documentation technical

government public service

forum

Italian

b312063c94dfa8298ec09c6b699ee0a4

You're looking at domain 'www.consulentidellavoro.it' on the Italian country-code top-level domain (.it); it also runs on subdomain 'www'. The core label 'consulentidellavoro' covers 19 characters containing 8 vowels alongside eleven consonants. Segmentation suggests five words: consul, ent, idel, lav, oro. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

searchword

categories

default-src 'self' https://www.consulentidellavoro.it; connect-src * http://www.consulentidellavoro.it https://www.consulentidellavoro.it; media-src * data:; script-src-elem * 'unsafe-inline'; script-src-attr * 'unsafe-inline'; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; child-src * blob:; img-src * data:; font-src * data:; frame-src 'self' https://vimeo.com https://player.vimeo.com https://livestream.com;

default-src 'self' https://www.consulentidellavoro.it; connect-src * http://www.consulentidellavoro.it https://www.consulentidellavoro.it; media-src * data:; script-src-elem * 'unsafe-inline'; script-src-attr * 'unsafe-inline'; script-src * data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; child-src * blob:; img-src * data:; font-src * data:; frame-src 'self' https://player.vimeo.com https://livestream.com;

default-src 'self' f.vimeocdn.com; connect-src 'self' blob: data: ws: wss: *.6sc.co *.6sense.com *.agora.io *.akamaized.net clientassets.sightera.com.s3.amazonaws.com https://d263mgllkjh2k2.cloudfront.net http://d1ripsxh7es2qp.cloudfront.net https://d3fclmoge30w0w.cloudfront.net cognito-identity.us-east-1.amazonaws.com cognito-identity.us-west-1.amazonaws.com https://s3.amazonaws.com/beast.branding.sightera.com https://s3.amazonaws.com/beast.business.sightera.com https://s3.amazonaws.com/beast.business.sightera.com/ https://s3.amazonaws.com/beast.branding.sightera.com/ https://s3.amazonaws.com/test.sightera.com/ https://s3.amazonaws.com/business.sightera.com/ https://s3.amazonaws.com/sound.sightera.com/ sqs.us-east-1.amazonaws.com sqs.us-west-1.amazonaws.com wirewax.s3.eu-west-1.amazonaws.com *.amplitude.com vimeo.bynder.com bat.bing-int.com bat.bing.com bat.bing.net www.bing.com api.branch.io cdn.builder.io https://d1ripsxh7es2qp.cloudfront.net http://d1oca24q5dwo6d.cloudfront.net media.gettyimages.com d2by6sxflmuwyq.cloudfront.net duysrfiajusdh.cloudfront.net dv7a7fjpjy29e.cloudfront.net cdn.cookielaw.org browser-intake-datadoghq.com ad.doubleclick.net *.g.doubleclick.net *.elfsight.com fp.service.expressplay.com pr.service.expressplay.com wv.service.expressplay.com www.facebook.com api.figma.com *.firebaseio.com tracking-api.g2.com *.getsmartling.com *.google.ae *.google.com *.google.ca *.google.ch *.google.es *.google.fr *.google.ge *.google.iq *.google.is *.google.it *.google.pl *.google.se *.google.si *.google.rs *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.th *.google.co.uk *.google.com.ar *.google.com.au *.google.com.br *.google.com.mx *.google.com.pk *.google.com.sa *.google.com.tr *.google.com.uk *.google.de *.analytics.google.com *.google-analytics.com www.googleadservices.com *.googleapis.com csi.gstatic.com pagead2.googlesyndication.com *.googletagmanager.com api.greenhouse.io *.hivestreaming.com 117151225.intellimizeio.com *.intellimize.co *.kollective.app *.kollective.app:31015 *.kollectivecd.com leatherback-dot-vimeo-prod.appspot.com snap.licdn.com px.ads.linkedin.com linkedin.com *.litix.io *.cdn.magisto.com vimeo.magisto.com *.maze.co 582-gou-684.mktoresp.com js-agent.newrelic.com t.paypal.com data.pendo.io *.pndsn.com privacyportal.onetrust.com privacyportal-cdn.onetrust.com app.qualified.com *.qualtrics.com pixel-config.reddit.com www.redditstatic.com *.riskified.com *.statscollector.ap.sd-rtn.com *.ap.sd-rtn.com *.sd-rtn.com o209747.ingest.us.sentry.io sierra.chat simonsignal.com static.simonsignal.com sdk-api-v1.singular.net web-sdk-cdn.singular.net telemetry.transcend.io transcend-cdn.com https://drm.vhx.com/v2/fairplay/cert collector.vhx.tv *.cloud.vimeo.com interactive.create.vimeo.com *.vimeo.com vimeo.com *.vimeo.work *.vimeocdn.com cdn.widerfunnel.com appds8093.blob.core.windows.net *.wirewax.com *.wirewax.tv *.zdassets.com vimeosupport.zendesk.com *.zoom.us zoom.us ws.zoominfo.com api.box.com public.boxcloud.com api.picox.bendingspoons.com; font-src 'self' data: d2by6sxflmuwyq.cloudfront.net dv7a7fjpjy29e.cloudfront.net fonts.gstatic.com *.cdn.magisto.com privacyportal-cdn.onetrust.com www.paypalobjects.com cf-st.sc-cdn.net use.typekit.net f.vimeocdn.com edge-assets.wirewax.com cdn01.boxcdn.net; frame-src *; img-src * blob: data:; media-src 'self' blob: data: *.akamaized.net https://d263mgllkjh2k2.cloudfront.net http://d1oca24q5dwo6d.cloudfront.net duysrfiajusdh.cloudfront.net media.gettyimages.com *.gvt1.com *.cdn.magisto.com *.eu.cloud.vimeo.com live-api.cloud.vimeo.com player.vimeo.com *.vimeocdn.com app.qualified.com https://s3.amazonaws.com/sound.sightera.com/ https://s3.amazonaws.com/test.sightera.com/ https://s3.amazonaws.com/beast.business.sightera.com/ https://s3.amazonaws.com/beast.business.sightera.com https://s3.amazonaws.com/beast.branding.sightera.com/ https://storage.googleapis.com/vimeo-create-prod-files/ http://d1ripsxh7es2qp.cloudfront.net https://d3fclmoge30w0w.cloudfront.net https://storage.googleapis.com/vimeo-prod-upload-create-us-east1/ https://storage.googleapis.com/vimeo-prod-upload-create-europe-west1/ https://storage.googleapis.com/vimeo-storage-dev-upload-create-us-east1/ https://storage.googleapis.com/vimeo-storage-dev-upload-create-europe-west1/ https://captions.vimeo.com https://captions-eu.vimeo.com; object-src 'self' *.vimeocdn.com *.akamaized.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' data: ws: wss: https://s0.2mdn.net/instream/video/ *.6sc.co wirewax.s3.eu-west-1.amazonaws.com app.link bat.bing-int.com bat.bing.com cdnjs.cloudflare.com challenges.cloudflare.com www.datadoghq-browser-agent.com *.g.doubleclick.net www.dropbox.com static.elfsight.com *.elfsightcdn.com connect.facebook.net *.firebaseio.com tracking.g2crowd.com *.google.com www.googleadservices.com www.gstatic.com *.google-analytics.com maps.googleapis.com pendo-io-static.storage.googleapis.com pendo-static-6633483048714240.storage.googleapis.com pagead2.googlesyndication.com www.googletagmanager.com www.googletagservices.com cdn.intellimize.co *.kollective.app snap.licdn.com src.litix.io lp.livestream.com munchkin.marketo.net snippet.maze.co privacyportal-cdn.onetrust.com www.paypalobjects.com cdn.pendo.io js.qualified.com data.pendo.io *.qualtrics.com www.redditstatic.com beacon.riskified.com secured-pixel.com sierra.chat static.simonsignal.com web-sdk-cdn.singular.net transcend-cdn.com vimeo.com *.vimeo.com *.vimeocdn.com cdn.widerfunnel.com edge-assets.wirewax.com embedder-sdk.wirewax.com embedder-sdk.wirewax.tv origin-4.xtlo.net static.zdassets.com *.zoom.us zoom.us ws.zoominfo.com static.zuora.com https://www.dropbox.com/static/api/2/dropins.js cdn01.boxcdn.net; style-src 'self' 'unsafe-inline' *.6sc.co cdn01.boxcdn.net cdnjs.cloudflare.com accounts.google.com fonts.googleapis.com pendo-static-6633483048714240.storage.googleapis.com www.gstatic.com lp.livestream.com privacyportal-cdn.onetrust.com www.paypalobjects.com sierra.chat *.vimeo.com *.vimeocdn.com vimeopro.com transcend-cdn.com cdn.widerfunnel.com edge-assets.wirewax.com edge-player5.wirewax.com origin-4.xtlo.net; worker-src 'self' blob:; report-to csp-endpoint; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba92ed04ee7cceea44335c3d8c1ccc173&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Acspreport%2Cenv%3Aproduction

5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6

20f7c83ab9dfdc1e88f4c3fafc0712492200ab738fb30660526bad9dcb7282dc

d4fb727e7ce306673287702958127e39fce16853267b231c05af46c459e2934b

668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

2bc4ac76f796d779cc0c9ab437db38e3f5345058365832d0b05e36b1e912184d

e8a63985aeac9876afc79f3468105c5a68ce2233c046430ece6f77153ca6d45f

47b95cdadf3ca9d8de21fa63e32c5f752fbc3ae9a3ac567427ca1dae7213354f

7ea6cacb9f4f6815621e1d52f15efa73e86eb22cc1025862cfaca63e257a1854

211b6057729512be9813a85b19acd609030d4f42df581125acd28904aa0d8f53

473517a550fb2c08cf784f0a2881e9cede3aaa19990fbeb9738a2c4cfbcc0b31

f2a485bb16fde42598ed35f8506f5bef4e395513d62c269697cbcc0350057203

defc39740ac1859d8e2785ed473208409627e87addd5f78f2deaacb93a12d51d

83a8807ef669fa70d0d9375347f5552897f76c6ae8e2e6f97ef592595462d8d1

48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d

192a0de246d72d832dbef0fb32201479767357817748eeafc3abb1a43d872d39

75d28a75627d157529fe58b9ba08626643d21a7ac877f3188e4cebf79fe0a0a8

a6d86d585d1d6dc8d36c585972971a46f14bbb9cce32a693931eff38a030237e

133093005ab2f9ee48ab8694e88511dc3ef81f0b9858de7e4ffeaa314683ebc5

81cd435915bdfc377e1cbd0f2a5843e9c4cab1f80e004dc93ac88edd3c81cf9a

12d0657bd29f76d993b3e2fc0f49fd46f761aebb3d5425fc87da3064e4a591f8

5d9a79f40fa5cd31dceb60269049af3f0804856205938ab8879f0a8ae6a5e84a

237fab296e2ddac9eab9a6f5b0c56fabe3bfe8ad03f7ae1ab74135bb2c8797dc

c90195a17839d56156ed73fd3fe97c9653cb905c8d41c525a23a6d730ba337ca

5435b4f9b6a0f91d12781a52344ba99e6dff8a881ebc38b9145f6ddc496708f1

106fadbd2a4070893b355056f21e63127f1eef5f9f309c7404bd6c5345595565

9060b607ac2d2becbdeed07617740f209e5af5c492a448a43e4420b86b217c2c

c839d03f4eee991baf58e91677763564c022f42853cc7b03ecb5301d7915f725

6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

c78bb9377cfe434ac5841e2b24e7a518761e085a21d12c84bd1a85e9375ca3a1

2cc23ca38229bc12f9ca8d2fb9c053d87d1967588a54db8ef47a18bf0b06e432

75bdaa328e4d462664a21613515a8a91be8e8b04f0c1902fb00334fa0716a17a

5bf89f66adcc1f9ec8e68d53c7e7fb8c97b2d7fd834c61deb9bc580cfed0c08d

6ca40c60aa265cc7e53c01ed0bab91705519f6d13aa4139178827963f9bed9b8

83f42cafd2851b32ab15080102ddd189c1d5bd3bf1a8e1a0e648767cb62c838b

eef0717ce1915f6400e2191f3adb64bf0fb1ed2d65b5b2ce873e998913258af6

2acf2b77ef4d6904037e2d82455c1fc43084f1e9cb835484324579459072dd92

434a682398f317f4bf366306f6c4d8004811717e753e0827e0e580bfd7dea8f6

1e52dc019c33fcded9cdd77f06dc2a50cc3d360690895fa93e118e73fcc6632e

4ae44566976775155b476ab54599f54509910b9e383e875efb91bbd17de27c20

306c8c593b08fbd1e68a74bd31d769d1999db8da6430be7b9c631b46353e5926

Authorization Bypass in Next.js Middleware

Next.js missing cache-control header may lead to CDN caching empty reply

Denial of Service condition in Next.js image optimization

Next.js authorization bypass vulnerability

Next.js Race Condition to Cache Poisoning

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers (such as `Cookie` or `Authorization`), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug.

All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57752)

A vulnerability in **Next.js Image Optimization** has been fixed in **v15.4.5** and **v14.2.31**. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery.

All users relying on `images.domains` or `images.remotePatterns` are encouraged to upgrade and verify that external image sources are strictly validated.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-55173)

A vulnerability in **Next.js Middleware** has been fixed in **v14.2.32** and **v15.4.7**. The issue occurred when request headers were directly passed into `NextResponse.next()`. In self-hosted applications, this could allow Server-Side Request Forgery (SSRF) if certain sensitive headers from the incoming request were reflected back into the response.

All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the `next()` function.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57822)

fd8ca8b9135fef4a7248a626a8ccc32ae0a13f2b897d69d40cdedae8cbb3d445

c4c1a543fa6ce9c342cba90b35fad8533fd32701510456b31789c12067d2772e

ea8b571e68c0295dedba824efed9f63b12b9694afd28132f1ebf65db612f260b

b59c4d6cea0f96c26a3c982bab26dc2e69da6bc9dfb03ff04411867face830ea

ecf0542ec34e0adcaf9e9d81f5ccb3a2128a80101123253bf70932f973993968

fa1ebbeb28f5bd2bb87abf642c81062d28b7d293ef2fc54647e073ca9e1ba878

Nell’approfondimento della Fondazione Studi le novità introdotte dalla Bilancio 2026 per imprese e l

consulente del lavoro, consulenti del lavoro, professionisti, lavoro, fisco, imprese, lavoratori, legge, diritto, economia

keywords

Notizie, approfondimenti, normativa e prassi in materia di lavoro, fisco e previdenza, utili nella gestione d’impresa per professionisti, imprenditori, manager delle risorse umane e lavoratori.

description

generator

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0

viewport

HandheldFriendly

apple-mobile-web-app-capable

consulentidellavoro.it

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

jQuery(window).on('load',  function() {
				new JCaption('img.caption');
			});



			jQuery.noConflict();
            (function($){
              $(window).load(function(){

// hide in iFrames
if (top != self) {
   return false;
}


                // Cookie setting script wrapper
                var cookieScripts = function () {
                    // Internal javascript called
                    console.log("Running");
				
                    // Loading external javascript file
                    $.cookiesDirective.loadScript({
                        uri:'external.js',
                        appendTo: 'body'
                    });
                }
				
                $.cookiesDirective({
                    w357_explicitConsent: false,
                    w357_position: 'bottom',
                    w357_duration: 60,
                    w357_animate_duration: 2000,
                    w357_limit: 0,
                    w357_message: 'Questo Sito utilizza cookie tecnici e di profilazione. Se vuoi sapere di più o negare il consenso ai cookie clicca su Leggi Privacy Policy. Se accedi ad un qualunque elemento sottostante o chiudi questo banner, acconsenti ad utilizzare i cookie.',
                    w357_buttonText: 'Ok, accetto',
                    w357_buttonMoreText: 'Policies',
                    w357_buttonMoreLink: '/index.php/privacy',
                    w357_display_more_info_btn: 1,
                    w357_fontColor: '#f1f1f3',
                    w357_linkColor: '#ffffff',
                    w357_fontSize: '12px',
                    w357_backgroundOpacity: '95',
                    w357_backgroundColor: '#323a45',
                    w357_height: 'auto',
                    w357_line_height: '',
                    w357_cookie_name: 'cookiesDirective',
                    w357_link_target: '_self',
                    w357_popup_width: '800',
                    w357_popup_height: '600'
                 });

                 

              });
            })(jQuery);


		//<![CDATA[
		if (navigator.userAgent.match(/IEMobile\/10\.0/)) {
			var msViewportStyle = document.createElement("style");
			msViewportStyle.appendChild(
				document.createTextNode("@-ms-viewport{width:auto!important}")
			);
			document.getElementsByTagName("head")[0].appendChild(msViewportStyle);
		}
		//]]>
	



    jQuery(document).ready(function () {

        jQuery("iframe").css("border", 0);

		//per rendere iframe responsivi
		/* if(!jQuery(".view-registration").length && jQuery("iframe").length===1){
				//console.log(`iframe ${jQuery("iframe")}`)
				
				 var height_iframe = 0;
				var source;
					jQuery(window).on('load resize scroll mousemove touchmove', function (ev) {
						if(typeof iFrameHeight === 'function') {
							iFrameHeight(jQuery('iframe')[0])
						}else if (!jQuery('iframe')[0].src.includes('http://trasparenzacpo.consulentidellavoro.it')){
							console.log('e')
							var iframe = jQuery('iframe')[0];
							var doc="contentDocument"in iframe?iframe.contentDocument:iframe.contentWindow.document;
							
							if(doc){
								var height=parseInt(doc.body.scrollHeight);
								if(!document.all){
									iframe.style.height=parseInt(height)+60+"px"
								}else if(document.all&&iframe.id){
									document.all[iframe.id].style.height=parseInt(height)+20+"px"
								}
							}
						}
						//console.log(`iFrameHeight`)
						/*try{
							height_iframe = jQuery("iframe").contents().find("body").height();
							source='contents()';
						}
						catch(exception)
						{
							function getAltezza(event)
							{
								height_iframe =  event.data;
							}
				
							window.addEventListener("message", getAltezza, false);
							source='message()';
							
						}
						
						if(height_iframe!=0){
							
								jQuery("iframe").css("height", height_iframe);

						}
						
						console.log(`height_iframe ${height_iframe}`) /

					});

				
		} */
		
	});

    

	
	if(typeof(jprocModuleIds)=='undefined'){var jprocModuleIds = new Array();var jprocModuleOpts = new Array();}
	jprocModuleIds.push(260);
	jprocModuleOpts.push({
			slideEasing : 'easeInQuad',
			fadeEasing : 'easeInQuad',
			effect: 'slide,slide',
			preloadImage: 'https://www.consulentidellavoro.it//modules/mod_jpro_content_slider/tmpl/images/loading.gif',
			generatePagination: true,
			play: 7000,						
			hoverPause: true,	
			slideSpeed : 500,
			autoHeight:true,
			fadeSpeed : 500,
			equalHeight:true,
			width: 'auto',
			height: 'auto',
			pause: 100,
			preload: true,
			paginationClass: 'jpro_handles_num',
			generateNextPrev:false,
			prependPagination:true,
			touchScreen:1	});



jQuery(document).ready(function($){
	// browser window scroll (in pixels) after which the "back to top" link is shown
	var offset = 300,
		//browser window scroll (in pixels) after which the "back to top" link opacity is reduced
		offset_opacity = 1200,
		//duration of the top scrolling animation (in ms)
		scroll_top_duration = 700,
		//grab the "back to top" link
		$back_to_top = $('.cd-top');

	//hide or show the "back to top" link
	$(window).scroll(function(){
		( $(this).scrollTop() > offset ) ? $back_to_top.addClass('cd-is-visible') : $back_to_top.removeClass('cd-is-visible cd-fade-out');
		if( $(this).scrollTop() > offset_opacity ) { 
			$back_to_top.addClass('cd-fade-out');
		}
	});

	//smooth scroll to top
	$back_to_top.on('click', function(event){
		event.preventDefault();
		$('body,html').animate({
			scrollTop: 0 ,
		 	}, scroll_top_duration
		);
	});

});



Requests	IP Address	Location	AS Autonomous System
127	151.4.72.169	Piombino Dese, Veneto, Italy	AS1267Wind Tre S.p.A.
125	151.4.72.177	Piombino Dese, Veneto, Italy	AS1267Wind Tre S.p.A.
125	162.159.128.61	United States	AS13335CLOUDFLARENET
377	3	-	-

Security Scan Report: www.consulentidellavoro.it

Summary

AI Security Verdict

Safe Website

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History