Report - magallutodahora.shop/

Report Overview

Submitted URL
magallutodahora.shop/
IP
177.154.191.214
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA
Submitted
2024-04-17 15:44:25
Access
public
Website Title
Magazine Luiza | Pra você é magalu
Final URL
magallutodahora.shop/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
magallutodahora.shop	unknown	unknown	No data	No data	5.8 kB	89 kB	177.154.191.214
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-17	792 B	13 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-17	1.1 kB	33 kB	216.58.207.227
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-17	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	magallutodahora.shop/	Magalu
2024-04-17	medium	magallutodahora.shop/	Magalu
2024-04-17	medium	magallutodahora.shop/	Magalu
2024-04-17	medium	magallutodahora.shop/	Magalu
2024-04-17	medium	magallutodahora.shop/	Magalu
2024-04-17	medium	magallutodahora.shop/	Magalu
2024-04-17	medium	magallutodahora.shop/	Magalu

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	magallutodahora.shop/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0	3.2 kB	2023-03-07	2024-04-30
Pretty URL magallutodahora.shop/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0 IP 177.154.191.214 ASN #53038 WDI SOLUCOES EM TEC INFORMACAO LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:35 Last Seen2024-04-30 05:32:20 Times Seen2022 Hash e846984437ce810e4757bb0d935e67f0 0cd5ea1fde5aceba86a2ed59e77e35eff4acd2df 7f161501494bc2f199eaf414c3104318a00e2072f272ebce45540eef58cfb08b Loading...

	magallutodahora.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2	19 kB	2024-03-13	2024-04-30
Pretty URL magallutodahora.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP 177.154.191.214 ASN #53038 WDI SOLUCOES EM TEC INFORMACAO LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 16:02:37 Last Seen2024-04-30 10:56:09 Times Seen2128 Hash b976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3 Loading...

	magallutodahora.shop/	3.2 kB	2024-04-17	2024-04-17
Pretty URL magallutodahora.shop/ IP 177.154.191.214 ASN #53038 WDI SOLUCOES EM TEC INFORMACAO LTDA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 17:44:33 Last Seen2024-04-17 17:44:33 Times Seen1 Hash ac232777da4bb167b4d76baca2ff3e28 709863a9d10c106f3f9f3f64ac8b33849c2a4c62 83c438d2bf9ef15c32a903cc55eb8a024cb641422c9e3d44d0305b273bd967ec Loading...

	magallutodahora.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	88 kB	2023-11-03	2024-04-30
Pretty URL magallutodahora.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP 177.154.191.214 ASN #53038 WDI SOLUCOES EM TEC INFORMACAO LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-03 09:26:43 Last Seen2024-04-30 11:07:45 Times Seen42986 Hash 826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf Loading...

	magallutodahora.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	14 kB	2023-05-09	2024-04-30
Pretty URL magallutodahora.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP 177.154.191.214 ASN #53038 WDI SOLUCOES EM TEC INFORMACAO LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 19:21:05 Last Seen2024-04-30 11:07:45 Times Seen81493 Hash 9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89 Loading...

HTTP Transactions (16)

URL IP Response Size

magallutodahora.shop/

177.154.191.214

200 OK

7.1 kB

URL User Request GET HTTP/2
magallutodahora.shop/
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9462)
Size
7.1 kB (7076 bytes)
Hash
06d068276be696f85f8124cddb245b3a
991f0472940c6bc2a580fb234e5f76430ae05def
e71cf447a58db125fcf78377a933e24eebddb85a6a23b89341ca72f972c49d4a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET / HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://magallutodahora.shop/wp-json/>; rel="https://api.w.org/"
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

magallutodahora.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2

177.154.191.214

200 OK

14 kB

URL GET HTTP/3
magallutodahora.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
ASCII text, with very long lines (59701)
Size
14 kB (13792 bytes)
Hash
51a8390b47aa0582cf2d9c96c5addee2
b16a640874025d085c38119a1a02a3460f83f2de
98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: text/css
last-modified: Tue, 27 Feb 2024 23:18:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13792
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

magallutodahora.shop/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1

177.154.191.214

200 OK

1.7 kB

URL GET HTTP/3
magallutodahora.shop/wp-content/themes/hello-elementor/style.min.css?ver=2.6.1
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
ASCII text, with very long lines (6051), with no line terminators
Size
1.7 kB (1708 bytes)
Hash
1787ccb3d1d8e93d42790b792e0424fd
0aa761f70bbbfe08229c469bcb394269530c537a
bbdb1eb69c6b5cbffaf1be2df2bcbd4a97d2823de9f4b856aae722900a5e27c7

HTTP Headers

GET /wp-content/themes/hello-elementor/style.min.css?ver=2.6.1 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: text/css
last-modified: Thu, 08 Feb 2024 02:10:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1708
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1

177.154.191.214

200 OK

2.4 kB

URL GET HTTP/3
magallutodahora.shop/wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
ASCII text, with very long lines (15672), with no line terminators
Size
2.4 kB (2408 bytes)
Hash
ae085723cb5effbc73d92251f60aaa30
9c3f510afd2bf1ac508cc22e4f071697ec1f3290
eee1ce2620eaf7f585a69794864001be0bde74b874d6a18b9f2d11f074229f2b

HTTP Headers

GET /wp-content/themes/hello-elementor/theme.min.css?ver=2.6.1 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: text/css
last-modified: Thu, 08 Feb 2024 02:10:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2408
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.17.3

177.154.191.214

200 OK

13 kB

URL GET HTTP/3
magallutodahora.shop/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.17.3
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
ASCII text, with very long lines (65496)
Size
13 kB (12696 bytes)
Hash
dd5c83e7ec56ea8d548c79678481e56b
38eed3bd5cfb855c29cebec72fcc4e439b5af3f0
1485ffaff2359f92ff114399e20bd9497016d5efacf39a60d3e720d5f77c7f31

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.17.3 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: text/css
last-modified: Thu, 08 Feb 2024 02:10:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12696
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-content/uploads/elementor/css/post-5.css?ver=1713327597

177.154.191.214

200 OK

354 B

URL GET HTTP/3
magallutodahora.shop/wp-content/uploads/elementor/css/post-5.css?ver=1713327597
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
ASCII text, with very long lines (1217), with no line terminators
Size
354 B (354 bytes)
Hash
ff848c41bee03666da7dcfc11f2783b1
f8b499b8e9b6166e0aa7b8ed95b107949ac6a3c2
ae65af70b1f5fdbf40ea41b532615ea450931fe7278779fa9f317ae40384691e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET /wp-content/uploads/elementor/css/post-5.css?ver=1713327597 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: text/css
last-modified: Wed, 17 Apr 2024 04:19:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 354
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2

142.250.74.106

200 OK

12 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://magallutodahora.shop/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
12 kB (12027 bytes)
Hash
6356e6de2d8919d956e6a5c455288e5c
eb6a7129540b6d3214716f3a519ea9ddcab3cab0
273c3441d098acb837257a062dac75a278a72e3eab06bac9472c5d1d8f7e0ebd

HTTP Headers

GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 15:44:01 GMT
date: Wed, 17 Apr 2024 15:44:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

magallutodahora.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1

177.154.191.214

200 OK

30 kB

URL GET HTTP/3
magallutodahora.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (29531 bytes)
Hash
826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 01:44:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 29531
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1

177.154.191.214

200 OK

4.7 kB

URL GET HTTP/3
magallutodahora.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
4.7 kB (4671 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: application/javascript
last-modified: Fri, 09 Jun 2023 14:19:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4671
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0

177.154.191.214

200 OK

953 B

URL GET HTTP/3
magallutodahora.shop/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
JavaScript source, ASCII text, with very long lines (3164), with no line terminators
Size
953 B (953 bytes)
Hash
e846984437ce810e4757bb0d935e67f0
0cd5ea1fde5aceba86a2ed59e77e35eff4acd2df
7f161501494bc2f199eaf414c3104318a00e2072f272ebce45540eef58cfb08b

HTTP Headers

GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=1.0.0 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:01 GMT
content-type: application/javascript
last-modified: Thu, 08 Feb 2024 02:10:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 953
date: Wed, 17 Apr 2024 15:44:01 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://magallutodahora.shop/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Size
16 kB (15920 bytes)
Hash
3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://magallutodahora.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 13:20:56 GMT
expires: Fri, 11 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 526986
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://magallutodahora.shop/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://magallutodahora.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 83784
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

magallutodahora.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2

177.154.191.214

200 OK

4.6 kB

URL GET HTTP/3
magallutodahora.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
JavaScript source, ASCII text, with very long lines (15752)
Size
4.6 kB (4619 bytes)
Hash
b976b651932bfd25b9ddb5b7693d88a7
7fcb7cb5c11227f9213b1e08a07d0212209e1432
4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:02 GMT
content-type: application/javascript
last-modified: Tue, 13 Feb 2024 23:06:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Wed, 17 Apr 2024 15:44:02 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-content/uploads/2023/12/cropped-magalu-logo-898CB9B3B7-seeklogo.com_-192x192.png

177.154.191.214

200 OK

5.9 kB

URL GET HTTP/3
magallutodahora.shop/wp-content/uploads/2023/12/cropped-magalu-logo-898CB9B3B7-seeklogo.com_-192x192.png
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Size
5.9 kB (5871 bytes)
Hash
3cab08fc314423ba18f706d46d191312
893c6ced8ed61d5dc91545dcdb775b8dbd6050fe
38ec0cb79b537b38ffd02781edf734dfdb2eaaa6ceaed849875990a111bf7fec

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET /wp-content/uploads/2023/12/cropped-magalu-logo-898CB9B3B7-seeklogo.com_-192x192.png HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:02 GMT
content-type: image/png
last-modified: Thu, 08 Feb 2024 02:10:32 GMT
accept-ranges: bytes
content-length: 5871
date: Wed, 17 Apr 2024 15:44:02 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

magallutodahora.shop/wp-content/uploads/2023/12/cropped-magalu-logo-898CB9B3B7-seeklogo.com_-32x32.png

177.154.191.214

200 OK

763 B

URL GET HTTP/3
magallutodahora.shop/wp-content/uploads/2023/12/cropped-magalu-logo-898CB9B3B7-seeklogo.com_-32x32.png
IP
177.154.191.214:443
ASN
#53038 WDI SOLUCOES EM TEC INFORMACAO LTDA

Requested by
https://magallutodahora.shop/
Certificate
IssuerLet's Encrypt
Subjectmagallutodahora.shop
FingerprintD5:7D:3E:2D:FA:1E:05:F0:6A:14:2C:61:CC:13:AB:50:B9:E2:C4:5E
ValidityWed, 17 Apr 2024 01:43:35 GMT - Tue, 16 Jul 2024 01:43:34 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
763 B (763 bytes)
Hash
ef88a227d7112ca064d1988648cae0d3
996679fdc8788ea720ecca3551a980c9f96e259e
767d754ae293b21592370835b84268cf1a5e1fb14e7f6a8d06e3b427167c97a8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Magalu

HTTP Headers

GET /wp-content/uploads/2023/12/cropped-magalu-logo-898CB9B3B7-seeklogo.com_-32x32.png HTTP/1.1
Host: magallutodahora.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magallutodahora.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 15:44:02 GMT
content-type: image/png
last-modified: Thu, 08 Feb 2024 02:10:32 GMT
accept-ranges: bytes
content-length: 763
date: Wed, 17 Apr 2024 15:44:02 GMT
localizacao: Kiris - Ascenty - SP Brasil
servidor: Núcleo Brasil Servidores

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=uhYglXT2pQaGFh8r4NU0s97ASJKC4eP-gvoLAtr7eo68_CnJ45c_4XnEHmtnnaxa8iXtchwr1aZG81zrpnFbeb2434q0YusideZf5WjZIT5b4R2qxge8rxpePD0jOW6O
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 17 Apr 2024 15:43:39 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 40
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections