Edit tour

Windows Analysis Report
https://www.snam.it/it/i-nostri-business/trasporto.html

Overview

General Information

Sample URL:	https://www.snam.it/it/i-nostri-business/trasporto.html
Analysis ID:	1500457
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on image similarity)

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,972536198101435648,18239361239193126311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.snam.it/it/i-nostri-business/trasporto.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_-2D91_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL&svrid=-91&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1686053479494&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=2856230457&en=xrudmiqw&end=1 HTTP/1.1Host: ca-dynatrace.snam.itConnection: keep-aliveContent-Length: 427sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.snam.itSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.snam.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.snam.it/it/i-nostri-business/trasporto.html	HTTP Parser: Iframe src: https://snam.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.snam.it
Source: https://www.snam.it/it/home.html	HTTP Parser: Iframe src: https://syndication.teleborsa.it/SNAM/2023/it/plus.html
Source: https://www.snam.it/it/home.html	HTTP Parser: Iframe src: https://syndication.teleborsa.it/SNAM/2023/it/plus.html

Source: https://www.snam.it/it/i-nostri-business/trasporto.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.snam.it/it/sign-up.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.snam.it/it/disclaimer.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.snam.it/en/our-businesses/transportation.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.snam.it/it/i-nostri-business.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.snam.it/it/la-tua-area-personale.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://www.snam.it/it/home.html	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.snam.it/it/i-nostri-business/trasporto.html	HTTP Parser: Title: Trasporto does not match URL
Source: https://www.snam.it/it/sign-up.html	HTTP Parser: Title: Registrazione does not match URL
Source: https://www.snam.it/it/disclaimer.html	HTTP Parser: Title: Disclaimer does not match URL
Source: https://www.snam.it/en/our-businesses/transportation.html	HTTP Parser: Title: Transportation does not match URL
Source: https://www.snam.it/it/i-nostri-business.html	HTTP Parser: Title: I nostri business does not match URL
Source: https://www.snam.it/it/la-tua-area-personale.html	HTTP Parser: Title: La tua area personale does not match URL
Source: https://www.snam.it/it/home.html	HTTP Parser: Title: Home does not match URL

Source: https://www.snam.it/it/sign-up.html	HTTP Parser: No favicon
Source: https://www.snam.it/it/home.html	HTTP Parser: No favicon

Source: https://www.snam.it/it/i-nostri-business/trasporto.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/sign-up.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/sign-up.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/disclaimer.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/en/our-businesses/transportation.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/i-nostri-business.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/i-nostri-business.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/la-tua-area-personale.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/home.html	HTTP Parser: No <meta name="author".. found
Source: https://www.snam.it/it/home.html	HTTP Parser: No <meta name="author".. found

Source: https://www.snam.it/it/i-nostri-business/trasporto.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/sign-up.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/sign-up.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/disclaimer.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/en/our-businesses/transportation.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/i-nostri-business.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/i-nostri-business.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/la-tua-area-personale.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/home.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.snam.it/it/home.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.snam.it
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: ca-dynatrace.snam.it
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: snam.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: tmd.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: syndication.teleborsa.it
Source: global traffic	DNS traffic detected: DNS query: cdn.teleborsa.it

Source: chromecache_467.1.dr, chromecache_579.1.dr	String found in binary or memory: http://code.highcharts.com/4.1.7/gfx/vml-radial-gradient.png
Source: chromecache_467.1.dr, chromecache_579.1.dr	String found in binary or memory: http://code.highcharts.com/4.1.7/modules/canvas-tools.js
Source: chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_391.1.dr, chromecache_431.1.dr, chromecache_399.1.dr, chromecache_321.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_467.1.dr, chromecache_579.1.dr	String found in binary or memory: http://www.highcharts.com
Source: chromecache_528.1.dr, chromecache_421.1.dr	String found in binary or memory: http://www.inkscape.org/)
Source: chromecache_574.1.dr, chromecache_484.1.dr	String found in binary or memory: https://assets.adobedtm.com/be222bf082a0/6e8ce34435c3/launch-f0d6095b07a9.js
Source: chromecache_476.1.dr, chromecache_363.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_279.1.dr, chromecache_390.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_431.1.dr, chromecache_399.1.dr	String found in binary or memory: https://ca-dynatrace.snam.it:443/bf/dbcc685e-ca5a-424d-9188-76003a08b747
Source: chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_431.1.dr, chromecache_399.1.dr	String found in binary or memory: https://ca-dynatrace.snam.it:443/jstag/managed/ruxitagent_A27NVfhqrux_10265230425083909.js
Source: chromecache_350.1.dr	String found in binary or memory: https://cdn.teleborsa.it/FontAwesome/6.5.1/css/all.min.css
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_523.1.dr	String found in binary or memory: https://flickity.metafizzy.co
Source: chromecache_353.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_353.1.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_350.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_350.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Oxygen:wght
Source: chromecache_350.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oxygen/v15/2sDcZG1Wl4LcnbuCNWgzZmW5O7w.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oxygen/v15/2sDcZG1Wl4LcnbuCNWgzaGW5.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oxygen/v15/2sDfZG1Wl4LcnbuKgE0mV0Q.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oxygen/v15/2sDfZG1Wl4LcnbuKjk0m.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcg72j00.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcw72j00.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfA72j00.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3js2yNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jvGyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jvWyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jvmyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvGyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvWyNL4U.woff2)
Source: chromecache_294.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2)
Source: chromecache_288.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_288.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_391.1.dr, chromecache_321.1.dr	String found in binary or memory: https://rum.hlx.page
Source: chromecache_288.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_431.1.dr, chromecache_399.1.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr, chromecache_308.1.dr, chromecache_489.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__.
Source: chromecache_246.1.dr, chromecache_308.1.dr, chromecache_489.1.dr, chromecache_343.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__en.js
Source: chromecache_313.1.dr	String found in binary or memory: https://www.snam.it/en/our-businesses/transportation.html
Source: chromecache_431.1.dr	String found in binary or memory: https://www.snam.it/it/disclaimer.html
Source: chromecache_304.1.dr	String found in binary or memory: https://www.snam.it/it/home.html
Source: chromecache_505.1.dr	String found in binary or memory: https://www.snam.it/it/i-nostri-business.html
Source: chromecache_399.1.dr	String found in binary or memory: https://www.snam.it/it/i-nostri-business/trasporto.html
Source: chromecache_583.1.dr	String found in binary or memory: https://www.snam.it/it/la-tua-area-personale.html
Source: chromecache_284.1.dr	String found in binary or memory: https://www.snam.it/it/sign-up.html

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,972536198101435648,18239361239193126311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.snam.it/it/i-nostri-business/trasporto.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,972536198101435648,18239361239193126311,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://fontawesome.com/license	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__.	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://snam.demdex.net/dest5.html?d_nsid=0	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&bp=3&app=3700943e4e878813&crc=3932056870&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fla-tua-area-personale.html&bp=3&app=3700943e4e878813&crc=4013851771&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/jstag/managed/ruxitagent_A27NVfhqrux_10265230425083909.js	0%	Avira URL Cloud	safe
https://www.dynatrace.com/company/trust-center/customers/reports/	0%	Avira URL Cloud	safe
https://flickity.metafizzy.co	0%	Avira URL Cloud	safe
http://www.inkscape.org/)	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fdisclaimer.html&bp=3&app=3700943e4e878813&crc=3799192632&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fdisclaimer.html&bp=3&app=3700943e4e878813&crc=3187932227&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business.html&bp=3&app=3700943e4e878813&crc=4185954832&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://syndication.teleborsa.it/SNAM/2023/persist/js/snam.min.js	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/jstag/managed/ruxitagent_A7NVfhqrux_10295240705110949.js	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fla-tua-area-personale.html&bp=3&app=3700943e4e878813&crc=195530185&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_-2D91_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL&svrid=-91&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1686053479494&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=2856230457&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=411&dpuuid=Zs8R3QAAAJ36RANe	0%	Avira URL Cloud	safe
https://syndication.teleborsa.it/SNAM/2023/persist/css/plus.min.css	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&bp=3&app=3700943e4e878813&crc=671872448&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it:443/jstag/managed/ruxitagent_A27NVfhqrux_10265230425083909.js	0%	Avira URL Cloud	safe
https://syndication.teleborsa.it/persist/addons/iFrameResizer/iframeResizer.contentWindow_4_3_2.min.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s81788316077771?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A33%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=La%20tua%20area%20personale&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fla-tua-area-personale.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://cdn.teleborsa.it/FontAwesome/6.5.1/css/all.min.css	0%	Avira URL Cloud	safe
https://syndication.teleborsa.it/persist/js/Chart/PerformanceLineChart.min.js?cv=0.2.2	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=1609914968&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fen%2Four-businesses%2Ftransportation.html&bp=3&app=3700943e4e878813&crc=1903314205&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://syndication.teleborsa.it/SNAM/2023/it/plus.html	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business.html&bp=3&app=3700943e4e878813&crc=57497965&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s84095697203619?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A18%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Disclaimer&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fdisclaimer.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=1040694273&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
http://www.highcharts.com	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it:443/bf/dbcc685e-ca5a-424d-9188-76003a08b747	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/be222bf082a0/6e8ce34435c3/launch-f0d6095b07a9.js	0%	Avira URL Cloud	safe
https://rum.hlx.page	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s87212820889711?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A2%3A35%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Trasporto&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&bp=3&app=3700943e4e878813&crc=203030189&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&bp=3&app=3700943e4e878813&crc=968253421&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://cdn.teleborsa.it/Highcharts4.1.7/js/highcharts.js	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s83804372540357?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A6%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Registrazione&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c.&a.&activitymap.&page=Trasporto&link=Accedi&region=top-bar&pageIDType=1&.activitymap&.a&.c&pid=Trasporto&pidt=1&oid=functioncn%28%29%7B%7D&oidt=2&ot=BUTTON&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
http://code.highcharts.com/4.1.7/modules/canvas-tools.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfcPlUlAAAAAMe2wSjUIe47EakLRcuzLfceuCzs&co=aHR0cHM6Ly93d3cuc25hbS5pdDo0NDM.&hl=en&type=image&v=i7X0JrnYWy9Y_5EYdoFM79kV&theme=light&size=invisible&badge=bottomright&cb=or5kiciv5zyd	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=72062BC258B04E6D0A495D24%40AdobeOrg&d_nsid=0&ts=1724846553952	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fen%2Four-businesses%2Ftransportation.html&bp=3&app=3700943e4e878813&crc=4093985978&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s85584433387192?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A23%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Transportation&g=https%3A%2F%2Fwww.snam.it%2Fen%2Four-businesses%2Ftransportation.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&bp=3&app=3700943e4e878813&crc=1192535706&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s83718307015492?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A38%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Home&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
http://code.highcharts.com/4.1.7/gfx/vml-radial-gradient.png	0%	Avira URL Cloud	safe
https://www.google.com/js/bg/PSKopaksc4v0TeE9MSufUBd6uLsTLN3_1JKIESb4JYg.js	0%	Avira URL Cloud	safe
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s86968392264752?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A30%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=I%20nostri%20business&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&bp=3&app=3700943e4e878813&crc=263986321&en=xrudmiqw&end=1	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
tlb-mi-varnish.teleborsa.it	212.239.56.65	true	false	unknown
