| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_facebook.png |  172.66.47.115 | 200 OK | 1.7 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_facebook.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hash2b400527c5a65e7d9fa0e231ccfbce1f 575a3c3fa591e8a286e07c09c7e657fb7045a048 7568d4053e61fb7fe04e3a9d1627dfb7664aa83ffaa3be0830f18108bcec5a0f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ico_facebook.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 1656
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2ccc930553fbabf5e2cef80e712fd93b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vSbY6aHj%2BSIE3xphU86U0Esg%2FntA0WfBQz%2FUx%2BSBr7pvzA9PWi7IrpUoTCMo83GZ8pZpjmIMeKT%2FeCflFItTRM8RrJWofETenOeyKpu21CBQaG5on5EmO9vpZUiYwpSs9DkgpUHsTeVIloPu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dc0b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_arrow_left.png | 172.66.47.115 | 200 OK | 2.4 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_arrow_left.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 24 x 40, 8-bit/color RGBA, non-interlaced Hash34d434115f12a30b01f742b879ce68f1 1051b0569a0357abdcc8c7d61325f409dcf7360e 38ce731d0b49dd4ed94618033b7746a5d8e91cdef527ca338d57fb29749ebba4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ico_arrow_left.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 2408
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "35b01dd2b54527d73f77ddd8dfaddd2d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PcrQoMoNAao2JkCc5gbB9i9iRHyiTt2QJItgzSMQoFbDpKK3tNeX6s3CqcG0vz26lAnNK0WRd4S0XgqA3%2BgLPnXhqGFHZ0ukW5OIOH35MEzQt4RRdvEQK1a84n%2FvCYaNr%2FRUsqAMnAf5RY%2Bv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dbdb4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_linkedin.png | 172.66.47.115 | 200 OK | 1.7 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_linkedin.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hasha4b829f93a1bf0d207d86a3ef2bacc37 296e110ff27e23c7a609036f8fc962b219da9e41 2c26e88d0ab68bcaf580553af193971e87373526e49ca0a6888509b215da89d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ico_linkedin.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 1659
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4252bd94c9b05e829b66ccb7a7a17429"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zq5%2BFWaD209MPhPUhIFKHNkLIXhMBH2uXxaIBNK1OcYY9CkFNOY4lXYSgE40rU8XCfbDlMxi9QtcQtj2xJiaId0uxHcxB1V%2Fh0le5tqr1TAxy2wni2buTgOrJ85dc1qNNbeBE%2B%2BcaoTaCRys"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dc4b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_youtube.png | 172.66.47.115 | 200 OK | 1.9 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_youtube.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hash96f3d2787dccf0c80f27e67f275c2cd6 e3497d1e7e4dc19a9e6841634c21a6a15e899f26 c710ea87212fb57747a160c69e0523f21cd023a490eb2aeb6c4bb67d5d2f9d42
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ico_youtube.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 1937
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d2220ba19ee9edfa0c80c7b0378cd682"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EwqNcEx8Q6yaOJn0h5DrDkJtYE7jrHhlDte3TFiQQXy%2FSrG4WYukKfom1lqV7NIk3ZWWAAZQd7quSprvJFoEzF27sReQGwVWzTojGABoigzH9D3v8Q57ibq5ee0SW%2FI93GAS98%2BOnzFzl8Fq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284dc9b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_twitter.png | 172.66.47.115 | 200 OK | 1.8 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_twitter.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hasheedb30dbc8bf541c1d33d63e2654a79c fe74769a5907bba7bd615e57cb42dc869f0a24bc f6da6a1f63c93011bddc4b11e0b9ce297c8f9ec78fc895df5e049c2fa52b60ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ico_twitter.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 1761
