| GET www.gelodoporto.com.br/include/res/img/logo-right.png | 173.236.244.92 | 200 OK | 181 kB |
URL GET www.gelodoporto.com.br/include/res/img/logo-right.png IP 173.236.244.92:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerLet's Encrypt Subjectwww.gelodoporto.com.br FingerprintE4:15:0F:A4:DA:04:DA:3C:B7:A2:4A:0C:9C:A2:52:79:A3:99:D2:0B ValiditySat, 01 Mar 2025 07:50:48 GMT - Fri, 30 May 2025 07:50:47 GMT
File typePNG image data, 898 x 218, 8-bit/color RGBA, non-interlaced Size181 kB (181380 bytes) Hashde8387d0043560af60ad6fad70a7ef53 eea3387be57dbb86365aa7e15cfae8bac30a242e e2320b27fade0c77c660f5cd376bd931ea9de86a2364b4f89c5a6313e884d499
GET /include/res/img/logo-right.png HTTP/1.1
Host: www.gelodoporto.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/include/card.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 17 Sep 2024 09:05:56 GMT
etag: "2c484-6224cff478500"
accept-ranges: bytes
content-length: 181380
cache-control: max-age=2592000
expires: Wed, 23 Apr 2025 05:41:31 GMT
vary: User-Agent,Accept-Encoding
content-type: image/png
date: Mon, 24 Mar 2025 05:41:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js | 104.17.24.14 | 200 OK | 8.3 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js IP 104.17.24.14:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8550), with no line terminators Hash330ced9fb9619c9b605e47730355869a 842f7329266618618689052402242fc3ffb50378 2950fccfc1560fd10d219e1ac89bb2da789794eba5b5288311c1b3b4a6aab945
GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Mar 2025 05:41:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 3074
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-2087"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 285006
expires: Sat, 14 Mar 2026 05:41:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=69m3DsqbIAT97sp71ohF5Pacomgu0h7h4ZdhlL8bc2Pxhy9XwU7PIFkaznUXwphXjNcjiifmykuN8SYrnH0SoN2hkAJZqASHKvsVsH6cLtITdi6NWvUcTo97DyjcVYZxmP2mywQy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9253d70a9eed568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| POST telegrambotcheck.duckdns.org:5001/receive_token?referrer=loco | 102.165.14.4 | 200 OK | 13 B |
URL POST telegrambotcheck.duckdns.org:5001/receive_token?referrer=loco IP 102.165.14.4:5001
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerSectigo Limited Subjecttelegrambotcheck.duckdns.org FingerprintAA:9A:6C:CD:FD:08:C4:6B:49:1F:5D:E4:58:27:41:6A:90:CE:1F:FB ValidityFri, 03 May 2024 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash58bede4a7735521978693943a044a600 3b920f698c36ab96176eae0f330449acf0510635 b3245801ba28071735b9a8e59e66e4bd98fb9ad443dfe711a75022199d75226a
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - DynDNS domain |
POST /receive_token?referrer=loco HTTP/1.1
Host: telegrambotcheck.duckdns.org:5001
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.gelodoporto.com.br/
Content-Type: application/x-www-form-urlencoded
Content-Length: 54
Origin: https://www.gelodoporto.com.br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: TwistedWeb/24.3.0
Date: Mon, 24 Mar 2025 05:41:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 13
|
|
| GET www.gelodoporto.com.br/include/res/img/LHDN_logo.png | 173.236.244.92 | 200 OK | 250 kB |
URL GET www.gelodoporto.com.br/include/res/img/LHDN_logo.png IP 173.236.244.92:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerLet's Encrypt Subjectwww.gelodoporto.com.br FingerprintE4:15:0F:A4:DA:04:DA:3C:B7:A2:4A:0C:9C:A2:52:79:A3:99:D2:0B ValiditySat, 01 Mar 2025 07:50:48 GMT - Fri, 30 May 2025 07:50:47 GMT
File typePNG image data, 3163 x 2463, 8-bit/color RGBA, non-interlaced Size250 kB (250040 bytes) Hash2752d3c6e82195b5b7841de1f5c71d39 292d387008a4c1707d0244d65f575395793cdfaf da44e1af8f8ece6f0dcc6f8a50f86d400c7133cf9c203d75efb303cef239498d
GET /include/res/img/LHDN_logo.png HTTP/1.1
Host: www.gelodoporto.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/include/card.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 29 Jun 2024 23:42:52 GMT
etag: "3d0b8-61c0fec21f700"
accept-ranges: bytes
content-length: 250040
cache-control: max-age=2592000
expires: Wed, 23 Apr 2025 05:41:32 GMT
vary: User-Agent,Accept-Encoding
content-type: image/png
date: Mon, 24 Mar 2025 05:41:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| GET www.gelodoporto.com.br/include/card.php | 173.236.244.92 | 200 OK | 2.7 kB |
URL User Request GET www.gelodoporto.com.br/include/card.php IP 173.236.244.92:443
CertificateIssuerLet's Encrypt Subjectwww.gelodoporto.com.br FingerprintE4:15:0F:A4:DA:04:DA:3C:B7:A2:4A:0C:9C:A2:52:79:A3:99:D2:0B ValiditySat, 01 Mar 2025 07:50:48 GMT - Fri, 30 May 2025 07:50:47 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2878), with no line terminators Hashd5907aaa6f28faa66383ab60331aaa2f 3cadbdf412ad7ff4c408852207fba92b85db6b82 de57e05a9116ec446c094d1676bfa1f790e93f966ff29dd677b570e8c9187443
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Suspicious Javascript code |
GET /include/card.php HTTP/1.1
Host: www.gelodoporto.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=600
expires: Mon, 24 Mar 2025 05:51:31 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1103
content-type: text/html; charset=UTF-8
date: Mon, 24 Mar 2025 05:41:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css2?family=Karla&display=swap | 142.250.74.10 | 200 OK | 859 B |
URL GET fonts.googleapis.com/css2?family=Karla&display=swap IP 142.250.74.10:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File typeASCII text, with very long lines (877), with no line terminators Hash4ade2b92fe5883971abb2f748040f40c 0af80606ea431f1e7bfe66bfe0c8372dcc9a5d96 4d03744ff6be6d8b67f3fc2840dd3d2885400d3544ce19375572b426afd79e6e
GET /css2?family=Karla&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Mar 2025 05:41:32 GMT
date: Mon, 24 Mar 2025 05:41:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.gelodoporto.com.br/include/res/img/logo.png | 173.236.244.92 | 200 OK | 5.3 kB |
URL GET www.gelodoporto.com.br/include/res/img/logo.png IP 173.236.244.92:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerLet's Encrypt Subjectwww.gelodoporto.com.br FingerprintE4:15:0F:A4:DA:04:DA:3C:B7:A2:4A:0C:9C:A2:52:79:A3:99:D2:0B ValiditySat, 01 Mar 2025 07:50:48 GMT - Fri, 30 May 2025 07:50:47 GMT
File typePNG image data, 150 x 73, 8-bit/color RGBA, non-interlaced Hashb7d727ea7f81e0c12a9350a0635ce462 9fe221f42c53bc774aba82a22433c8666b90de5d 08affdaa0e2f8cc0c5d6260c80eefc945ec2fe79650f029def372d9e0618a000
GET /include/res/img/logo.png HTTP/1.1
Host: www.gelodoporto.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/include/card.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 17 Sep 2024 08:47:26 GMT
etag: "14a0-6224cbd1e4380"
accept-ranges: bytes
content-length: 5280
cache-control: max-age=2592000
expires: Wed, 23 Apr 2025 05:41:31 GMT
vary: User-Agent,Accept-Encoding
content-type: image/png
date: Mon, 24 Mar 2025 05:41:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| GET www.gelodoporto.com.br/include/res/css/my.css | 173.236.244.92 | 200 OK | 2.1 kB |
URL GET www.gelodoporto.com.br/include/res/css/my.css IP 173.236.244.92:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerLet's Encrypt Subjectwww.gelodoporto.com.br FingerprintE4:15:0F:A4:DA:04:DA:3C:B7:A2:4A:0C:9C:A2:52:79:A3:99:D2:0B ValiditySat, 01 Mar 2025 07:50:48 GMT - Fri, 30 May 2025 07:50:47 GMT
File typeASCII text, with very long lines (2308), with no line terminators Hash272a7d09c626b151cde2f364904de1d1 6ec7bbd081dec439e26ff9c40a58c770e191609a 332a6e72fe362a766aff0a717955e5f728045d615aa64bd5bfff95676d69d99e
GET /include/res/css/my.css HTTP/1.1
Host: www.gelodoporto.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/include/card.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 17 Sep 2024 09:10:26 GMT
etag: "809-6224d0f5f6480-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 23 Apr 2025 05:41:31 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 751
content-type: text/css
date: Mon, 24 Mar 2025 05:41:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js | 104.17.24.14 | 200 OK | 88 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js IP 104.17.24.14:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32 ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Mar 2025 05:41:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 990982
expires: Sat, 14 Mar 2026 05:41:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D1PSXgSaWSnXwmNJu8GcA9XK86%2FsGJrZvWqEjohyaQ2P5OKC9WTg2GlTgRcDP8ISMXlHDASZxc5EZR0irhhXiP%2FkthDEExKTUpS%2FsAINE8vRui4E8IZShZkTjhPK9IGJvHNVuoGq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9253d70aaef1568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.gelodoporto.com.br/include/res/jq.js | 173.236.244.92 | 200 OK | 369 kB |
URL GET www.gelodoporto.com.br/include/res/jq.js IP 173.236.244.92:443
Requested byhttps://www.gelodoporto.com.br/include/card.php CertificateIssuerLet's Encrypt Subjectwww.gelodoporto.com.br FingerprintE4:15:0F:A4:DA:04:DA:3C:B7:A2:4A:0C:9C:A2:52:79:A3:99:D2:0B ValiditySat, 01 Mar 2025 07:50:48 GMT - Fri, 30 May 2025 07:50:47 GMT
Size369 kB (369177 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /include/res/jq.js HTTP/1.1
Host: www.gelodoporto.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gelodoporto.com.br/include/card.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 29 Jun 2024 23:00:20 GMT
etag: "5a219-61c0f54058900-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 23 Apr 2025 05:41:32 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/javascript
date: Mon, 24 Mar 2025 05:41:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
|