ca-dynatrace.snam.it	213.255.26.224	true	false	unknown
tmd.sc.omtrdc.net	63.140.62.222	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	108.129.9.96	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
www.snam.it	unknown	unknown	false	unknown
snam.demdex.net	unknown	unknown	false	unknown
cdn.teleborsa.it	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
syndication.teleborsa.it	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.snam.it/it/la-tua-area-personale.html	false		unknown
https://www.snam.it/it/sign-up.html	false		unknown
https://snam.demdex.net/dest5.html?d_nsid=0	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fla-tua-area-personale.html&bp=3&app=3700943e4e878813&crc=4013851771&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/jstag/managed/ruxitagent_A27NVfhqrux_10265230425083909.js	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&bp=3&app=3700943e4e878813&crc=3932056870&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fdisclaimer.html&bp=3&app=3700943e4e878813&crc=3187932227&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business.html&bp=3&app=3700943e4e878813&crc=4185954832&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fdisclaimer.html&bp=3&app=3700943e4e878813&crc=3799192632&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://syndication.teleborsa.it/SNAM/2023/persist/js/snam.min.js	false	Avira URL Cloud: safe	unknown
https://www.snam.it/it/i-nostri-business/trasporto.html	true		unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_-2D91_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL&svrid=-91&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1686053479494&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=2856230457&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://syndication.teleborsa.it/SNAM/2023/persist/css/plus.min.css	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/jstag/managed/ruxitagent_A7NVfhqrux_10295240705110949.js	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fla-tua-area-personale.html&bp=3&app=3700943e4e878813&crc=195530185&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&bp=3&app=3700943e4e878813&crc=671872448&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=411&dpuuid=Zs8R3QAAAJ36RANe	false	Avira URL Cloud: safe	unknown
https://syndication.teleborsa.it/persist/addons/iFrameResizer/iframeResizer.contentWindow_4_3_2.min.js	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business.html&bp=3&app=3700943e4e878813&crc=57497965&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://cdn.teleborsa.it/FontAwesome/6.5.1/css/all.min.css	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=1609914968&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s81788316077771?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A33%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=La%20tua%20area%20personale&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fla-tua-area-personale.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://syndication.teleborsa.it/persist/js/Chart/PerformanceLineChart.min.js?cv=0.2.2	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fen%2Four-businesses%2Ftransportation.html&bp=3&app=3700943e4e878813&crc=1903314205&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://syndication.teleborsa.it/SNAM/2023/it/plus.html	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&bp=3&app=3700943e4e878813&crc=1040694273&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s84095697203619?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A18%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Disclaimer&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fdisclaimer.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV	false	Avira URL Cloud: safe	unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s87212820889711?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A2%3A35%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Trasporto&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&bp=3&app=3700943e4e878813&crc=203030189&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&bp=3&app=3700943e4e878813&crc=968253421&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://cdn.teleborsa.it/Highcharts4.1.7/js/highcharts.js	false	Avira URL Cloud: safe	unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s83804372540357?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A6%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Registrazione&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c.&a.&activitymap.&page=Trasporto&link=Accedi&region=top-bar&pageIDType=1&.activitymap&.a&.c&pid=Trasporto&pidt=1&oid=functioncn%28%29%7B%7D&oidt=2&ot=BUTTON&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfcPlUlAAAAAMe2wSjUIe47EakLRcuzLfceuCzs&co=aHR0cHM6Ly93d3cuc25hbS5pdDo0NDM.&hl=en&type=image&v=i7X0JrnYWy9Y_5EYdoFM79kV&theme=light&size=invisible&badge=bottomright&cb=or5kiciv5zyd	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=72062BC258B04E6D0A495D24%40AdobeOrg&d_nsid=0&ts=1724846553952	false	Avira URL Cloud: safe	unknown
https://www.snam.it/it/disclaimer.html	false		unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s85584433387192?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A23%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Transportation&g=https%3A%2F%2Fwww.snam.it%2Fen%2Four-businesses%2Ftransportation.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fen%2Four-businesses%2Ftransportation.html&bp=3&app=3700943e4e878813&crc=4093985978&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fsign-up.html&bp=3&app=3700943e4e878813&crc=1192535706&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown
https://www.snam.it/en/our-businesses/transportation.html	false		unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s83718307015492?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A38%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Home&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://www.snam.it/it/i-nostri-business.html	false		unknown
https://www.google.com/js/bg/PSKopaksc4v0TeE9MSufUBd6uLsTLN3_1JKIESb4JYg.js	false	Avira URL Cloud: safe	unknown
https://tmd.sc.omtrdc.net/b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s86968392264752?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A3%3A30%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=I%20nostri%20business&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://www.snam.it/it/home.html	false		unknown
https://ca-dynatrace.snam.it/bf/dbcc685e-ca5a-424d-9188-76003a08b747?type=js3&sn=v_4_srv_7_sn_IMULGK9F4GCO1BBPFSL92KAASKOUCNRL_app-3A3700943e4e878813_1_ol_0_perc_100000_mul_1&svrid=7&flavor=cors&vi=HFJSEPRUSVJHHAFNLKCWRAWUPKRSMQLP-0&modifiedSince=1724733968440&rf=https%3A%2F%2Fwww.snam.it%2Fit%2Fhome.html&bp=3&app=3700943e4e878813&crc=263986321&en=xrudmiqw&end=1	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://flickity.metafizzy.co	chromecache_523.1.dr	false	Avira URL Cloud: safe	unknown
http://www.inkscape.org/)	chromecache_528.1.dr, chromecache_421.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_431.1.dr, chromecache_399.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_279.1.dr, chromecache_390.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_353.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.com/license	chromecache_353.1.dr	false	URL Reputation: safe	unknown
https://ca-dynatrace.snam.it:443/jstag/managed/ruxitagent_A27NVfhqrux_10265230425083909.js	chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_431.1.dr, chromecache_399.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js	chromecache_476.1.dr, chromecache_363.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr, chromecache_308.1.dr, chromecache_489.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_288.1.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_391.1.dr, chromecache_431.1.dr, chromecache_399.1.dr, chromecache_321.1.dr	false	Avira URL Cloud: safe	unknown
https://ca-dynatrace.snam.it:443/bf/dbcc685e-ca5a-424d-9188-76003a08b747	chromecache_583.1.dr, chromecache_505.1.dr, chromecache_313.1.dr, chromecache_284.1.dr, chromecache_304.1.dr, chromecache_431.1.dr, chromecache_399.1.dr	false	Avira URL Cloud: safe	unknown
http://www.highcharts.com	chromecache_467.1.dr, chromecache_579.1.dr	false	Avira URL Cloud: safe	unknown
https://rum.hlx.page	chromecache_391.1.dr, chromecache_321.1.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://assets.adobedtm.com/be222bf082a0/6e8ce34435c3/launch-f0d6095b07a9.js	chromecache_574.1.dr, chromecache_484.1.dr	false	Avira URL Cloud: safe	unknown
http://code.highcharts.com/4.1.7/modules/canvas-tools.js	chromecache_467.1.dr, chromecache_579.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_288.1.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__.	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_447.1.dr, chromecache_453.1.dr, chromecache_288.1.dr	false	URL Reputation: safe	unknown
http://code.highcharts.com/4.1.7/gfx/vml-radial-gradient.png	chromecache_467.1.dr, chromecache_579.1.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
213.255.26.224	ca-dynatrace.snam.it	Italy	8968	BT-ITALIAIT	false
108.129.9.96	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
212.239.56.65	tlb-mi-varnish.teleborsa.it	Italy	3313	INET-ASIT	false
54.171.26.222	unknown	United States	16509	AMAZON-02US	false
63.140.62.222	tmd.sc.omtrdc.net	United States	15224	OMNITUREUS	false
52.215.66.230	unknown	United States	16509	AMAZON-02US	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
63.140.62.17	unknown	United States	15224	OMNITUREUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500457
Start date and time:	2024-08-28 14:01:36 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.snam.it/it/i-nostri-business/trasporto.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@25/594@52/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.snam.it/it/sign-up.html Browse: https://www.snam.it/it/disclaimer.html Browse: https://www.snam.it/en/our-businesses/transportation.html Browse: https://www.snam.it/it/i-nostri-business.html Browse: https://www.snam.it/it/la-tua-area-personale.html Browse: https://www.snam.it/it/home.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 11:02:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.97391685477338
Encrypted:	false
SSDEEP:	48:8QYduTKyaCHtidAKZdA19ehwiZUklqehYgy+3:8m/Ffgy
MD5:	440BE3E38164E186BB6CA19E067BD44D
SHA1:	93BA21F730DE594625CC92C2DF0E5D7D6A6A0F5E
SHA-256:	48D150D27A179AD94E5520F987E6C8168DD3CE8ABA940AC17F06136D652FCEB5
SHA-512:	40B45101565D52347149E126C276A7C1A786D3ED110650C7B2B9D219D0CE46D8BD836D9D4FBDB012AE8ACFE4C30791F655A048E49CA88C038AEE02895DD4489D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0(B...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YL`....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YL`....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YL`....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YL`..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YO`...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 14:02:28.384792089 CEST	53	51598	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:28.406560898 CEST	53	53327	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:29.429008961 CEST	53	57764	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:30.072758913 CEST	61242	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:30.072892904 CEST	61073	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.537980080 CEST	50108	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.538285971 CEST	64939	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.757641077 CEST	51377	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.757786989 CEST	55904	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.758013010 CEST	57892	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.758122921 CEST	50751	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.777556896 CEST	53	50751	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:32.777607918 CEST	53	57892	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:32.951982975 CEST	50809	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.953135967 CEST	60022	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:32.958587885 CEST	53	50809	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:32.960244894 CEST	53	60022	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:33.271506071 CEST	53	50768	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:34.807938099 CEST	60366	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:34.808969975 CEST	62562	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:34.816327095 CEST	53	60366	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:34.816817045 CEST	53	62562	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:34.833437920 CEST	57733	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:34.833841085 CEST	54817	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:34.835880995 CEST	49606	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:34.836136103 CEST	56602	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:34.846609116 CEST	53	56602	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:34.847914934 CEST	53	49606	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:35.874245882 CEST	62739	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:35.874399900 CEST	62815	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:35.874639988 CEST	63858	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:35.875073910 CEST	54079	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:35.882695913 CEST	53	54079	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:35.898833036 CEST	53	62815	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:35.900398970 CEST	53	62739	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:36.312052965 CEST	58832	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:36.312736034 CEST	62994	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:36.319113970 CEST	53	58832	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:36.320518017 CEST	53	62994	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:36.443990946 CEST	62400	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:36.444170952 CEST	55081	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:36.454109907 CEST	53	62400	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:36.456953049 CEST	53	55081	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:37.642020941 CEST	62243	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:37.642263889 CEST	64265	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:02:37.651420116 CEST	53	64265	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:37.651433945 CEST	53	62243	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:42.493978024 CEST	53	53904	1.1.1.1	192.168.2.5
Aug 28, 2024 14:02:46.749093056 CEST	53	61026	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:06.236856937 CEST	53	55883	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:08.892133951 CEST	51377	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:08.892417908 CEST	51522	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:08.899444103 CEST	53	51377	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:08.900552034 CEST	53	51522	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:09.832648039 CEST	56304	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:09.832803011 CEST	56263	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:09.839560986 CEST	53	56304	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:09.839585066 CEST	53	56263	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:10.049371004 CEST	53	49781	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:11.573224068 CEST	58866	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:11.573355913 CEST	61535	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:11.580914974 CEST	53	58866	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:11.581017017 CEST	53	61535	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:11.605557919 CEST	53	61186	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:12.577398062 CEST	53	61599	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:14.270157099 CEST	53	57575	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:28.085254908 CEST	53	57615	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:28.647567987 CEST	53	52657	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:31.315834999 CEST	56722	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:31.321285009 CEST	64577	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:33.219824076 CEST	54163	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:33.220251083 CEST	61125	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:33.596882105 CEST	55010	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:33.597239971 CEST	64544	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:34.971544027 CEST	50809	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:34.971796036 CEST	52483	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:41.857080936 CEST	64011	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:41.857237101 CEST	61824	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:41.878456116 CEST	53	64011	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:41.879429102 CEST	53	61824	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:43.513741970 CEST	58828	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:43.513886929 CEST	57043	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:43.522162914 CEST	53	57043	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:43.523560047 CEST	53	58828	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:45.396692038 CEST	56952	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:45.406552076 CEST	56337	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:45.414084911 CEST	53	56337	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:45.417470932 CEST	53	56952	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:45.420165062 CEST	53	62536	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:46.914943933 CEST	53	49554	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:46.917943954 CEST	54145	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:46.918062925 CEST	54601	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:46.933336020 CEST	53	60251	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:46.939297915 CEST	53	54601	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:46.939323902 CEST	53	54145	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:48.100106955 CEST	53	61815	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:48.208354950 CEST	62460	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:48.208543062 CEST	57158	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:48.228806019 CEST	53	62460	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:48.229965925 CEST	53	57158	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:48.640881062 CEST	51979	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:48.641094923 CEST	63632	53	192.168.2.5	1.1.1.1
Aug 28, 2024 14:03:48.661372900 CEST	53	51979	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:48.662749052 CEST	53	63632	1.1.1.1	192.168.2.5
Aug 28, 2024 14:03:57.836858988 CEST	53	64143	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 28, 2024 14:02:32.616197109 CEST	192.168.2.5	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Aug 28, 2024 14:03:46.933393002 CEST	192.168.2.5	1.1.1.1	c223	(Port unreachable)	Destination Unreachable

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.snam.it/it/i-nostri-business/trasporto.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Windows Analysis Report
https://www.snam.it/it/i-nostri-business/trasporto.html

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 14:02:30.084722996 CEST	1.1.1.1	192.168.2.5	0x17f2	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:30.115596056 CEST	1.1.1.1	192.168.2.5	0x295b	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:32.563069105 CEST	1.1.1.1	192.168.2.5	0x8c27	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:32.616120100 CEST	1.1.1.1	192.168.2.5	0xb45f	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:32.764461994 CEST	1.1.1.1	192.168.2.5	0x3ebd	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:32.764960051 CEST	1.1.1.1	192.168.2.5	0x8e36	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:32.777607918 CEST	1.1.1.1	192.168.2.5	0x9b0e	No error (0)	ca-dynatrace.snam.it		213.255.26.224	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:32.958587885 CEST	1.1.1.1	192.168.2.5	0xe49a	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:32.960244894 CEST	1.1.1.1	192.168.2.5	0x2adb	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.129.9.96	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.127.106	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.253.116.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.85.140	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.26.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.186.143	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816327095 CEST	1.1.1.1	192.168.2.5	0x22b4	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.154.232	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816817045 CEST	1.1.1.1	192.168.2.5	0xb54c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816817045 CEST	1.1.1.1	192.168.2.5	0xb54c	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.816817045 CEST	1.1.1.1	192.168.2.5	0xb54c	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.840568066 CEST	1.1.1.1	192.168.2.5	0xd0d0	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.841798067 CEST	1.1.1.1	192.168.2.5	0xda9f	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:34.847914934 CEST	1.1.1.1	192.168.2.5	0x599e	No error (0)	ca-dynatrace.snam.it		213.255.26.224	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.881299973 CEST	1.1.1.1	192.168.2.5	0x4191	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.882695913 CEST	1.1.1.1	192.168.2.5	0x482e	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.898833036 CEST	1.1.1.1	192.168.2.5	0x6531	No error (0)	snam.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.898833036 CEST	1.1.1.1	192.168.2.5	0x6531	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.898833036 CEST	1.1.1.1	192.168.2.5	0x6531	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	snam.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.66.230	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.228.154.232	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.34.48.44	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.122.221	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.129.9.96	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.127.106	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:35.900398970 CEST	1.1.1.1	192.168.2.5	0xc2fe	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.186.143	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.26.