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d1861dc2debcc802e96f3e4bd45c6709"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qma9HCd8V4oClRlBzSLy5uOLas6R5ochMuPmQKyDyEXRUFYXJdM1P6QEZhS7j3zm86cJ9m7gLZ6t%2Fs2K39qiArp2mj7r7brK9tXGHiHnH12xgIjcf2onnGxiRausRv0gmfFdglwgE4p08JRt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dc3b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/Business_loan_2021.jpg | 172.66.47.115 | 200 OK | 18 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/Business_loan_2021.jpg IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 419x246, components 3 Hashd860ba60721b40f21d2b1d3d0d78519d 8aaa2a8e8f8019edd843fba4a58e7daa7af0356e 1423dd6c870a71a831303b3467c899eb0d6ca208af742a72a78e4c14742004f0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/Business_loan_2021.jpg HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/jpeg
content-length: 17559
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ebffe808e0e0b331dfa8e338658bc39e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AdPSTNbdboNNPlnYkEJlJyxCqAM4uUhuPJ1MUFB8rUfIQqC5rUiJKultoHLtKK51MFLejs0YE2BNnJG0o1t6EkFVnLgMoBk2kSZ3Ccv1nydEBfoV4AEzXmRGeBedhkVqOHFKMPrdCS0ovgoX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283db6b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/BOIPA_1.png | 172.66.47.115 | 200 OK | 200 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/BOIPA_1.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 419 x 246, 8-bit/color RGBA, non-interlaced Size200 kB (200029 bytes) Hashd9b0bfe6c501cbef9db61b61c811eda5 5868ef9b1b140887e9ef314ccbf1cf9eab31b3d1 d5087a250adefee9053147a05b0e03cbd91054524c4776223e4ad9f9748cd72e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/BOIPA_1.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 200029
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "15b53cabff1b8e6acd574e80d6cba306"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rdahv%2ByciuncWQEKU9hG%2BeTbGuWcnu%2B9LojxXS%2BgH4ETT7M0F5Z5wkOQcLgJvWJNE1RkqcFXkhnOQpEIZbI7NFrETvxeKJ0Z2fqUxWBR3%2F65wmaE0B21bXd5LuxI459DILuQ7mNIeQ7BZr7W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dbab4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/FX_PAY.jpg | 172.66.47.115 | 200 OK | 56 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/FX_PAY.jpg IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 419x246, components 3 Hash4d792f6d963224e2e67f984e55776fe1 65a3ed789d02cd27db2bf43b31810e4585b420a6 9b1ebacdc96180e7e6a5361c61d0e5604670f74051b6603381f20b44437686fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/FX_PAY.jpg HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/jpeg
content-length: 56324
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d809003efbd81e3f549eaa96b1f55659"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dw9f8K9wJJLmUh2nEmqIkp5rvHuhxttKhzAnxUoSz3P2nKAtC0xxOOqqH3BsfsROCN%2FQfb%2B7LSFwemwf%2FfcJm8YzXKNI0ADaC3TRxDcWe%2FkmKIGny1FQsIA3PhNvRhL1hptWDo6LNn513yfj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283db8b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bol_KeyCode.jpg | 172.66.47.115 | 200 OK | 42 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bol_KeyCode.jpg IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 419x246, components 3 Hashebf76c7c664810387918009dc60dad04 8aea53ac5497b8feb040207756e3ab007117082a 1e48628b9a19642862743f84b14aa809882d010fdf588a6efebf62044e68213f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/bol_KeyCode.jpg HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/jpeg
content-length: 41682
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "af9318bf060741fd0803944b6afbebee"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2BMlzyVw1qVP%2FZbcUrDnYwjgQLSWceAfvm9NJW3Z7%2FK%2F3pfn3N3KPwRH8mftaIu3hZNzPfpoQpAkU16HzM6jB07ijYr8hgJgCtE%2FYP%2FhIir%2Fkfk5IUmt10AwEUB2EOyi0EZT4JiWdurBNl63"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dbcb4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/fonts/glyphicons-halflings-regular.woff | 172.66.47.115 | 200 OK | 63 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/fonts/glyphicons-halflings-regular.woff IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (448) Hashacaa46fbb2759d41323f89056ccd8bd7 4c553309d75d6cf9f13826364b18f5599909a3b8 e2f509f8c8e727f81c6ebea9fac36512bcb814485bf61eec785398fc263e8ebc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bootstrap.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/html; charset=utf-8
content-length: 63095
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5093e68130711003ef9230ac7ae4cd9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qVx3v3VKRB2GqWiCMQiWlI%2BkCGS113%2F9fVhIrUElQrk%2FaI85ogHITILaf88GO5imL01d8NoOrz0qoghgRgDcrWW9pyAaJUJsAZWeALGkMoG9XA1Rw3uXnt%2BJXp3ruY4YDCxiYhNFqlyC6wZW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529ee7db4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-migrate-1.js | 172.66.47.115 | 200 OK | 139 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-migrate-1.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Size139 kB (138831 bytes) Hash40fd8ba7e38eae4e48f45cd00004ce52 82d27cc5472d155db0070f3fecc861508e3d12dd a4a836360202f73c3b8d8a1907ee91cca0a297f97ca22372ba6cb002cb0b34ce
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/jquery-migrate-1.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"817f65b976e9f73135d254b8930fde67"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcMk31ouXQvMH8ckpriE0ujZYu1vyVCzJohbiJhRRVRs4Yk0x1t0pwdxROUSPT0PZxPMETuduACWoQTRlyVeumMhdpTcsQZ21mmADU2BuvpMJxIXFcHqZhX9t8Di24gVu3pYnjxOORbHjKms"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284dd2b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/analytics.js | 172.66.47.115 | 200 OK | 25 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/analytics.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (1325), with CRLF line terminators Hashdb6d84dd27431f45a5f616d900161567 4853f73993336128792fa4d14f40065ecf0b0e87 d0c62436f6a7f39b8f6c59fb639da2b1b9746c64d616ce4b7c80d6c180fe389f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/analytics.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"591efe111d9e171252a5567cc4c2485b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GgzhPXrkP0pdNnrQLvvbIsNLJgRB%2F425F16QWBd7fzqg1Y0UahxRIe6a5CnRasGLH%2FuEGZJLJ2bek%2Fxavw%2FeDn2rgO89GtcQfb7WinxaTlslmCTje4xQucfPmmog0jkDeQc%2BFXX272nejiEK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25285de5b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/woff/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff | 172.66.47.115 | 200 OK | 63 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/woff/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (448) Hashacaa46fbb2759d41323f89056ccd8bd7 4c553309d75d6cf9f13826364b18f5599909a3b8 e2f509f8c8e727f81c6ebea9fac36512bcb814485bf61eec785398fc263e8ebc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /woff/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/html; charset=utf-8
content-length: 63095
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5093e68130711003ef9230ac7ae4cd9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZVSwL2pdS4Qm7R%2F06eDYYDVdljKxVspSzkswDhU3Wfd8mPoIRvQJkd1rn86gEA3HkUSZJXF%2F2HaWfD7eldvM%2BHVl7viC2eAQIbywUNeJSnok1r0OT0%2FnuM1%2F4fpZ4xKxAC0dD%2BWPPSlzg51t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529ee7cb4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-ui-1.js | 172.66.47.115 | 200 OK | 324 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-ui-1.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (64555), with CRLF line terminators Size324 kB (324134 bytes) Hashee3e25937b6e2befd0ddeec4a5b59539 8411a71da134a0da6e8283d090491816dd99cb70 cfdf7010ee8c8f7539c2a808dfb76cbcfa5f3535a4f7dea1be94e85ba12a09bb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/jquery-ui-1.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"41b064983764f7eabaa04a2c46b9a101"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W11Sorcp94JVvOzLZ%2BVBbEZrIsCB8leJf0hnALr4306j65mG03EXTGjJMdJXeN7w6rrj%2BYEiDIIZhpWcK9PkNf1T2SiFeqmyBFUpF7GGFywzod1GVwSrlMu2VzLx4T7jTSBtGaGK7bB8lir0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284dd5b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/ | 172.66.47.115 | 200 OK | 19 kB |
URL User Request GET HTTP/2banco-do-br-49h.pages.dev/ IP172.66.47.115:443
CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (448) Hashacaa46fbb2759d41323f89056ccd8bd7 4c553309d75d6cf9f13826364b18f5599909a3b8 e2f509f8c8e727f81c6ebea9fac36512bcb814485bf61eec785398fc263e8ebc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET / HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5093e68130711003ef9230ac7ae4cd9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tce%2F94K6jND6mZc2Qoy0tOUMNtfb2g9fp39gsnMrHElp1U9i55picuif4uMrhSK2dtFiUQixMe%2BA%2BVkWIXsyixWJrt25y0YPAX0nhi1EBdHOUomUg0LUatX3HE8CBA2jhYOLFra8Bps205oU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25246d5656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_arrow_right.png | 172.66.47.115 | 200 OK | 2.4 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ico_arrow_right.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 24 x 40, 8-bit/color RGBA, non-interlaced Hash1d4292095ec612cc8f47d10871f1f366 3f0c4b53428e50c80679730af90dff90e01ea8d7 7a2a428d7595bea87780b07b3ce483a0ad656a764fbfda10ad03062005787194
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ico_arrow_right.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:02 GMT
content-type: image/png
content-length: 2421
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "bd6eefd8ae002504129e5a86b92f643f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BV4dpRAjiGfm3RFfSafs73TjRJJU1RTBxKfppgXRYhX50oOAV3HgDYG6fOhTiAmG0wUAQ%2FGsgHB%2Bs3NkqA3SxF8DHzSLxhFwFhT4I16%2B7UZnw2JogPV4CIf9KUKUQCLqiwBkd17qR%2BITx3B8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283dbeb4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/Fraud_Image.jpg | 172.66.47.115 | 200 OK | 92 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/Fraud_Image.jpg IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 419x246, components 3 Hash922b69d006f6cca75e46cda0bff39a30 4abc1ebe197ae42f1ed8569bce39c9b82c0c296a b58cff9591490449873c9a4ce5a23d0ecd7566b106f7f0fd42350d5a522e4611
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/Fraud_Image.jpg HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:02 GMT
content-type: image/jpeg
content-length: 91547
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5b218ebeec373290df1d0e2ad9764b1b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u61cASegdIMdFe5Lh8z1yKIw197RU9K6GJp%2Fovl8WzNgS7ClZybVrYQQyHqUcjKnst7uQigBJLMWWJpDKdpr%2F9%2FsiBayAkGZh7SoGZ9HI3FqKHegUeYyBTEXhNs1a5HGUs%2Fww32dqrAeQ5zu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25283db5b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/assets/js/jquery-3.5.1.min.js | 172.66.47.115 | 200 OK | 34 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/assets/js/jquery-3.5.1.min.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hashb61aa6e2d68d21b3546b5b418bf0e9c3 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /assets/js/jquery-3.5.1.min.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"42b640de36bc222d178a9b1d72472fc0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CFrsIVZ2I2SGAVRhipDkkEAfz7Aj2rSNUGvmPhR8lrna7fXfBSTg0Hew1Z4UUfm4r6MWR7nVd8v2SiRkxU6x1HVoaCtpHQJYVULJR9UoZGmtUNsQ8T669lZAksVjnPUtCLNRpLpueRO6kgst"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284de2b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery.js | 172.66.47.115 | 200 OK | 8.2 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashffdefbda7827e3bd9e07f05ced4fcf4b 482a014735c0b02faa5740e0b2faf2dd948f4803 37a4b73f67812e8d8024c650f2d5c6505608c0ee74a723ed1c89bdfe3ff66496
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/jquery.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"83e2c606df09e6983775280500eee9c4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NkokiiX%2FaLk6ujY%2FcUyf1Bb5WreYKA0aY4oDLUYz7UeTr4X5og4jZXpkSWJ%2BEG%2BmlbbhAT51HDKNrbfxu3oCzR%2BL5Ju%2BAMRJ5nKiymp0KRN%2F%2BELBUHx3d8%2BHGBjNLXaqqhuRlErY5DRBxW5e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284dddb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bootstrap.js | 172.66.47.115 | 200 OK | 18 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bootstrap.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (27614), with CRLF line terminators Hash12bc05b00bc8a3aca863bc7980c20355 0e485f260532016e1223e223ae4e29ba40f9fb1d 835e283a44e713b98805b632908a40918403ac46e702e880965dce594cb069c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/bootstrap.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:02 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"cd19d4efd0901ea4bd84717a20f23d62"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlBDmISRc6OPBvANbAR52830ivx%2BwJPQVaG9WOgokNFgTxmD1%2FLDLSSlKcusssUaM9euo8gVdMHBsZ68VmGdERNqAtbANZVBHLFiM%2F0EstmPrIz1EXlvQLbisovgXer%2Fp5Z71Ume0UbXtx4o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284dd6b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/img/header_noise.png | 172.66.47.115 | 200 OK | 18 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/img/header_noise.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (448) Hashacaa46fbb2759d41323f89056ccd8bd7 4c553309d75d6cf9f13826364b18f5599909a3b8 e2f509f8c8e727f81c6ebea9fac36512bcb814485bf61eec785398fc263e8ebc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /img/header_noise.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5093e68130711003ef9230ac7ae4cd9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6pUZtdgL4jPoETFKIuXhdJU52Uost7FhAenOE4bwmducAXGBmbXCm6arZAhFzo3FJLfMDnO1Mrw51srQWQK8Wi5nQo%2B%2B7Bn%2FWyGIUzhixXme78jrGd311BVzIu%2FSvXSLcTLSAtT1ObpppvmG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529ae63b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-1.js | 172.66.47.115 | 200 OK | 43 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-1.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (32056), with CRLF line terminators Hash4b5f62f5d9729ca25f2e213984fdbc15 fb861e670de71f54acb0b96361bfcdb21414df45 292241c671ce958f30e4b2f2e1448c65723bdcf606eb68f2270ea7a89ab1a5a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/jquery-1.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d35a208923f42829deddddedbe42a126"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OjTrMwek8Z3ozOhmPestXYrF6LBwuyZSytID2EzcwmcO1H3nmBgTrxNv9liFHLZ%2FZnQN0Rp2bRg3RtCaXY7tBNf7at%2F%2FpZOjMeTJ3ygxZxaZQYfP1IzA0D5gXYmGcsriBE3WxZImcOsjxLKO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25284dccb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/gtm.js | 172.66.47.115 | 200 OK | 170 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/gtm.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (16795), with CRLF line terminators Size170 kB (169864 bytes) Hash2cd51858ff555c7def323ff9a613c76c f6f33f7f368fbb5cb202ab5e25dda71024717aa6 533b9d5256fcc1260261a70340028f11c8236760067045e7bb99f8ad3a05512a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/gtm.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"8e95265c9e1870b286f5f25ed2a8de20"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4HO%2F6yHmN0yk7ArDUbchZkIWGQdV1D%2BKwGx6B83tk9eNF4g6DIAUVZCJWsqlEpd6pnM4r%2BvJr6CGc35gGpVwTdVcYc2a0hJKL%2Bnom4fX1e5nyqH%2Bl1rg8JnJ%2Fw8sjH7HBX7CzgRmWmfqCzSl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282da2b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bol_logo.png | 172.66.47.115 | 200 OK | 7.6 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bol_logo.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 190 x 29, 8-bit/color RGBA, non-interlaced Hasha53137e4221b87f1d3f87f3f60e56f98 371bf910bd44ab76727dfe9f8d347cda1d8811a6 f6e704e5061d97d639fe906758af7626f2f64292fd4a30833fb68eaa9ab76592
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/bol_logo.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:02 GMT
