personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
188.114.96.1301 Moved Permanently 0 B URL User Request GET HTTP/1.1 personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
IP 188.114.96.1:80
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/ HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 30 May 2023 17:42:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 30 May 2023 18:42:19 GMT
Location: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2B42evGGduYoBG1RXUa8jLQo%2BTY4as7i0ZVuoFWgJbdDxiR3t6Lip9lKeN%2BFYeEbn9jw34o7J%2Bx6XdVrMRwPe2rW2Rezg%2B2DeZCXtuMPh7Yl0PA%2FlB%2BBWNHIGDkgk82KgdUU7kM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cf8c5e489a7b4ee-OSL
alt-svc: h2=":443"; ma=60
personas.hgdsa.com/panel/mua/img/error.jpg
188.114.96.1200 OK 5.4 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/error.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 195x194, components 3\012- data
Hash 845eeed3b61d4c19ed0059c42fa7fc2e
ace747921c0b92d8451a1562759c867296c31b44
f68c633109e951014c6c401f878be7196c8894f6723215afb18388dbbbb83f1d
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/error.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/jpeg
content-length: 5363
etag: "14f3-5fce05bf2a362"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=twKd2Lj4FwLHRfpnqMHW2dekcMJYWNUjh5NeGsGERxp%2FF9wkoxTeuwsnSLCZL7vpHMui9%2F8VaTK3BzfElw%2BSfhMr07ZYkQWL8lzUrF7Gfa1SOKwX1M%2F%2FQGgQ0bjG15mIIcMgH5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaef7b512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/demo.jpg
188.114.96.1200 OK 1.5 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/demo.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 992039d1b794268d688a19b3563b7cd2
9116dbfe0fe620a6351952c1053017501537002f
61541605fc80557ad8cbc03b7d7ea64e94732198e536d4618dea0cb70191eb48
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/demo.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/jpeg
content-length: 1465
etag: "5b9-5fce05bef55d5"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=swvnS2JBIe%2Fr6Yr2iDZQuS4JtY%2FwbTQSn3RxhYF4SOyMfaYuUGsnnb2wGttV9%2BhdZ%2BzMoC%2BoSjGoLpmfTYJYtqE8yywbKzf9bI6i1177EP4wpl6wCFACFll1IJWI3dqP%2FQBTbXk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaf05b512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/seguridad.jpg
188.114.96.1200 OK 1.9 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/seguridad.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 1aa9d62d948208093b507e8e1439b309
72f701f1204320b47d9966d5d0ed496a733adb80
1800e5e993450b4f547840ccb7abf5cd1f285f6cf9784b3ec23675528a49ff8c
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/seguridad.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/jpeg
content-length: 1935
etag: "78f-5fce05bef9e4d"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BH854F9It1LdrSRSoIZDvQw6OTRbvIj4gt923EM7ADV%2FJeX0WljmfS908FeOQ1ahSvGGNUYB2y9eV67bCZp%2FSGHMZNCqVUpmqY28leSUH4jtDJ6gkz00mQSu6bwnH8svwaATd%2FA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaf07b512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/reglamento.jpg
188.114.96.1200 OK 1.8 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/reglamento.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash be3af886cffea048856b7fc77eaeebfc
96c0ec1895b5544070fd9c3ff371812ea04c7932
4d31c93eab87267a6e5e827fedd488a02c824a79ded4f00ef19f7431eaedab12
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/reglamento.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/jpeg
content-length: 1764
etag: "6e4-5fce05bf3d6ed"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aUs7pg5HEeU8dosWydcmBIEjRejpoFyiGRoikcYb6pYS5toxDOWt58%2BdxhYMAHT2tCIBJpFjcWCG%2Fyttds9Xm0HG7Ol6FGN7pbKBu%2BSD2ET9p0j%2F%2BuDC4vVea2yTGoRQh%2FCjuf8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaf0bb512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/politica.jpg
188.114.96.1200 OK 2.6 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/politica.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 103x103, components 3\012- data
Hash 7bb6c2ef23b43c8b8723d9e68ddf2fec
351b75536ef2c3244b7ba1eec7fe13215990a177
7b4d681b13b2beeab7a0dbd807eac72b762dec8e3bb18410776270a51860ac86
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/politica.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/jpeg
content-length: 2615
etag: "a37-5fce05bf48a6b"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KsWQaPqSIEB7zu01K9xle2Ej8PoarjScKhmBwf8Izp18xPbnyRMalA%2Bn6EfcTbjY6jCYrfxippnqYZfrDFlOBj1CkY%2Fnt0ZIak1E9Vw06QgbJ8pCJnsVhUwKZCID60NRR4o1CLA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaf17b512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/info.jpg
188.114.96.1200 OK 3.4 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/info.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 62x61, components 3\012- data
Hash 72f07f88a708281bb165235fb88649ee
d2e7284036b30a170dc68c2ad476d664234ed66c
13df691e5ad1109013261983ff6272aa37353f3b28525a9e8b0b29355a1ebec4
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/info.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/jpeg
content-length: 3438
etag: "d6e-5fce05bea749e"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3lfNEzO0LCwsyxxAo7R4irFrt3nSkAJ05N7C3x8amlcD7g9D1OmIIluvdpiDuxHFG%2BwQMqrm%2FxPFdQS8b6QuYUrhPkGZJw5aLo%2B5MC2V9GrDkd1%2F9QbAMKMSlg36hmiMsFtdoiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaefdb512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/css/stylesheet.css
188.114.96.1200 OK 2.2 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/css/stylesheet.css
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type ASCII text, with very long lines (360)
Hash a310982fb888be050fb3ab09d40d7ffc
b4a86966fec0a29c9bae72c1279a762cc009bf21
f27f79e97e6af6f6003291117a51ded4ac0271248d26e5acf840f666d12d38b2
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/css/stylesheet.css HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: text/css
etag: W/"b82-5fce05be55b55"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OxzHoxgoOJY5R0x3fiyJfAzh0Ko90TW0jPxpVoNEWSsr%2B2eZMQG1qt47kiTm87iSzP0kPD0zszRH46rniV%2FN4Zg6KPFEmFaYY%2FMvUl0J1hzv5O9pvZxTO5aJTj6S931CIYUEVJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ec9eebb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
images-cdn.info/444/image.gif
54.86.140.52200 OK 43 B URL GET HTTP/1.1 images-cdn.info/444/image.gif
IP 54.86.140.52:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoDaddy.com, Inc.
Subjectimages-cdn.info
Fingerprint9B:95:3E:E4:E8:F5:63:C3:BC:A0:E0:3A:CA:BD:74:8D:50:61:82:2E
ValiditySun, 30 Apr 2023 18:08:05 GMT - Fri, 31 May 2024 18:08:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /444/image.gif HTTP/1.1
Host: images-cdn.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 May 2023 17:42:21 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
personas.hgdsa.com/panel/mua/img/logo.png
188.114.96.1200 OK 9.5 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/logo.png
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type PNG image data, 521 x 520, 8-bit/color RGBA, non-interlaced\012- data
Hash 2903c67701750d246b77ee1c1c9188f1
028e6e88d6563e81eb77807c38f401cf5e7f2be0
c2fd3f9e79070fdbcb7ed3270a428a6ecd22ae089ab6e573eb4dfe91079c41fb
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/logo.png HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:21 GMT
content-type: image/png
content-length: 9489
etag: "2511-5fce05bf2e7b2"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5976
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PbfTr4zA0HT7AYcbyLsWpVkz2AkvVXpZ7AHwVdkHFgs5h9ZIGi7Uy4zISW889Xp02LvdASZRX9lMcqmWNE0rdLrh8hU0ORRSQFEHHtWzg3XC%2FKI60BcXa1CVjZghO89QBeTzfOE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5f29acbb512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button
188.114.96.1301 Moved Permanently 27 kB URL User Request GET HTTP/2 personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
Hash 8d6b2fd4329f728090caf665ce67989f
349b6d73d96d2150b040cca5b77ca37d06459e60
3e904f0d60ab52ad0ecd8c84f88463a38fcb584175f5d0f9a756ef542c9b3f30
GET /panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 30 May 2023 17:42:19 GMT
content-type: text/html; charset=iso-8859-1
location: http://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QSr5Boys2nzpllElTkNReBH2FBIXThh3xy16NLuWJBWP%2FZbUV5PBNQeEeNdvUrMfecZrmXlEFUFQ1KgJKsx%2BXzZJVLuz9Agfv75tTA95F%2BNq6YLFWIsjQQRp4UoqnFmfRJkH9yw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cf8c5ddbfa4b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
personas.hgdsa.com/panel/mua/img/credit-card.png
188.114.96.1200 OK 13 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/credit-card.png
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type PNG image data, 18 x 18, 8-bit colormap, non-interlaced\012- data
Hash bdc41207eda679871ea8d52c4f0f10d3
82173b5b660af8560810fe3a63de385d656b8966
f068b3c17360b06f6cde9c9b1acf5c54ee3f32becdbbd013abb3808f51bbe412
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/credit-card.png HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:22 GMT
content-type: image/png
content-length: 13267
etag: "33d3-5fce05bf37d97"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2Fd1AvfzreAinbNtmHZ7pGjFHXKoPzLpKTFO4Vy7fvLagfDF0YXhn5pi9U9CWZhdM2A14FH%2Bv0SM2srHRBbkJdG1XAz%2Fs1q%2BsZ%2FKbRdhGqfSgraAW2Xb8h01B25zhQahTG7Lzuo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5eda919b512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/lock.png
188.114.96.1200 OK 465 B URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/lock.png
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash e1fbae1c7cbb958401b23cc26991631b
51fc2948568be9ac415bb8d48171534c674d309d
022574e92ba7b69dd3e8f5da1882b053a893b97cf6bfe441753799dcc91655b6
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/lock.png HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:22 GMT
content-type: image/png
content-length: 465
etag: "1d1-5fce05bede7e4"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zSkDTaSMfZbPETTPAfGC9h493o8k2waX3bRRP3ctJZjZVPLHS1aFRjLOq%2BZUSshlsxha4XpPdM%2Boqg4EX7ZygqT4WAnUhcqqUBAo7WyFlclbxI3I9VWlvOBVH%2F13mDubTpCV2lA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5edb935b512-OSL
alt-svc: h3=":443"; ma=86400
kit.fontawesome.com/45b9078c9f.js
104.18.23.52200 OK 13 kB URL GET HTTP/2 kit.fontawesome.com/45b9078c9f.js
IP 104.18.23.52:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 653ce11b7776d5478260317d1ceccafd
c604ad06917d71625a042a566b953b673dd237f3
6425c9afc9b827c5288af48646d318952e1b47aca5e605c14d93f0f29f8163f1
GET /45b9078c9f.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://personas.hgdsa.com
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: text/html; charset=utf-8
refresh: 20
set-cookie: __cfwaitingroom=ChhhV2huS1Z1elpkeGZPK3VqK2ZseDd3PT0SjAIrOCtlMVJYSXFTdnV0WEFNUnNjeGtiQUZabDVqUkZXM3ppSEdlOGdyZTdIcDdydUdLbEhPeFdQSVpKaUxQbjREeVFZcXhSdnRxNWkzeFhTRy9yZ3pVZldHSVVEQnUxRHhzUkV2LzNJWi9mYm9WTmlHazVXQXVZVTloa21qMW5mTVExeDAwamF4Mm5TVGRJd2Zlc1ppZnNYaTNnV2xlSEx6TFEwK2FPZHdHOTM2NTdWNmkwblFEdnBhcUZoT09lbmJWUU4xV3JjVU5ycU9iNC9XUU5aK05INEhSVU9pREp4MGtGeGgyd3JUUDUwUWI5dzIvbXJFZWkyeFFySWtaK3c4ZFpJazRxWXVLQT09; Path=/; Expires=Tue, 30 May 2023 17:47:20 GMT; HttpOnly; SameSite=Lax
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecd8890b61-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
personas.hgdsa.com/panel/mua/js/jquery-3.6.0.min.js
188.114.96.1200 OK 90 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/js/jquery-3.6.0.min.js
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/js/jquery-3.6.0.min.js HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: application/javascript
etag: W/"15d9d-5fce05be6e06b"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SzZCvjmEHxOTwen%2BQGoAno7JBbJ4Z9N7dSY%2FKGYIfN%2B9Lvz%2B0b3WwsuID0dPMCOvfeaIHDYHNbFhtWCfHzIYvZO9PupjyJ6DcGWwIHGh9LedxEHJvDZgobrWpgKiR9WCS8PitII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ec9eedb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/logo.svg
188.114.96.1200 OK 7.0 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/logo.svg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7158), with no line terminators
Hash 25dd9ab906a1090c8148571c89804ff1
9bcc8fa0be2694bb947a3205d19424eba45c3993
801fb30278b9eedb6a6c1e9c87b6cb2c5d03765ed74d2e75fc931e52b998707b
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/logo.svg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: image/svg+xml
etag: W/"1b6c-5fce05bf4431b"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SKArJYKNxnt%2B5Nm42vMgzCDaSOucxOrLz9vkWE9bnEIF3cPm9Mx3F7iMz9Kvys7QzMShNj4AnqFl101v21Ez7s1yve%2B5FLEIQDuPjnghw9DdyfKbTQRhhiBYpDvPbFYK114%2BcAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaef6b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/js/functions.js
188.114.96.1200 OK 3.7 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/js/functions.js
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type ASCII text, with very long lines (3882), with no line terminators
Hash b8c7a345d8f138cb36fae067adeba673
cbc5efeb3a227c7998c3c30288eca75bf9977673
35fbed899f30b0207c06f9af89e9e3ef37a1a9f98e666ca148da563d551ad0e4
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/js/functions.js HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: application/javascript
etag: W/"e4e-5fce05be7624a"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QnNtlVhl3qYkVWK2BdlpcY69o8wE39e6fUfKUDOgTrB6z6rU2%2F6X7tMN%2Fsl90S%2F5EEDVKGt7tV%2F71rIpm8cKKbhWDQsK365omyyARq%2BgMpksePbIsMOhS6kT21o4%2FWo2mtIDe4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ec9ef3b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/css/style.css
188.114.96.1200 OK 6.0 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/css/style.css
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type ASCII text, with very long lines (6818), with no line terminators
Hash c336cc87007f639f2b6282f744233afe
1edb56913d600419c86ad0173b7a2a37711c4233
4095ccc9e9de7b596e76cb91ede4f9d80c7bf1115ffd88e043aee2cf366db197
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/css/style.css HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: text/css
etag: W/"1779-5fce05be5ba01"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DuHZM%2BJqGfHjB0SYAsOw9fwgYyeGAfcnzgZscDT9EV7G0Il%2F6%2FSPOcWBcicJ2C2gVeR%2BVq6olZleoi0Qiet0dG6rPF1JifMmfAoY9guy1lrbmRZWjWk27BJVCZn7JNWOPbsIofs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ec9ee8b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/fonts/opensans/OpenSans-Regular.ttf
188.114.96.1200 OK 217 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/fonts/opensans/OpenSans-Regular.ttf
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type TrueType Font data, digitally signed, 19 tables, 1st "DSIG", 26 names, Macintosh, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R\012- data
Size 217 kB (217276 bytes)
Hash d7d5d4588a9f50c99264bc12e4892a7c
513966e260bb7610d47b2329dba194143831893e
13c03e22a633919beb2847c58c8285fb8a735ee97097d7c48fd403f8294b05f8
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/fonts/opensans/OpenSans-Regular.ttf HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:21 GMT
content-type: font/ttf
etag: W/"350bc-5fce05bfe7f4d"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HQY7RdKOjpXIVCvkxVZWBL2h16spjpCT4CuzAaTPeYZvqFeBwEqI09zqT1vfKmE3wAZFFj8FCJ2Isr1QtkLeSW48M4%2FU02AcfIN2DMLYyOWGcbg3O1WmIyRO20MB1soqVLRVMo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5edd9b6b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/img/card.jpg
188.114.96.1200 OK 27 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/img/card.jpg
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 633x378, components 3\012- data
Hash 4490498f4895e2781d4316732e3a2790
b4ccf19a5d5805ca79764238be81ed9f9fe7aa64
a36553c875c3139f8d62695cf3aff92bd41fd4ac74baa337fa0cbce1c5927f14
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/img/card.jpg HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:21 GMT
content-type: image/jpeg
content-length: 26702
etag: "684e-5fce05beb0a10"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ofZ6SgwdAzXcC0aTjbg06ssvsXvoP8zk5CrZDTasO%2FDUZIr5FWRWVRk1lX%2Fps3hmBZ3yhqdmGGPMxo1kO5266SbBOI2yBApYYWngsgJY5xqudB%2BVhgEXp2g0qox3FEmfXu%2BBHvE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ecaf14b512-OSL
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/js/jquery.jclock-min.js
188.114.96.1200 OK 3.3 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/js/jquery.jclock-min.js
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type ASCII text, with very long lines (3485), with no line terminators
Hash 552f8daf31a5ada0cc58457b80523305
87a3070b3d7acf3f83ac22f1a2443199648f02e4
8c97612b3b2289ae2d216af6b4e69fb218d78cc2f6c48e05cabfe8bb3e841fe6
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/js/jquery.jclock-min.js HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:20 GMT
content-type: application/javascript
etag: W/"d09-5fce05be92c11"
last-modified: Tue, 30 May 2023 02:57:08 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Yp2p0OxG5xZu5mjwmBH%2F3LvUH%2FOyAt38x7qznW5rWVkMJ6dqzsEuF9eOGu1%2B9JgYaso1M7X%2BgIs5Btu9BlTP2%2Fku3JB2QY1TzFpToehKyT4jYgt9iz0uTwLWxPCIW9svgQYb%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5ec9eefb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
personas.hgdsa.com/panel/mua/fonts/opensans/CIBFontSans-Light.ttf
188.114.96.1200 OK 111 kB URL GET HTTP/3 personas.hgdsa.com/panel/mua/fonts/opensans/CIBFontSans-Light.ttf
IP 188.114.96.1:443
Requested by https://personas.hgdsa.com/panel/mua/VALIDATECARD/scis/j6UnVHZsitlYrxStPNFUN4TsSjgEJkN7dlDp6FXSjFxO/3D/no-back-button/
Certificate IssuerGoogle Trust Services LLC
Subjecthgdsa.com
FingerprintC7:9D:8E:16:F1:D1:3B:50:A8:D3:96:BF:4D:EB:1B:15:7C:4A:87:60
ValidityTue, 30 May 2023 02:18:13 GMT - Mon, 28 Aug 2023 02:18:12 GMT
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 33 names, Macintosh, Copyright (c) 2019 by Vasava Studio. All rights reserved.\011CIBFont SansLight1.300;UKWN;CIBFont\012- data
Size 111 kB (110612 bytes)
Hash 69096387df83ff65381f8ee25006b0aa
89689ed7f7547a3815d9fa2d0a2c11513480086e
decf1c3cb09b3e38d867e0d5cf648220584404c9cf8d18a6c51bdfa2af5047cc
Analyzer Verdict Alert urlquery phishing Phishing - Bancolombia
urlquery phishing Phishing - Bancolombia
GET /panel/mua/fonts/opensans/CIBFontSans-Light.ttf HTTP/1.1
Host: personas.hgdsa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://personas.hgdsa.com/panel/mua/css/stylesheet.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 30 May 2023 17:42:21 GMT
content-type: font/ttf
etag: W/"1b014-5fce05bfd25c4"
last-modified: Tue, 30 May 2023 02:57:09 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0zf1lDfKPfXBpDXhY%2B2ZnkWRm6DRa8ygOIhygG24pTIvTBY0Evt2Hty6lvAn627NRaD2nD5cly91cW13UWOGGQ4T8lL1L4aUp2KOnY1Mwlxi6AAbk7cb%2BmdkWr%2FKvoyGDMvoElg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cf8c5edd9b8b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400