Report - vpne02-cgtec.decea.mil.br

Report Overview

Submitted URL
vpne02-cgtec.decea.mil.br
IP
177.38.101.37
ASN
#262403 Net Way Telecom LTDA ME
Submitted
2024-05-08 16:07:47
Access
public
Website Title
GlobalProtect Portal
Final URL
vpne02-cgtec.decea.mil.br/global-protect/login.esp
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vpne02-cgtec.decea.mil.br	unknown	unknown	No data	No data	6.5 kB	865 kB	177.38.101.37

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	vpne02-cgtec.decea.mil.br/global-protect/login.esp	6.4 kB	2024-02-26	2024-05-17
Pretty URL vpne02-cgtec.decea.mil.br/global-protect/login.esp IP 177.38.101.37 ASN #262403 Net Way Telecom LTDA ME Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-26 07:35:34 Last Seen2024-05-17 23:54:00 Times Seen3 Hash f40fbf64d5b88ace86da929ae1924aca 59cd79a64374f1a11fcb75b3209fea5014352a3d 8a62cfb70db6e06ef7a409d8169148304490f36c0018f9514be8e82877b002b5 Loading...

	vpne02-cgtec.decea.mil.br/global-protect/login.esp	36 B	2024-02-26	2024-05-17
Pretty URL vpne02-cgtec.decea.mil.br/global-protect/login.esp IP 177.38.101.37 ASN #262403 Net Way Telecom LTDA ME Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-26 07:35:34 Last Seen2024-05-17 23:54:00 Times Seen3 Hash 788c171d6c53ea5a491d75f190e0ee58 37ba8267d0228b10252ac66f57c59faea53a49f6 6ea2e66f72efd18d9c4d36f3605eb02d62c7e87acb7aa7a85d72743c13b11eeb Loading...

	vpne02-cgtec.decea.mil.br/global-protect/portal/js/ie10-viewport-bug-workaround.js	664 B	2023-03-08	2024-05-18
Pretty URL vpne02-cgtec.decea.mil.br/global-protect/portal/js/ie10-viewport-bug-workaround.js IP 177.38.101.37 ASN #262403 Net Way Telecom LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:34:54 Last Seen2024-05-18 17:25:21 Times Seen64 Hash 186770c58c9bdb3faec9a4f32f582cd2 823c4aa387f90353fc6a8933206387499426601d 3a776234892e76fe2105236a8fa5f1ba40b18bb735fff77159f096f7a21aa350 Loading...

	vpne02-cgtec.decea.mil.br/global-protect/portal/js/jquery.min.js	90 kB	2023-03-07	2024-05-19
Pretty URL vpne02-cgtec.decea.mil.br/global-protect/portal/js/jquery.min.js IP 177.38.101.37 ASN #262403 Net Way Telecom LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-19 22:13:18 Times Seen145659 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	vpne02-cgtec.decea.mil.br/global-protect/login.esp	769 B	2024-02-26	2024-05-17
Pretty URL vpne02-cgtec.decea.mil.br/global-protect/login.esp IP 177.38.101.37 ASN #262403 Net Way Telecom LTDA ME Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-26 07:35:34 Last Seen2024-05-17 23:54:00 Times Seen3 Hash 1e52f017baa5aa65ccb04f08cba6d066 0069b2a3072284d793e2bdaf94e2e527dddf8790 c628205d0660134a90d5879ff747febb10ab12610d6ea5ade1dff5214fd531a9 Loading...

	vpne02-cgtec.decea.mil.br/global-protect/login.esp	621 B	2023-10-21	2024-05-17
Pretty URL vpne02-cgtec.decea.mil.br/global-protect/login.esp IP 177.38.101.37 ASN #262403 Net Way Telecom LTDA ME Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-21 21:27:01 Last Seen2024-05-17 23:54:00 Times Seen5 Hash 74ba5712235062de64c14c5fd46507dd 69986f18d78a922d320afeddc175ae05be6859f0 2edbd306abe254c5a5fdb84187d7eeaaeeb158be8f570599ee4a3e12fd57d177 Loading...