content-type: image/png
content-length: 7640
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "1f8c08fa1bd514de6f8f55fbaefcfd09"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G7D1sCoLbF%2FTFBbLKPmctvCdPdtCOe4tywezYjOpa1gdPMgcMRCji8BvIb8sNSM%2Fz5BO8siO5se8CyFMXC0IV94LKp9gyLO0NlxSvSzBOSEyBusM%2FaMTKhm6L7f8EbchczmFPVcxrMNQvj%2Bv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282db0b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/fonts/glyphicons-halflings-regular.ttf | 172.66.47.115 | 200 OK | 63 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/fonts/glyphicons-halflings-regular.ttf IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /fonts/glyphicons-halflings-regular.ttf HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bootstrap.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5093e68130711003ef9230ac7ae4cd9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtUJsOZ0MhLKLkTJJJfuB1Qjdpx4jl5YaHI81myo5nsYmEw3s%2BLNidnimJRKSKJ4yIP1GWaPl3NPlhm2O4xHd79uw%2F0idsSFYoVM7xGpeOEnsNgF09wPGTseZHmOZ7MtSY7TDqLBiNI%2FcUYa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd252a1e8cb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/img/btn_bol_status.png | 172.66.47.115 | 200 OK | 63 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/img/btn_bol_status.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /img/btn_bol_status.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5093e68130711003ef9230ac7ae4cd9d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5FRf3ZkyJepbVn1q2%2F7NeYb%2BfS5%2BXZBbovFLKsIqLQrwRixtV5B0KTmaPTPD4YZTQWZ5daVnRfYxTtCMV2mexMxD5qB7T2qzj8He2JWKlGc5Pvo7CKIqqGOZNcg8BfPn6rOp6H%2FPNWi13Kj4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529be69b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/assets/images/favicon-32x32.png | 172.66.47.115 | 200 OK | 1.9 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/assets/images/favicon-32x32.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 32 x 32, 8-bit/color RGB, non-interlaced Hash99f204c3b2caf7af75b58fe4e8a37550 5fe0e866d4e57560852ff73930e73f8743b4a682 5fac1b81db8584d623f8a0b0c85deb559b7538ca0979a15323a46263bc608a08
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /assets/images/favicon-32x32.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:02 GMT
content-type: image/png
content-length: 1893
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2205931c552d45f33260c9cc5c4639f0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sMnPxc8t2jAcL3syq3lXRIsD0DNzi3nIpX07EhKX9vFE7snU0ccfaOMEe0LSoHdzIsDLSxkhx99Gxzf7fmiZ8niG7NHFItckZAfKAeyun%2BNn4oj2Fe0pS1NIhisXB8uMkrhe83PKDF9fAs0S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd252b7f0ab4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home_bg.jpg | 172.66.47.115 | 200 OK | 261 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home_bg.jpg IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=SONY, model=NEX-6, orientation=upper-left, xresolution=134, yresolution=142, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 8.0 (Macintosh), datetime=2019:02:20 11:59:03], baseline, precision 8, 1507x605, components 3 Size261 kB (261252 bytes) Hash5d1d2fe634965b2517f96ef546bd0466 d0c04b4b937777949916f7e175a332669852e312 2b16162cb701d75d0ce311c0b4b14710d4c9663ec4f2496ca9974b35c9f55a6b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/home_bg.jpg HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/jpeg
content-length: 261252
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "00893865ee545c04baf294056728b01b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KtKyiEf4rMndtw5cbg0Xl4r1Cgv3UAfC5Dpqsl1KH8zQMlHPOaNhgOBHwHQgYj4j6sEegYtdH9%2F4GMsZDPCKhyDDu%2BANQaA3%2FqV0770HEOE77SextR6aOe9NOUMpJKlWqQ4HukJlf8yyWDy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529be6ab4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/login_chevron.png | 172.66.47.115 | 200 OK | 3.8 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/login_chevron.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 297 x 292, 8-bit/color RGBA, non-interlaced Hash8c6a25c42f3d40ee73435e10587b4c0e 98ee100053330e5d28aa1947d5a838f9595e5722 d13ad73b851b2ee3d71c788711f052f69bc869bde73fe891c2475b338e564f4e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/login_chevron.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 3805
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8b2e6867c80dfc632adb1f7a288283ad"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K95vRGY5%2BZ9hvU6PYeQqvwH5eMWzwS4S0LPOricGggbDlweljf4cr9flPeSO%2B3pvPmrOSM6IfsfLEohE9uzrKwrOd%2Bgqdny%2Fd7cWcvDLATT9cmlqFwfVn5ksjFnwkIyh0%2FOKGIr8DowTKN3t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529be6bb4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-ui.css | 172.66.47.115 | 200 OK | 34 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/jquery-ui.css IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeASCII text, with very long lines (360), with CRLF line terminators Hashe06f764a8741392945db4a34d8a87f9a 6a081e6be80abcb3ef34a0b477989f010cf94f12 3eec94c657582f82475c847289170883f7090acf2451ba132c964c8c3bbf8bbc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/jquery-ui.css HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2c7db0e688b2389b22f28ba030be2620"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dNeTKRre1P1c2U1UqQLRAFdIgwadEPmBscizpJPzJ9qCGUh9x8I3E6hzMYTac4WZe6jCNDWh4QD6SA19Pcb%2Bl9F%2B1OE5KjnxaamHSOuoSWLYBSzjAmylkfZBBPmJpx%2F3BuMAcZqy2a6ZGao5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25281d9bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ie10-viewport-bug-workaround.js | 172.66.47.115 | 200 OK | 740 B |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/ie10-viewport-bug-workaround.js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeJavaScript source, ASCII text, with very long lines (786), with no line terminators Hash328a59ff6734930fce3dc0250fdcc97e 2e19b6a6fe139de6922012147bb8672acbec1c68 fbd22f79e9daea57bbcec09b7ffbe509ec9f66a0c76d5b5465310b683f9338f7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/ie10-viewport-bug-workaround.js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5560920bb3257fa1d1577a16e78e8ccb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nlxS1w2sOUvjrCeyLgnwW1jiWN7BA9J3d7CzabLaSGcEDnSwrZsC8JuHqMn5c2JaY1Om%2F%2ByYxp2478CgWXF0c11W492%2BBwa%2FGgEUrHV6cBj6EeIBboJ69QE381MXKTT6LI9CBNrATgBIlqn8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282da3b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/chosen.css | 172.66.47.115 | 200 OK | 16 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/chosen.css IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeASCII text, with CRLF line terminators Hash190f4ad7615f0337ea07f9de5c3d7d67 5cd3ec18efc737df207c676c65c70e97620ab498 937e720b00820aeb36f47639040ff268de5e47841b452d8095a95745c3228494
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/chosen.css HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2855046648d831e8d27420ebec0187be"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8f%2B8%2FfUdtXiK5ueDOs8qCYec1%2Fwuu%2FcR1h3ZZtOy0LUKg46enr6jgw9lomoxc0lZX5ib8rit4X2lH58dhMXQJgcD2FXodehiqGy3SkdLr7DHPJ5NwFuGZnxvNP8vNbfpDPlqRZOYG1LurrDD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282dadb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bg.png | 172.66.47.115 | 200 OK | 133 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bg.png IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typePNG image data, 100 x 756, 8-bit/color RGBA, non-interlaced Size133 kB (132605 bytes) Hash9f4143949c8c8c34694e8fde0c5ceb11 dec333cd0d982fa2ac5a3fcdaebc8beef9c293e3 79c7a30baf8f39eb01a52a753aeb3bd4fe433a0548d638c79c0a777665920433
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/bg.png HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: image/png
content-length: 132605
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "044ab3e8a13ee69347bb9a444414eace"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r9zhAa3iYbQCavJPM6A2PM7C3IEqM1qPhPXp9fcE0%2FdvYD4TQLhAHEWlmZSHLvywCMh7sw2Uag9B2zSQjayMIWKdvhYJsKCpxibhULCGsoK7ruREmbzEDczlKI1MPB1IsaOJ2vYOf6t6igzS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd2529ae62b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css | 172.66.47.115 | 200 OK | 31 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/home-style.css IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeASCII text, with CRLF line terminators Hashca92a7578d00e1922282190e4424b763 26320b896aed0079ab814a4de9cf9d71437173f8 7cec1a4c50bfebbf83e303873b88340c3b5c2ae4e272638d8e143fc82b2a2bdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/home-style.css HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5d7627c1d9f2b82733cd1b5cc8c9893b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LhLx5CUgJg4KkNrFH5UNdnSFvKO%2Bh%2BUlHGk04NyZLEQM6Un3VuJqzC8hb1R3ibwroU6pyWVYbF9Qk%2BdSWGK9UxT5hysSkbLLyagLHf2dtDKAqIsMTK7nYHL9sxJib651K0yF2MgVPOoonucx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282dabb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bootstrap.css | 172.66.47.115 | 200 OK | 97 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/bootstrap.css IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeASCII text, with very long lines (65308), with CRLF line terminators Hash4997ae233de9781370d45858c55646cf 4d7afa7777274d2e3542094f132aca724ca0dc4e c33acf0aab244ccaf0e67556bd982671b8669e5f40ca7983845a4f89018bf934
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/bootstrap.css HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bbcd254fb29833e573d371b6cc0000c2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4RIWBUorEGfms4UhEaoBEPDeCd6qXZBLItLVlkd5tzdxgCCj7qY%2FwzmUcJKUrBzjV5pJESs8G8rC%2BDTbX7T4%2BrUNzA0V2IJHwSawD5HAI7OZJId8gcGAgr%2FQIoYKyaoqRJn6guTy66pBfOe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25281d96b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/js | 172.66.47.115 | 200 OK | 0 B |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/js IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/js HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-length: 89123
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c19686458ab6d51a34d2152419133b71"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dxij1hrKcfCcyS314lONi0LCq6S%2BUq6XKpc%2F0n%2BurV6uYGm3k9h0lt7xgFjGUxXumShEnD%2BoOqecnXRVxcKSkzPf303D%2FDqmeMEVTnC%2Bp%2BSX8fVnAiV%2FxRlpqZ3XTu72SnV9sx3Seclqjco0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282da1b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/carousel.css | 172.66.47.115 | 200 OK | 2.9 kB |
URL GET HTTP/3banco-do-br-49h.pages.dev/Business%20On%20Line%20Login_fichiers/carousel.css IP172.66.47.115:443
Requested byhttps://banco-do-br-49h.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectbanco-do-br-49h.pages.dev FingerprintE1:8D:65:D7:15:10:F6:28:E9:D4:79:72:49:4E:24:78:28:46:67:E1 ValidityWed, 14 Feb 2024 15:34:39 GMT - Tue, 14 May 2024 15:34:38 GMT
File typeASCII text, with very long lines (3224), with no line terminators Hashe88628c72a560147d8e51fde051e08b9 2e34d40e5985466245258101670431cc554771c3 3826a9663b9b4c567414c673e9b3564952f37fdeed44198d05b6ddc760c4bab9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Bank of America | | PhishTank | phishing | Banco De Brasil |
GET /Business%20On%20Line%20Login_fichiers/carousel.css HTTP/1.1
Host: banco-do-br-49h.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banco-do-br-49h.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:34:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"571e6b807ffa9bbae7302864a92811a4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7txUcVhtMWdZz%2FZiZ3w4TfdbB0LSwMSrK0qt4KoaYM72vREltSCyzYvz8LIbS5pNK1yqgAJh%2FmCFz8bNjy%2B8BWvDEG9E%2BASqsLbvmNDLea38kt1g1%2Fluh299V81HlANfKHfNHMRztTGz1nv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd25282da5b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|