3JzsyRoXXo0bgv44g6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2e19f0f0edadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12590,"size_decoded":13262,"mime_type":"image/png","magic":"PNG image data, 192 x 183, 4-bit colormap, non-interlaced","md5":"83f1ff4939a9ac43ef1746c03d832bab","sha1":"e7be5f7ec8b2ef9ba5bf7ccbed8601d1c1f72f67","sha256":"3cd8a23a675a074bb2d295ab4389c41bc61c2cd32d3ed2c4c1cb11141d3650cd","sha512":"d99050b8f6191bb687321618c6e5dae26d8bd26649c432c142e2d06ebb8b32cc449aca15a8db05cc7b4fdd1fed5ee9eea0c6e80095a74b1a6d323411b8db3b11","ssdeep":"384:3O/BQeaVM7HJSg0HvTKNHMhERNE50X81y1i5/Oyd:+/BQeaVYmHYRNE50T85Rd","tlshash":"1842d0e772b8fbc1a154c53f089027ae64015867468ded8d2a2de34f28dd41e8ee5327","first_seen":"2023-10-20T20:55:36Z","last_seen":"2026-08-20T13:07:57.544074Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":254,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newsletter.ediscomspa.com/favicon.ico","fqdn":"newsletter.ediscomspa.com","domain":"ediscomspa.com","tld":"com"},"ip":{"addr":"178.255.74.150","port":443,"asn":206205,"as":"Logica S.r.l.","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:30.114Z","timestamp":1787231250114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newsletter.ediscomspa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 06:55:09 GMT","end":"Fri, 30 Oct 2026 06:55:08 GMT"},"fingerprint":{"sha1":"2E:F5:15:E4:4D:7D:46:6D:BC:62:3E:1E:3C:D8:B8:23:F3:CB:21:4C","sha256":"C5:44:80:76:16:91:E5:55:F7:EB:BA:0A:B3:8B:80:72:6C:77:2D:8E:9E:D5:89:5C:C6:EE:82:F9:9E:F0:E7:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: newsletter.ediscomspa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625\r\nCookie: ASPSESSIONIDAEDCACRB=LFKLPJNCLMDCKIHOLKAMGFPN\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/8.5\r\nDate: Thu, 20 Aug 2026 13:07:05 GMT\r\nContent-Length: 1311\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1311,"size_decoded":1448,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4f0eb96f01bcec366cf646ff85bd2467","sha1":"cf8563b9188b7f575c88bf43ba4a16aecb637069","sha256":"b5341665936e979325a8aff3ccd2a02c7e272bcf88e8b3b1f8691577a3d85ff7","sha512":"bc8ef54babc403e95336054569b43dfdaaeaaa84f3cbfaca6e664822896b3be04613b5382e1323e44ded7d40b2efe4d9b2afbbc71b709da8efaf03331dc484ba","ssdeep":"","tlshash":"d421533955946404ee93d1f461f27796bb47c58be98f2729b1027327d9cb5a3c0e3388","first_seen":"2025-05-10T09:33:51.033079Z","last_seen":"2026-08-20T13:07:57.545321Z","times_seen":56,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"newsletter.ediscomspa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","fqdn":"newsletter.ediscomspa.com","domain":"ediscomspa.com","tld":"com"},"ip":{"addr":"178.255.74.150","port":443,"asn":206205,"as":"Logica S.r.l.","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T13:07:28.770Z","timestamp":1787231248770,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newsletter.ediscomspa.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 06:55:09 GMT","end":"Fri, 30 Oct 2026 06:55:08 GMT"},"fingerprint":{"sha1":"2E:F5:15:E4:4D:7D:46:6D:BC:62:3E:1E:3C:D8:B8:23:F3:CB:21:4C","sha256":"C5:44:80:76:16:91:E5:55:F7:EB:BA:0A:B3:8B:80:72:6C:77:2D:8E:9E:D5:89:5C:C6:EE:82:F9:9E:F0:E7:38"}}},"request":{"raw":"GET /view_newsletter.asp?id_newsletter=39625 HTTP/1.1\r\nHost: newsletter.ediscomspa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Type: text/html\r\nServer: Microsoft-IIS/8.5\r\nSet-Cookie: ASPSESSIONIDAEDCACRB=LFKLPJNCLMDCKIHOLKAMGFPN; secure; path=/\r\nDate: Thu, 20 Aug 2026 13:07:04 GMT\r\nContent-Length: 36663\r\n\r\n","headers":null,"cookies":[{"name":"ASPSESSIONIDAEDCACRB","value":"LFKLPJNCLMDCKIHOLKAMGFPN","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"ASPSESSIONIDAEDCACRB=LFKLPJNCLMDCKIHOLKAMGFPN; secure; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":36663,"size_decoded":36893,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (738), with CRLF line terminators","md5":"d31923a312d5510852dc77e38711e41f","sha1":"fd7f38b81203108566b674d2cab52e0680184503","sha256":"0c2449f2e8facd8a30556f581b0a2b7f5643b3e3301eab66dbc575fcb0c879b9","sha512":"e78864e7944194f403ee4cd01dc3d8eaf64b74b78c3c247fc72f915bc9fa5688b9dedd1af4c6477afa671121c74ba901e6276c3b62c6a26ba0ece1cad6e23b64","ssdeep":"384:TIejwGMiD901uhWTKWwQNWuSWXIus1UqqHBzO:TgXiD9R4TNwduFXDs1U7H4","tlshash":"7ef2db26e6d0664e4476a271d7236bbaff7a0207470109b8bd5d73272f3d4a24853fb8","first_seen":"2026-08-20T13:07:57.545953Z","last_seen":"2026-08-20T13:07:57.545953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":158,"connect":43,"send":0,"wait":166,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"newsletter.ediscomspa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"specialdealbox.com/img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_DDBWI-tagline.png","fqdn":"specialdealbox.com","domain":"specialdealbox.com","tld":"com"},"ip":{"addr":"172.67.139.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newsletter.ediscomspa.com/view_newsletter.asp?id_newsletter=39625","date":"2026-08-20T13:07:29.751Z","timestamp":1787231249751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialdealbox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:32:57 GMT","end":"Sat, 07 Nov 2026 23:32:40 GMT"},"fingerprint":{"sha1":"0E:51:06:CF:E5:02:E2:CC:99:78:9B:62:E7:04:61:3C:C0:98:B3:45","sha256":"7B:06:40:EF:89:0D:05:40:01:B1:10:53:19:60:45:DC:4D:53:95:D8:E0:87:FE:75:F3:15:68:95:83:04:C2:39"}}},"request":{"raw":"GET /img-ed/AMEX/2022/Ottobre/Platino2/AMXIMG_DDBWI-tagline.png HTTP/1.1\r\nHost: specialdealbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newsletter.ediscomspa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Fri, 07 Oct 2022 14:31:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Thu, 20 Aug 2026 13:07:29 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYJrw1ADh14nB5fJYhaDq9iight7Vw82XmkjtvijSU6uOVBiCDVHbql2nuh4abYR08%2BP%2BcxTR4b6%2Fkl019fgB5VbZKiJihIc48n54lxywGYNYdfVKXHjTKFHi%2FbinCeAg%2BCtujE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2e19f0f0ededfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1926\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1926,"size_decoded":2599,"mime_type":"image/png","magic":"PNG image data, 268 x 28, 8-bit colormap, non-interlaced","md5":"41b4b802d490dce03c3c7d9aad99206b","sha1":"6f390452e4d35da68bec90f4aea3b69eb696c4f7","sha256":"208766ba4e7902cefe057d193ab4494e217564ccf97b2f15aa05f7178571ba33","sha512":"e717e1072299fca7c10ea8ce8bd7a5ec1c0207e669622a6fdce880f5dad37151cdcc1a4ecc3a308b4e7612ac75cc3937949dfe79de8df309b7e67f9d05f0e558","ssdeep":"","tlshash":"3441e9aab8c4a56d00176634dafc229b0222ce992144cb2b82d8b117217d76414fa15b","first_seen":"2026-08-20T13:07:57.547081Z","last_seen":"2026-08-20T13:07:57.547081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":7,"dns":1,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}