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.85.140	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.60.40	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.66.230	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.73.191	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.253.116.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.138.145	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.319113970 CEST	1.1.1.1	192.168.2.5	0x8f34	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.129.9.96	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.320518017 CEST	1.1.1.1	192.168.2.5	0x4814	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:36.320518017 CEST	1.1.1.1	192.168.2.5	0x4814	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:36.320518017 CEST	1.1.1.1	192.168.2.5	0x4814	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:36.454109907 CEST	1.1.1.1	192.168.2.5	0x743b	No error (0)	tmd.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.454109907 CEST	1.1.1.1	192.168.2.5	0x743b	No error (0)	tmd.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:36.454109907 CEST	1.1.1.1	192.168.2.5	0x743b	No error (0)	tmd.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:37.651433945 CEST	1.1.1.1	192.168.2.5	0x10e	No error (0)	tmd.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:37.651433945 CEST	1.1.1.1	192.168.2.5	0x10e	No error (0)	tmd.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:37.651433945 CEST	1.1.1.1	192.168.2.5	0x10e	No error (0)	tmd.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:42.743947029 CEST	1.1.1.1	192.168.2.5	0xf0d3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:42.743947029 CEST	1.1.1.1	192.168.2.5	0xf0d3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:43.409272909 CEST	1.1.1.1	192.168.2.5	0xe4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:43.409272909 CEST	1.1.1.1	192.168.2.5	0xe4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:02:58.119792938 CEST	1.1.1.1	192.168.2.5	0x3dba	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:02:58.119792938 CEST	1.1.1.1	192.168.2.5	0x3dba	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:08.899444103 CEST	1.1.1.1	192.168.2.5	0xae05	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:08.900552034 CEST	1.1.1.1	192.168.2.5	0xb44c	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 14:03:09.839560986 CEST	1.1.1.1	192.168.2.5	0xb84a	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:09.839585066 CEST	1.1.1.1	192.168.2.5	0xa9b9	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 14:03:11.580914974 CEST	1.1.1.1	192.168.2.5	0x7883	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:11.581017017 CEST	1.1.1.1	192.168.2.5	0xb33f	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 14:03:21.372546911 CEST	1.1.1.1	192.168.2.5	0xe55f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:21.372546911 CEST	1.1.1.1	192.168.2.5	0xe55f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:31.335700989 CEST	1.1.1.1	192.168.2.5	0x4e37	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:31.378077030 CEST	1.1.1.1	192.168.2.5	0x2c16	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:33.229012012 CEST	1.1.1.1	192.168.2.5	0x52c4	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:33.230163097 CEST	1.1.1.1	192.168.2.5	0xbb7	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:33.620547056 CEST	1.1.1.1	192.168.2.5	0x37a4	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:33.628859997 CEST	1.1.1.1	192.168.2.5	0x3cd0	No error (0)	www.snam.it	www.snam.it.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:34.981247902 CEST	1.1.1.1	192.168.2.5	0xcfab	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:34.981256008 CEST	1.1.1.1	192.168.2.5	0x14c5	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:41.766427994 CEST	1.1.1.1	192.168.2.5	0x1c66	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:41.766427994 CEST	1.1.1.1	192.168.2.5	0x1c66	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:41.878456116 CEST	1.1.1.1	192.168.2.5	0x204d	No error (0)	tmd.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:41.878456116 CEST	1.1.1.1	192.168.2.5	0x204d	No error (0)	tmd.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:41.878456116 CEST	1.1.1.1	192.168.2.5	0x204d	No error (0)	tmd.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:43.523560047 CEST	1.1.1.1	192.168.2.5	0xa7cb	No error (0)	tmd.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:43.523560047 CEST	1.1.1.1	192.168.2.5	0xa7cb	No error (0)	tmd.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:43.523560047 CEST	1.1.1.1	192.168.2.5	0xa7cb	No error (0)	tmd.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:45.414084911 CEST	1.1.1.1	192.168.2.5	0xe837	No error (0)	syndication.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:45.417470932 CEST	1.1.1.1	192.168.2.5	0x4a3a	No error (0)	syndication.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:45.417470932 CEST	1.1.1.1	192.168.2.5	0x4a3a	No error (0)	tlb-mi-varnish.teleborsa.it		212.239.56.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:46.939297915 CEST	1.1.1.1	192.168.2.5	0xf63f	No error (0)	cdn.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:46.939323902 CEST	1.1.1.1	192.168.2.5	0xbcb0	No error (0)	cdn.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:46.939323902 CEST	1.1.1.1	192.168.2.5	0xbcb0	No error (0)	tlb-mi-varnish.teleborsa.it		212.239.56.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:48.228806019 CEST	1.1.1.1	192.168.2.5	0x95b9	No error (0)	syndication.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:48.228806019 CEST	1.1.1.1	192.168.2.5	0x95b9	No error (0)	tlb-mi-varnish.teleborsa.it		212.239.56.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:48.229965925 CEST	1.1.1.1	192.168.2.5	0xf8f3	No error (0)	syndication.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:48.661372900 CEST	1.1.1.1	192.168.2.5	0x429f	No error (0)	cdn.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 14:03:48.661372900 CEST	1.1.1.1	192.168.2.5	0x429f	No error (0)	tlb-mi-varnish.teleborsa.it		212.239.56.65	A (IP address)	IN (0x0001)	false
Aug 28, 2024 14:03:48.662749052 CEST	1.1.1.1	192.168.2.5	0xdfec	No error (0)	cdn.teleborsa.it	tlb-mi-varnish.teleborsa.it		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:33 UTC	597	OUT	GET /jstag/managed/ruxitagent_A27NVfhqrux_10265230425083909.js HTTP/1.1 Host: ca-dynatrace.snam.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.snam.it sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.snam.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 12:02:33 UTC	310	IN	HTTP/1.1 200 OK Connection: close Date: Wed, 28 Aug 2024 12:02:33 GMT Content-Type: application/javascript;charset=utf-8 Expires: Thu, 28 Aug 2025 11:17:56 GMT Cache-Control: public, max-age=31536000, immutable Access-Control-Allow-Origin: * Timing-Allow-Origin: * Vary: Accept-Encoding, User-Agent
2024-08-28 12:02:33 UTC	13490	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 49 61 28 29 7b 49 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 66 3d 31 2c 6b 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 66 3c 6b 3b 66 2b 2b 29 7b 62 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 66 6f 72 28 76 61 72 20 70 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 70 29 26 26 28 61 5b 70 5d 3d 62 5b 70 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 72 65 74 75 72 6e 20 49 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 2c 62 29 7b 6a 62 3d 4f 62 6a 65 63 74 2e 73 65 74 Data Ascii: (function(){function Ia(){Ia=Object.assign\|\|function(a){for(var b,f=1,k=arguments.length;f<k;f++){b=arguments[f];for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(a[p]=b[p])}return a};return Ia.apply(this,arguments)}function jb(a,b){jb=Object.set
2024-08-28 12:02:33 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 29 7b 72 65 74 75 72 6e 20 71 67 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 72 65 74 75 72 6e 20 72 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 4b 63 28 61 29 29 26 26 61 2e 62 62 3f 61 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 69 61 28 61 29 3a 61 29 3f 61 2e 5a 61 28 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 2c 62 2c 66 29 7b 76 61 72 20 6b 3d 45 64 3b 66 26 26 28 6b 3d 4b 63 28 66 29 29 3b 69 66 28 21 6b 29 72 65 74 75 72 6e 21 31 3b 6b 2e 53 66 28 61 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 29 7b Data Ascii: eturn a}function ya(){return qg++}function G(){return rh()}function ia(a){return(a=Kc(a))&&a.bb?a:null}function xa(a){return(a="number"===typeof a?ia(a):a)?a.Za():""}function Ba(a,b,f){var k=Ed;f&&(k=Kc(f));if(!k)return!1;k.Sf(a,b);return!0}function Da(){
2024-08-28 12:02:34 UTC	11216	IN	Data Raw: 7c 74 62 28 29 3b 70 62 28 6b 2c 4b 2c 7a 29 3b 62 3d 4e 62 28 7a 29 3b 69 66 28 21 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 64 61 3d 4a 66 28 7b 57 66 3a 49 62 28 22 73 76 4e 42 22 29 2c 51 67 3a 61 2c 73 64 3a 66 7d 29 2c 75 61 3d 54 61 28 7a 2c 6b 29 3b 67 62 28 6f 62 28 6f 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 69 62 2c 66 62 2c 44 62 29 7b 72 65 74 75 72 6e 7b 70 61 74 68 3a 75 61 2c 65 62 3a 4b 2c 62 65 61 63 6f 6e 3a 7a 2c 78 63 3a 69 62 2c 61 67 3a 66 62 2c 62 67 3a 44 62 2e 6c 65 6e 67 74 68 2c 73 64 3a 66 7d 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 69 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 64 61 28 69 62 29 7d 29 2c 72 62 29 3b 72 65 74 75 72 6e 20 32 7d 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 66 29 7b 62 3d 65 6e Data Ascii: \|tb();pb(k,K,z);b=Nb(z);if(!b.length)return 0;var da=Jf({Wf:Ib("svNB"),Qg:a,sd:f}),ua=Ta(z,k);gb(ob(ob(b,function(ib,fb,Db){return{path:ua,eb:K,beacon:z,xc:ib,ag:fb,bg:Db.length,sd:f}}),function(ib){return new da(ib)}),rb);return 2}function pb(a,b,f){b=en
2024-08-28 12:02:34 UTC	16384	IN	Data Raw: 66 28 21 66 7c 7c 2d 31 21 3d 3d 66 2e 54 61 7c 7c 21 66 2e 62 62 29 72 65 74 75 72 6e 21 31 3b 66 2e 54 61 3d 61 3b 62 26 26 30 3c 62 2e 6c 65 6e 67 74 68 26 26 28 66 2e 6a 62 3d 62 29 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 56 63 28 29 7b 72 65 74 75 72 6e 21 49 62 28 22 64 69 73 61 62 6c 65 58 68 72 46 61 69 6c 75 72 65 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 4b 63 28 61 29 29 26 26 61 2e 62 62 3f 5b 61 2e 45 61 2c 61 2e 4f 61 5d 3a 5b 30 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 77 66 28 61 2c 62 29 7b 76 61 72 20 66 3d 69 61 28 61 29 3b 69 66 28 66 29 7b 76 61 72 20 6b 3d 66 2e 78 68 72 55 72 6c 3b 66 2e 63 66 28 62 29 3b 66 3d 30 3b 66 6f 72 28 76 61 72 20 70 3d 52 67 3b 66 3c 70 2e 6c 65 6e Data Ascii: f(!f\|\|-1!==f.Ta\|\|!f.bb)return!1;f.Ta=a;b&&0<b.length&&(f.jb=b);return!0}function Vc(){return!Ib("disableXhrFailures")}function $e(a){return(a=Kc(a))&&a.bb?[a.Ea,a.Oa]:[0,0]}function wf(a,b){var f=ia(a);if(f){var k=f.xhrUrl;f.cf(b);f=0;for(var p=Rg;f<p.len
2024-08-28 12:02:34 UTC	11216	IN	Data Raw: 73 65 20 22 5f 75 61 70 6c 5f 22 3a 61 3d 22 76 61 6c 75 65 20 5b 22 2e 63 6f 6e 63 61 74 28 62 2c 22 5d 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6a 61 76 61 20 6c 6f 6e 67 2e 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 5f 75 61 70 64 74 5f 22 3a 61 3d 22 76 61 6c 75 65 20 5b 22 2e 63 6f 6e 63 61 74 28 62 2c 22 5d 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 64 61 74 65 2e 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 5f 75 61 70 64 62 6c 5f 22 3a 61 3d 22 76 61 6c 75 65 20 5b 22 2e 63 6f 6e 63 61 74 28 62 2c 22 5d 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6a 61 76 61 20 64 6f 75 62 6c 65 2e 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 22 76 61 6c 75 65 20 5b 22 2e 63 6f 6e 63 61 74 28 62 2c 22 5d 20 69 73 20 6e 6f 74 20 6f 66 Data Ascii: se "_uapl_":a="value [".concat(b,"] is not a valid java long.");break;case "_uapdt_":a="value [".concat(b,"] is not a valid date.");break;case "_uapdbl_":a="value [".concat(b,"] is not a valid java double.");break;default:a="value [".concat(b,"] is not of
2024-08-28 12:02:34 UTC	16384	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 6b 28 61 29 7b 76 61 72 20 62 2c 66 3d 61 2e 73 74 61 72 74 54 69 6d 65 3b 66 26 26 28 66 3d 46 28 66 29 29 3b 72 65 74 75 72 6e 7b 4d 61 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 66 29 2c 6c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 61 2e 6c 6f 61 64 54 69 6d 65 29 2c 73 69 7a 65 3a 61 2e 73 69 7a 65 2c 72 64 3a 6a 69 28 61 2e 65 6c 65 6d 65 6e 74 29 7c 7c 22 2d 22 2c 48 63 3a 28 6e 75 6c 6c 3d 3d 3d 28 62 3d 61 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 76 6f 69 64 20 30 3a 62 2e 74 61 67 4e 61 6d 65 29 7c 7c 22 2d 22 2c 75 72 6c 3a 61 2e 75 72 6c 7c 7c 22 2d 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 6b 28 61 29 7b 76 61 72 20 62 3d 30 3b 66 6f 72 28 61 3d 61 2e 67 65 74 45 6e 74 72 69 65 Data Ascii: }}function Wk(a){var b,f=a.startTime;f&&(f=F(f));return{Ma:Math.round(f),loadTime:Math.round(a.loadTime),size:a.size,rd:ji(a.element)\|\|"-",Hc:(null===(b=a.element)\|\|void 0===b?void 0:b.tagName)\|\|"-",url:a.url\|\|"-"}}function Xk(a){var b=0;for(a=a.getEntrie
2024-08-28 12:02:34 UTC	12596	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 70 3d 6b 5b 66 5d 3b 69 66 28 70 5b 30 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 70 5b 31 5d 7d 72 65 74 75 72 6e 22 22 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 66 3d 30 2c 6b 3d 74 68 69 73 2e 6b 63 3b 66 3c 6b 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 70 3d 6b 5b 66 5d 3b 62 2e 70 75 73 68 28 22 24 22 2c 70 5b 30 5d 2c 22 3d 22 2c 70 5b 31 5d 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 22 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 63 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 56 68 2c 0a 75 6b 2c 74 68 2c 76 69 3d 45 62 2e 70 Data Ascii: .length;f++){var p=k[f];if(p[0]===b)return p[1]}return""};a.prototype.nf=function(){for(var b=[],f=0,k=this.kc;f<k.length;f++){var p=k[f];b.push("$",p[0],"=",p[1])}return b.join("")};a.prototype.raw=function(){return this.kc};return a}(),Vh,uk,th,vi=Eb.p
2024-08-28 12:02:34 UTC	16384	IN	Data Raw: 2e 73 74 61 72 74 2c 7a 3d 74 68 69 73 2e 6e 61 6d 65 2c 4b 3d 74 68 69 73 2e 54 61 2c 64 61 3d 74 68 69 73 2e 6a 62 2c 75 61 3d 74 68 69 73 2e 73 61 2c 69 62 3d 74 68 69 73 2e 75 68 2c 66 62 3d 74 68 69 73 2e 71 66 2c 44 62 3d 74 68 69 73 2e 59 62 2e 73 6c 69 63 65 28 29 3b 44 62 2e 70 75 73 68 28 5b 22 64 6e 22 2c 74 68 69 73 2e 64 6f 6d 4e 6f 64 65 73 5d 2c 5b 22 63 66 61 22 2c 74 68 69 73 2e 63 68 69 6c 64 46 72 61 6d 65 41 63 74 69 6f 6e 73 5d 2c 5b 22 78 75 22 2c 62 5d 2c 5b 22 69 63 61 22 2c 74 68 69 73 2e 69 73 43 75 73 74 6f 6d 41 63 74 69 6f 6e 5d 2c 5b 22 67 6e 22 2c 74 68 69 73 2e 61 61 5d 29 3b 76 61 72 20 53 62 3d 44 62 2e 70 75 73 68 2c 4d 62 3d 53 62 2e 61 70 70 6c 79 3b 76 61 72 20 24 62 3d 5b 5d 3b 69 66 28 30 21 3d 3d 50 63 29 7b 76 61 Data Ascii: .start,z=this.name,K=this.Ta,da=this.jb,ua=this.sa,ib=this.uh,fb=this.qf,Db=this.Yb.slice();Db.push(["dn",this.domNodes],["cfa",this.childFrameActions],["xu",b],["ica",this.isCustomAction],["gn",this.aa]);var Sb=Db.push,Mb=Sb.apply;var $b=[];if(0!==Pc){va
2024-08-28 12:02:34 UTC	11216	IN	Data Raw: 4a 61 3d 6b 62 28 53 2c 50 2c 6d 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 4a 61 2e 61 68 3d 4f 3b 72 65 74 75 72 6e 20 57 61 28 4a 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 62 28 29 7b 28 76 61 3d 21 21 65 62 2e 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 29 26 26 28 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 53 29 7b 52 61 28 53 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 2e 6f 62 73 65 72 76 65 28 7b 65 6e 74 72 79 54 79 70 65 73 3a 5b 22 72 65 73 6f 75 72 63 65 22 5d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 53 29 7b 76 61 72 20 50 3d 7b 7d 3b 53 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6d 61 2c 4a 61 29 7b 50 5b 4a 61 5d 3d 6d 61 7d Data Ascii: Ja=kb(S,P,ma);return function(O){Ja.ah=O;return Wa(Ja)}}function ab(){(va=!!eb.PerformanceObserver)&&(new PerformanceObserver(function(S){Ra(S.getEntries())})).observe({entryTypes:["resource"]})}function Ka(S){var P={};S.forEach(function(ma,Ja){P[Ja]=ma}
2024-08-28 12:02:34 UTC	16384	IN	Data Raw: 30 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 29 26 26 6e 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 62 61 73 65 55 52 49 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 6e 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 26 26 21 79 61 2e 64 54 5f 2e 67 4e 4e 54 56 28 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 22 6c 6f 61 64 45 76 65 6e 74 45 6e 64 22 29 7d 63 61 74 63 68 28 78 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 6e 29 7b 72 65 74 75 72 6e 21 21 6e 2e 61 72 65 61 7d 66 75 6e 63 74 69 6f 6e 20 57 28 6e 2c 78 29 7b 76 6f 69 64 20 30 3d 3d 3d 78 26 26 28 78 3d 47 29 3b 72 65 74 75 72 6e 20 78 2e 67 65 74 43 Data Ascii: 0,location.href.lastIndexOf("/")+1)&&n!==document.baseURI}function Z(n){try{return!!n.contentWindow&&!ya.dT_.gNNTV(n.contentWindow.performance,"loadEventEnd")}catch(x){return!1}}function Aa(n){return!!n.area}function W(n,x){void 0===x&&(x=G);return x.getC

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 12:02:33 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=250404 Date: Wed, 28 Aug 2024 12:02:33 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 12:02:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=250412 Date: Wed, 28 Aug 2024 12:02:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-28 12:02:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:35 UTC	709	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=72062BC258B04E6D0A495D24%40AdobeOrg&d_nsid=0&ts=1724846553952 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.snam.it Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.snam.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 12:02:35 UTC	816	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 12:02:35 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: Bk6xkGEUSrk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.snam.it Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-2-v065-00ea0a4e4.edge-irl1.demdex.com 4 ms set-cookie: demdex=57279585338367842590223918215430096749; Max-Age=15552000; Expires=Mon, 24 Feb 2025 12:02:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 12:02:35 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 37 34 38 33 32 37 31 39 30 38 39 38 36 39 39 33 38 37 30 32 36 31 33 32 31 34 38 35 36 32 34 31 30 39 34 36 31 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"57483271908986993870261321485624109461","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:36 UTC	747	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: snam.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.snam.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=57279585338367842590223918215430096749
2024-08-28 12:02:36 UTC	607	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 12:02:36 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: I5+XysVnQ1s= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Mon, 19 Aug 2024 12:41:39 GMT DCS: dcs-prod-irl1-2-v065-096c66b28.edge-irl1.demdex.com 0 ms
2024-08-28 12:02:36 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:37 UTC	519	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=72062BC258B04E6D0A495D24%40AdobeOrg&d_nsid=0&ts=1724846553952 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=57279585338367842590223918215430096749
2024-08-28 12:02:37 UTC	718	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 12:02:37 GMT Content-Type: application/json;charset=utf-8 Content-Length: 363 Connection: close X-TID: Cp6yMp6RQLQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcscanary-prod-irl1-1-v080-0d7105232.edge-irl1.demdex.com 5 ms set-cookie: demdex=57279585338367842590223918215430096749; Max-Age=15552000; Expires=Mon, 24 Feb 2025 12:02:37 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 12:02:37 UTC	363	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 37 34 38 33 32 37 31 39 30 38 39 38 36 39 39 33 38 37 30 32 36 31 33 32 31 34 38 35 36 32 34 31 30 39 34 36 31 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"57483271908986993870261321485624109461","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:37 UTC	996	OUT	GET /b/ss/SNAMsnam-prod766409p/1/JS-2.26.0-LDQM/s87212820889711?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%208%3A2%3A35%203%20240&mid=57483271908986993870261321485624109461&aamlh=6&ce=UTF-8&pageName=Trasporto&g=https%3A%2F%2Fwww.snam.it%2Fit%2Fi-nostri-business%2Ftrasporto.html&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=72062BC258B04E6D0A495D24%40AdobeOrg&AQE=1 HTTP/1.1 Host: tmd.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.snam.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 12:02:37 UTC	510	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Wed, 28 Aug 2024 12:02:37 GMT expires: Tue, 27 Aug 2024 12:02:37 GMT last-modified: Thu, 29 Aug 2024 12:02:37 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3704079776540360704-4618666845167442528 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-08-28 12:02:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:38 UTC	660	OUT	GET /ibs:dpid=411&dpuuid=Zs8R3QAAAJ36RANe HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.snam.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=57279585338367842590223918215430096749
2024-08-28 12:02:38 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 12:02:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 5PVqpS9dSPc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-034528526.edge-irl1.demdex.com 2 ms set-cookie: dpm=57279585338367842590223918215430096749; Max-Age=15552000; Expires=Mon, 24 Feb 2025 12:02:38 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=57279585338367842590223918215430096749; Max-Age=15552000; Expires=Mon, 24 Feb 2025 12:02:38 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 12:02:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2024-08-28 12:02:39 UTC	473	OUT	GET /ibs:dpid=411&dpuuid=Zs8R3QAAAJ36RANe HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=57279585338367842590223918215430096749; dpm=57279585338367842590223918215430096749
2024-08-28 12:02:39 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 12:02:39 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: eKfLE9O7Ryo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-023caad46.edge-irl1.demdex.com 7 ms set-cookie: dpm=57279585338367842590223918215430096749; Max-Age=15552000; Expires=Mon, 24 Feb 2025 12:02:39 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=57279585338367842590223918215430096749; Max-Age=15552000; Expires=Mon, 24 Feb 2025 12:02:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-08-28 12:02:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;