| gestaocgdsecure.com/cgd/logo-ap_Blue.png |  104.21.27.136 | 200 OK | 5.3 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/logo-ap_Blue.png IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typePNG image data, 130 x 94, 8-bit/color RGBA, non-interlaced Hash9f3898d15fd66e26719f7293e9778765 01e9d3a2ca33a16921ece7927f360d2ad7824221 4cebe4aa89b1d82e08c6b1e16328d4f621e122eecde4d9737e59cb0d25d699a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/logo-ap_Blue.png HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 10:06:06 GMT
content-type: image/png
content-length: 5276
last-modified: Sat, 10 Feb 2024 01:09:08 GMT
etag: "149c-610fcb1059500"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uENRnkwVkfnGS0Adwx2IaALDXjy1C8ATy%2Boee%2FiBnJgJZE2Zopdi4cTHyCCrMpQkEMGUTpEFkQ5yJl0SRo0cGKn8Lr3AQZrs1vw9nQaQaFHc95lAaWrkdSdfKEWmV6%2B6enf8Tons"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a2964d110b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg | 104.21.27.136 | 200 OK | 56 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 566x458, components 3 Hash493e1eb4c7f0f6a9aa911539fe5998d3 fedc53cb79a029f18b0d570b43c833cd43fd6717 cd221db65cb250c5cfb48c4728d64d05fb9869c1e9c5b5a564e5b11499b06223
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 10:06:06 GMT
content-type: image/jpeg
content-length: 55895
last-modified: Sat, 10 Feb 2024 01:09:08 GMT
etag: "da57-610fcb1059500"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Oq7pLS0vCzdlx9p%2B8LrFt4nfRILs97XI%2BhvBJ2vnwKOuKMfutf%2B9mqECjuZHlwhSoVTk0XqjFlO0q0YM4Hnpy3tn7wP8%2FxgG%2Bbwp7MFH9UJ5iQG4LRW4VNtfJjYf4hUwhK98Flt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a2971de40b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/files/jquery.js | 104.21.27.136 | 200 OK | 78 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/jquery.js IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators Hash3e4bb227fb55271bfe9c9d4a09147bd8 156837f75f6600ccb602b4efcbd393636c33f35e ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/jquery.js HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 10:06:05 GMT
content-type: text/javascript
last-modified: Wed, 05 Jan 2022 10:59:20 GMT
etag: W/"15d9d-5d4d3a54c9200"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nmPkSe14PNqnCIQG6Im63mOTN2gfRtQXqp54HuT1fCeHKm%2Fma%2Fss92YUAB%2BVCoWSKOQ%2FLV8JrCCcHrruEhZ2aFaPh40xVPxf%2Bsq2W0U1O%2BuQtSWv%2FU%2FedaCOWIrxstsxTTRjzcx3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a295bc540b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/files/nbp_popin.css | 104.21.27.136 | 200 OK | 4.5 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/nbp_popin.css IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeASCII text, with CRLF line terminators Hash28a619dd2efb18d5ce48c1b74dd1c2c3 9ca9900574eed7e670006d415c1d955a03d07d8a 51a77b84fd1e0904911e2e93d0c39e562473ef9602624aa97161a36fd8937faa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/nbp_popin.css HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 10:06:05 GMT
content-type: text/css
last-modified: Thu, 06 Jan 2022 07:20:24 GMT
etag: W/"f8a-5d4e4b42c7e00"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFpSAiIWJ8HJW%2F9r7TGTSDiPFfh2QV781Nr1eUv9OzTGBzPEnKlOqrcVSLl%2BM1glq4zgiO3Gv38V5gKaX%2FYhL%2BsdmoTagb2aEweUzyfIup5D8HlnsRu%2FQ53HJTtSOc%2BOpEYE1MUn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a295cc5a0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/files/login_and_register.css | 104.21.27.136 | 200 OK | 14 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/login_and_register.css IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash2fae4bc1613080360921bf572e71ea87 320bd6685cfe8e482f5e201924d8882150a20d40 4dc8a1053a0600cdfcdc74f9814dff2b4e1abbefd9d3d0badf23f35f588e5471
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/login_and_register.css HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 10:06:05 GMT
content-type: text/css
last-modified: Thu, 06 Jan 2022 07:20:26 GMT
etag: W/"b291-5d4e4b44b0280"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q8EBf8MTj98POinVQhCC1EtAZYIqDwRCcCcs7x0uagyNv6qJyIRGBJYzpRXE5iZ7AlgDEDM08b7A4rzaBgE6sAaJPTjsD7jIXGphFY2fFa6yj7arfh79hyj7NgAhFklNRZXiGTkF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a295bc570b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/ficheros/modern/images/icons/eye-icon_show.svg | 104.21.27.136 | 404 Not Found | 5.2 kB |
URL GET HTTP/3gestaocgdsecure.com/ficheros/modern/images/icons/eye-icon_show.svg IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, ASCII text Hashe890b6e7f95596ad9a5ac595f15f9a51 538f70a67e4666d7d18a83e85b7c5cf447c81c7a ddcd219339638b1b77e6a7cb1955d0f234f4cfba6f33cd32bd5008300f1a721f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ficheros/modern/images/icons/eye-icon_show.svg HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/files/login_and_register.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 08 May 2024 10:06:06 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FLxU6oxYTBRSBOMf%2FPPDzB2GvcLR68lXIh5xx4eKchu5BOSiuhIwyFDPhrKyXxN%2BVaC1PcXdvigtnJwwn5GeQwqBXHAQgqFRbGrgD3zUvjvemxLDVpvhnkHq2Y4cb9pj%2B1D70oDR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a297be700b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/ficheros/modern/images/icons/apple-touch-icon.png | 104.21.27.136 | 404 Not Found | 305 B |
URL GET HTTP/3gestaocgdsecure.com/ficheros/modern/images/icons/apple-touch-icon.png IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, ASCII text, with very long lines (316), with no line terminators Hashccc2e87bd121117411ee5818ffef3f54 c1de01cfa6f761a06ed30e9ac4932336ee6007b4 d9302f964c85cc0f63f92c91ade0ff6715edb7b2952d17af38db68a2ff4f30d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ficheros/modern/images/icons/apple-touch-icon.png HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 08 May 2024 10:06:06 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Kq7NajGvSMghtYAJW7kVUOJio9a%2BpeVmlnPiSrw9oh2eI80qIxncNxVP%2FGoaABq%2FbUjKesPWb4WjFIROVqmG4p6Bzl75O0riNokaY0GvzxJitNhJVyzqbrcIxpGsHeCwQvJVbWT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a299884f0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/ficheros/modern/images/icons/santander-icon.svg | 104.21.27.136 | 404 Not Found | 305 B |
URL GET HTTP/3gestaocgdsecure.com/ficheros/modern/images/icons/santander-icon.svg IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, ASCII text, with very long lines (316), with no line terminators Hashccc2e87bd121117411ee5818ffef3f54 c1de01cfa6f761a06ed30e9ac4932336ee6007b4 d9302f964c85cc0f63f92c91ade0ff6715edb7b2952d17af38db68a2ff4f30d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ficheros/modern/images/icons/santander-icon.svg HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 08 May 2024 10:06:06 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=quLHF%2BMPdJZk9wCM8v6kCm3b4pG5wOEUaBVMxKuWyym8p0K7z7YiZ8D%2BudsIem%2FAymhRIvbDsAwiLCakk6%2FMJylQLSGY3MI2UWw0kD2qJ8QaLbIVEluHqAXMHLIzXTwB%2BPOvccEJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a29988530b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/login.php | 104.21.27.136 | 200 OK | 101 kB |
URL User Request GET HTTP/2gestaocgdsecure.com/cgd/login.php IP104.21.27.136:443
CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
Size101 kB (101181 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Caixa Geral de Depositos | | Quad9 DNS | malicious | Sinkholed |
GET /cgd/login.php HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 10:06:05 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wT3tX6ROV3CYDw6horK6zUsweDgm6ULaZjx4nEigt%2FozyLKanuVc%2B6aqNjzyT85PD5IaqA4v7Yf8NuOkvXnkkeItbTM8LtDnTXc3Jg00XeFB3twGuaP5JdovDe3hygTVJXAoLw%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8808a292ff717131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gestaocgdsecure.com/cgd/files/SantanderTextW05-Regular.woff | 104.21.27.136 | 200 OK | 46 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/SantanderTextW05-Regular.woff IP104.21.27.136:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeWeb Open Font Format, TrueType, length 46268, version 1.0 Hashce966ea6470e77ea66fa28923428ee9f e0652b2b341269d2a489b66b56a01b276b88f935 78e528416f0569f2ff89bfb0dcf524f9b27a9fd847fe5e85e150f2b39fdff090
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/SantanderTextW05-Regular.woff HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 10:06:06 GMT
content-type: font/woff
content-length: 46268
last-modified: Sat, 27 Mar 2021 05:51:44 GMT
etag: "b4bc-5be7e3e4ddc00"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rzc3mguezv0tohRMQSehmRRYhs4%2BN0NiYmRQxVbZ%2FY7XgHWNRP7ihshWUXifqvWTRD03HBdOi6Gw7jsl6IDq8rQfXccyLkPkIFen7iAQ7IIaDbqG%2FTPEHpTYWPXivc7zZNyyH1Fx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8808a297de870b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
172.67.142.188