HTTP Transactions (12)

	URL	IP	Response	Size
	vpne02-cgtec.decea.mil.br/	177.38.101.37	302 Found	173 B
URL User Request GET HTTP/1.1 vpne02-cgtec.decea.mil.br/ IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type HTML document, ASCII text Size 173 B (173 bytes) Hash edf9c3097dbe9a56c00d8d3d5e838180 6ee2d420163c0a351408b89d23596095049b49f3 f491ce42862e2844e12d1d7ec302d2a53c301b6a320acf1074b50798057171af HTTP Headers `GET / HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Wed, 08 May 2024 16:07:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: keep-alive Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Location: /global-protect/login.esp Set-Cookie: SESSID=c98095b0-9128-499f-ba23-8a09197d5ce8; Path=/; SameSite=Lax; HttpOnly; Secure X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data:; style-src 'self' 'unsafe-inline';

	vpne02-cgtec.decea.mil.br/global-protect/login.esp	177.38.101.37	200 OK	11 kB
URL User Request GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/login.esp IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type HTML document, ASCII text Size 11 kB (11444 bytes) Hash b593f2d8dc3c614193c6566acac019c7 f35fd79c7ca0a87ed383c51108a8ae47240d0272 36d36d697854df65229cf5cf1afece637e51c0560fca56c9e272d24b72f8b736 HTTP Headers GET /global-protect/login.esp HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: SESSID=c98095b0-9128-499f-ba23-8a09197d5ce8 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 11444 Connection: keep-alive Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Set-Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5; Path=/; SameSite=Lax; HttpOnly; Secure X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data:; style-src 'self' 'unsafe-inline';

	vpne02-cgtec.decea.mil.br/global-protect/portal/css/latofonts.css	177.38.101.37	200 OK	10 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/css/latofonts.css IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type ASCII text Size 10 kB (10032 bytes) Hash 923a21f014c3f9a02649eb66d739a889 63256b65ac1384096cc5070e267d89835a5ea7ea ed85e761225b32bd7f244b4d1d8e5f26c42c9d2676c969681e949423c30c45b0 HTTP Headers GET /global-protect/portal/css/latofonts.css HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: text/css Content-Length: 10032 Connection: keep-alive ETag: "661c7774-2730" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/js/ie10-viewport-bug-workaround.js	177.38.101.37	200 OK	664 B
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/js/ie10-viewport-bug-workaround.js IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type JavaScript source, ASCII text, with CRLF line terminators Size 664 B (664 bytes) Hash 186770c58c9bdb3faec9a4f32f582cd2 823c4aa387f90353fc6a8933206387499426601d 3a776234892e76fe2105236a8fa5f1ba40b18bb735fff77159f096f7a21aa350 HTTP Headers GET /global-protect/portal/js/ie10-viewport-bug-workaround.js HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: application/x-javascript Content-Length: 664 Connection: keep-alive ETag: "661c7774-298" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/css/ie10-viewport-bug-workaround.css	177.38.101.37	200 OK	532 B
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/css/ie10-viewport-bug-workaround.css IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type ASCII text, with CRLF line terminators Size 532 B (532 bytes) Hash bda718f817fa9168a6dfb08518c7bb69 9835324b9bcc1025ed7340b07e0187b5a4278e92 5ac941eaf51566c7c1ea17859ff5932facd399924cfdae3ca5758d441c964f96 HTTP Headers GET /global-protect/portal/css/ie10-viewport-bug-workaround.css HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: text/css Content-Length: 532 Connection: keep-alive ETag: "661c7774-214" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/css/bootstrap.min.css	177.38.101.37	200 OK	156 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/css/bootstrap.min.css IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type ASCII text, with very long lines (65324) Size 156 kB (155758 bytes) Hash a15c2ac3234aa8f6064ef9c1f7383c37 6e10354828454898fda80f55f3decb347fd9ed21 60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36 HTTP Headers GET /global-protect/portal/css/bootstrap.min.css HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:23 GMT Content-Type: text/css Content-Length: 155758 Connection: keep-alive ETag: "661c7774-2606e" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/css/login.css	177.38.101.37	200 OK	22 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/css/login.css IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type ASCII text, with CRLF line terminators Size 22 kB (22243 bytes) Hash 5dcc2cc6a77675a64eb3869a344a1825 1a9a99207b34cc05cffdee0508bb77fe151182d8 3c125ff65167ac7e35a6b7c4f6e23d83e159a0c4c61fdab65952818e202c3722 HTTP Headers GET /global-protect/portal/css/login.css HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: text/css Content-Length: 22243 Connection: keep-alive ETag: "661c7774-56e3" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/js/jquery.min.js	177.38.101.37	200 OK	90 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/js/jquery.min.js IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type JavaScript source, ASCII text, with very long lines (65451) Size 90 kB (89476 bytes) Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d HTTP Headers GET /global-protect/portal/js/jquery.min.js HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: application/x-javascript Content-Length: 89476 Connection: keep-alive ETag: "661c7774-15d84" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/images/logo-pan-48525a.svg	177.38.101.37	200 OK	12 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/images/logo-pan-48525a.svg IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type SVG Scalable Vector Graphics image Size 12 kB (12316 bytes) Hash d7080972174045c97fdfd9e1079f98a1 093300ee749e8cd4ac08a98002c5d19a35b3d785 5a47372139537805b728dd087610aaa56d532b9c3342b3ef891446b8c7410d31 HTTP Headers GET /global-protect/portal/images/logo-pan-48525a.svg HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: image/svg+xml Content-Length: 12316 Connection: keep-alive ETag: "661c7774-301c" Expires: Sat, 18 May 2024 16:07:24 GMT Cache-Control: max-age=864000 Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/js/ie10-viewport-bug-workaround.js	177.38.101.37	200 OK	664 B
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/js/ie10-viewport-bug-workaround.js IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type JavaScript source, ASCII text, with CRLF line terminators Size 664 B (664 bytes) Hash 186770c58c9bdb3faec9a4f32f582cd2 823c4aa387f90353fc6a8933206387499426601d 3a776234892e76fe2105236a8fa5f1ba40b18bb735fff77159f096f7a21aa350 HTTP Headers GET /global-protect/portal/js/ie10-viewport-bug-workaround.js HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: application/x-javascript Content-Length: 664 Connection: keep-alive ETag: "661c7774-298" Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/images/favicon.ico	177.38.101.37	200 OK	2.5 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/images/favicon.ico IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Size 2.5 kB (2518 bytes) Hash 34f742f3a363b7c07be9f2dd3d219b6e b32302c895874d6c111d2f96000644a84659e67b 5c5d1040ab3ad04322bd805911ee05c23275a8371bd7df245cb3a87ad1ee77d2 HTTP Headers GET /global-protect/portal/images/favicon.ico HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:25 GMT Content-Type: image/x-icon Content-Length: 2518 Connection: keep-alive ETag: "661c7774-9d6" Expires: Sat, 18 May 2024 16:07:25 GMT Cache-Control: max-age=864000 Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

	vpne02-cgtec.decea.mil.br/global-protect/portal/images/bg.png	177.38.101.37	200 OK	553 kB
URL GET HTTP/1.1 vpne02-cgtec.decea.mil.br/global-protect/portal/images/bg.png IP 177.38.101.37:443 ASN #262403 Net Way Telecom LTDA ME Requested by https://vpne02-cgtec.decea.mil.br/global-protect/login.esp Certificate IssuerGlobalSign nv-sa Subject.decea.mil.br Fingerprint9D:1D:03:33:16:43:FB:CA:2C:72:D2:29:58:2C:0A:7C:8C:B0:F8:ED ValidityWed, 28 Feb 2024 20:56:54 GMT - Mon, 31 Mar 2025 20:56:53 GMT File type PNG image data, 4098 x 2208, 8-bit/color RGBA, non-interlaced Size 553 kB (553403 bytes) Hash 169f4ad77c827e3ccb726f9a61ae715c fee1b4efce3da597a21da71b545b5c9e9b4154c2 61ee174249c5ce47f2cdce137bed4ac2e6a4e7bc7eacb7761bd614d11d2bbab0 HTTP Headers GET /global-protect/portal/images/bg.png HTTP/1.1 Host: vpne02-cgtec.decea.mil.br User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://vpne02-cgtec.decea.mil.br/global-protect/portal/css/login.css Cookie: SESSID=6d0e75de-b4ff-4e49-bbfc-7417fb2c2eb5 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Wed, 08 May 2024 16:07:24 GMT Content-Type: image/png Content-Length: 553403 Connection: keep-alive ETag: "661c7774-871bb" Expires: Sat, 18 May 2024 16:07:24 GMT Cache-Control: max-age=864000 Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline'; Accept-Ranges: bytes`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN