Report - sorakersfolketshus.se/31872

Report Overview

Visited public
2023-12-05 10:12:28
Tags
nordea financial phishing
URL
sorakersfolketshus.se/31872
Finishing URL
cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
IP / ASN
93.90.150.134
#35041 Binero AB
Title
Nordea - Bekräftelse
Phishing - Nordea

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sorakersfolketshus.se	unknown	unknown	No data	No data	493 B	272 B	93.90.150.134
cjagricola.com.br	unknown	2022-02-21	2022-02-22 04:29:14	2023-12-04 05:52:04	6.2 kB	227 kB	162.144.237.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (11)

URL IP Response Size

sorakersfolketshus.se/31872

93.90.150.134

302 Found

0 B

URL User Request GET HTTP/1.1
sorakersfolketshus.se/31872
IP
93.90.150.134:443
ASN
#35041 Binero AB

Certificate
IssuerDigiCert Inc
Subjectsorakersfolketshus.se
Fingerprint72:36:2F:DB:CD:33:A4:1D:6F:75:03:31:29:FC:4F:94:93:07:69:CC
ValidityWed, 11 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /31872 HTTP/1.1
Host: sorakersfolketshus.se
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Tue, 05 Dec 2023 10:12:10 GMT
Server: Apache
X-Powered-By: PHP/7.1.33
Location: https://cjagricola.com.br/teL2aterbetalningab/
Content-Length: 0
Keep-Alive: timeout=5, max=200
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

cjagricola.com.br/teL2aterbetalningab/se?9fae8ca1383c18827a6f165f37c97c90

162.144.237.226

301 Moved Permanently

290 B

URL User Request GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se?9fae8ca1383c18827a6f165f37c97c90
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
290 B (290 bytes)
Hash
1a55e3c0a97a0af96c05d318f95e6369
eee6fbfcaa06eaa9e8f7dc430ed9b36a65a87c73
39ba33647fd3e280c3675a8abf225615d4fdd60c79c137045bb899de9431eb37

HTTP Headers

GET /teL2aterbetalningab/se?9fae8ca1383c18827a6f165f37c97c90 HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
location: https://cjagricola.com.br/teL2aterbetalningab/se/?9fae8ca1383c18827a6f165f37c97c90
content-length: 290
content-type: text/html; charset=iso-8859-1
date: Tue, 05 Dec 2023 10:12:08 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/css/styles-f9ceedcf3769d27d2d0374b3893269c1.css

162.144.237.226

200 OK

36 kB

URL GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/css/styles-f9ceedcf3769d27d2d0374b3893269c1.css
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
ASCII text, with very long lines (36199)
Size
36 kB (36200 bytes)
Hash
4dd1afe583015be5f109566136bacbde
72a0288a007f95d601229da6479bc267aa90ce31
8050a49bf6e8f0d5a2e79b040497af98741bd13ce680710c5070f8666d6f26e7

HTTP Headers

GET /teL2aterbetalningab/se/css/styles-f9ceedcf3769d27d2d0374b3893269c1.css HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 23:53:33 GMT
accept-ranges: bytes
content-length: 36200
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/css
date: Tue, 05 Dec 2023 10:12:09 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/css/i.png

162.144.237.226

200 OK

1.1 kB

URL GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/css/i.png
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1090 bytes)
Hash
27ccc3912a021da69adb6df8566f848f
34e313f866918c527f2b7763c6565a2fc72781ae
b01da56e49b76a3073caea3deecbfac17127c22d2c5156a66c52d4f17943b686

HTTP Headers

GET /teL2aterbetalningab/se/css/i.png HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 23:53:33 GMT
accept-ranges: bytes
content-length: 1090
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/png
date: Tue, 05 Dec 2023 10:12:09 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/css/favicon-9a39921b4a8d93d5528b4ccdc5d76e91.ico

162.144.237.226

200 OK

1.2 kB

URL GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/css/favicon-9a39921b4a8d93d5528b4ccdc5d76e91.ico
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
9a39921b4a8d93d5528b4ccdc5d76e91
104a457c782a4f1208b116660746296cb45dcbd6
53ce944ce5a3a9a312816854b4254f5b083d562c45ac63354a00add50fb88cdb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /teL2aterbetalningab/se/css/favicon-9a39921b4a8d93d5528b4ccdc5d76e91.ico HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 23:53:33 GMT
accept-ranges: bytes
content-length: 1150
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/x-icon
date: Tue, 05 Dec 2023 10:12:10 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/assets/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg

162.144.237.226

200 OK

69 kB

URL GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/assets/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x300, components 3\012- data
Size
69 kB (68574 bytes)
Hash
5dbb8bc48bceea15838b7a4f36dffdd1
a6c66aed2ca319d837ad73d92f8e429baa86e3d8
b0ca988c2a45c3ce7d0c8b7f384fff8297fca1513f4a5b9df54a9e4e36390bed

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /teL2aterbetalningab/se/assets/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cjagricola.com.br/teL2aterbetalningab/se/css/styles-f9ceedcf3769d27d2d0374b3893269c1.css
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 23:53:33 GMT
accept-ranges: bytes
content-length: 68574
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: image/jpeg
date: Tue, 05 Dec 2023 10:12:10 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff

162.144.237.226

200 OK

32 kB

URL GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
Web Open Font Format, TrueType, length 31772, version 0.0\012- data
Size
32 kB (31772 bytes)
Hash
11eca7aa5a85ec0c6cc3deba794b264e
9bd19e1a9d5859833cbd50f501444c8c2afec2e1
ff28a732b1fc6a547797b7a9a7c29025ae41b74cc5e208232418d9c41fb43c44

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /teL2aterbetalningab/se/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cjagricola.com.br/teL2aterbetalningab/se/css/styles-f9ceedcf3769d27d2d0374b3893269c1.css
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 23:53:33 GMT
accept-ranges: bytes
content-length: 31772
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: font/woff
date: Tue, 05 Dec 2023 10:12:10 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff

162.144.237.226

200 OK

31 kB

URL GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type
Web Open Font Format, TrueType, length 31152, version 0.0\012- data
Size
31 kB (31152 bytes)
Hash
3a4d9a8b6adf39716f28af71fc9b030a
5d9acfd762ccd9a4a519951ad008f119741c513b
21a2a17b532837aeafeb95de9f252bfec714028517f79fb4143845ca4d23353c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea

HTTP Headers

GET /teL2aterbetalningab/se/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cjagricola.com.br/teL2aterbetalningab/se/css/styles-f9ceedcf3769d27d2d0374b3893269c1.css
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 03 Dec 2023 23:53:33 GMT
accept-ranges: bytes
content-length: 31152
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: font/woff
date: Tue, 05 Dec 2023 10:12:10 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/

162.144.237.226

302 Found

18 kB

URL User Request GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type

Size
18 kB (18116 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /teL2aterbetalningab/ HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58; path=/
location: ./se?9fae8ca1383c18827a6f165f37c97c90
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/html; charset=UTF-8
date: Tue, 05 Dec 2023 10:12:07 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed

162.144.237.226

200 OK

18 kB

URL User Request GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type

Size
18 kB (18116 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /teL2aterbetalningab/se/indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/html; charset=UTF-8
date: Tue, 05 Dec 2023 10:12:09 GMT
server: Apache
X-Firefox-Spdy: h2

cjagricola.com.br/teL2aterbetalningab/se/?9fae8ca1383c18827a6f165f37c97c90

162.144.237.226

302 Found

18 kB

URL User Request GET HTTP/2
cjagricola.com.br/teL2aterbetalningab/se/?9fae8ca1383c18827a6f165f37c97c90
IP
162.144.237.226:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subject*.cjagricola.com.br
Fingerprint7F:03:23:12:3D:13:AB:EF:91:1F:86:DE:67:5C:BC:D2:85:4D:86:91
ValidityThu, 26 Oct 2023 07:52:15 GMT - Wed, 24 Jan 2024 07:52:14 GMT

File type

Size
18 kB (18116 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /teL2aterbetalningab/se/?9fae8ca1383c18827a6f165f37c97c90 HTTP/1.1
Host: cjagricola.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=759181ea6d534e2b602b341bc0649e58
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: ./indx.aspx.php?d8b3dce498ac4f66636f1663766d98ed
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-type: text/html; charset=UTF-8
date: Tue, 05 Dec 2023 10:12:08 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP