Report - caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../

Report Overview

Submitted URL
caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
IP
52.67.81.108
ASN
#16509 AMAZON-02
Submitted
2024-05-10 17:22:44
Access
public
Website Title
I/nter.net Bank_ing C-aiXa
Final URL
caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
caixa.xcv.cx	unknown	unknown	No data	No data	10 kB	568 kB	52.67.81.108
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-09	819 B	100 kB	151.101.2.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal
2024-05-10	medium	caixa.xcv.cx/	Caixa Economica Federal

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.6.0.min.js	90 kB	2023-03-07	2024-05-20
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-20 21:51:17 Times Seen275518 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	code.jquery.com/ui/1.13.1/jquery-ui.min.js	255 kB	2023-03-07	2024-05-20
Pretty URL code.jquery.com/ui/1.13.1/jquery-ui.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:16:24 Last Seen2024-05-20 18:10:24 Times Seen697 Hash 842e3946fa938e62f185abb29ab00dc7 c72ff777806f59b02c8e9fd84ac258051d2a2b39 793cb14b4ae48e92c4a35eae5d34b4b95092e3cd7995ce342b6895a560ef7526 Loading...

	caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../	2.2 kB	2024-05-10	2024-05-12
Pretty URL caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../ IP 52.67.81.108 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-10 19:22:51 Last Seen2024-05-12 02:35:56 Times Seen3 Hash d44e6e119f38f7249ef38dbe1d3222fe fd21fb39191243d3c877813958f88ee1bd0829b1 cb2851acd05694b2bfc92b50ef676193a833a0f677ca94823df1565b770210b1 Loading...

	caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../	12 kB	2024-05-10	2024-05-12
Pretty URL caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../ IP 52.67.81.108 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-10 19:22:51 Last Seen2024-05-12 02:35:56 Times Seen3 Hash 6e2bbec40f1698c47555f8dbe71af6d3 8485820b0590f5b24216654420a236b8a0716dca 77021b288a55ef89176a03ee051f6ea84451be14c208440406c6717b983da9bd Loading...

HTTP Transactions (20)

URL IP Response Size

caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../

52.67.81.108

200 OK

23 kB

URL User Request GET HTTP/1.1
caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (60683), with CRLF line terminators
Size
23 kB (23329 bytes)
Hash
17c5ce187e6bc471a8ecb88972341d2d
e54fdba3ccf9e95759b93caf43087f7b705ee789
2091868e105bdf26da247e6e61184e2caa49bb3db386880fe619659178229a0e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../ HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:18 GMT
Server: Apache/2.4.52 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 23329
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

code.jquery.com/jquery-3.6.0.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 10 May 2024 17:22:18 GMT
age: 1217919
x-served-by: cache-lga21931-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 3, 271597
x-timer: S1715361739.631217,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2

code.jquery.com/ui/1.13.1/jquery-ui.min.js

151.101.2.137

200 OK

68 kB

URL GET HTTP/2
code.jquery.com/ui/1.13.1/jquery-ui.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)
Size
68 kB (67637 bytes)
Hash
842e3946fa938e62f185abb29ab00dc7
c72ff777806f59b02c8e9fd84ac258051d2a2b39
793cb14b4ae48e92c4a35eae5d34b4b95092e3cd7995ce342b6895a560ef7526

HTTP Headers

GET /ui/1.13.1/jquery-ui.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-3e46a"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 10 May 2024 17:22:18 GMT
age: 20559540
x-served-by: cache-lga21975-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 48, 3994
x-timer: S1715361739.659291,VS0,VE0
vary: Accept-Encoding
content-length: 67637
X-Firefox-Spdy: h2

caixa.xcv.cx/novo/acesso/statics-core/bootstrap/css/bootstrap.css?v=38

52.67.81.108

200 OK

132 B

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/bootstrap/css/bootstrap.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text, with CRLF line terminators
Size
132 B (132 bytes)
Hash
ee4c7d3d62784bf634364e179384390b
eb5c3b20f1b70b6394cee8550f35d1ef1582e52c
d5397da43bad40d1b17a76208a614a6b503a814bc38b8cab5ab99594bb055123

HTTP Headers

GET /novo/acesso/statics-core/bootstrap/css/bootstrap.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:18 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:42:44 GMT
ETag: "88-6163a43f04d00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 132
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/bootstrap/css/bootstrap_desktop.css

52.67.81.108

200 OK

20 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/bootstrap/css/bootstrap_desktop.css
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text, with very long lines (540), with CRLF line terminators
Size
20 kB (20471 bytes)
Hash
e7d84519e814d75bebaf5330b7a70a6f
f8a9f154c840d4d77c103f4f8ed0b8debe91d2d5
bc9a46579160c853e68e60398e41d1a7edacfac7f41068c35ea49503e540d0d1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/bootstrap/css/bootstrap_desktop.css HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/bootstrap/css/bootstrap.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:18 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:48:48 GMT
ETag: "23447-6163a59a28000-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20471
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/login.css?v=38

52.67.81.108

200 OK

148 B

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/login.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text
Size
148 B (148 bytes)
Hash
d9b079e105ef279ea8c6cc5d7c568b08
6a3809153702ba0f3f3d80aa29c2e86e1f15416f
6e0184946faf11e033d7a47e0377b5ef96cb00446d116928fd226109d534ee5b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/login.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:43:18 GMT
ETag: "9a-6163a45f71980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 148
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/principal.css?v=38

52.67.81.108

200 OK

191 B

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/principal.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text, with CRLF line terminators
Size
191 B (191 bytes)
Hash
2f555f136c2b936fb68d665d32686642
f91b915341988cfc20a2863eb62c917b2a46805a
8f587cb8a75399b59f0613d30c9177e087672839d6e4b1b98383f14b6b3ce204

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/principal.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:43:36 GMT
ETag: "160-6163a4709c200-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 191
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-components/js/componentes/loading/loading.css?v=38

52.67.81.108

200 OK

285 B

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-components/js/componentes/loading/loading.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text, with CRLF line terminators
Size
285 B (285 bytes)
Hash
3fb2969dd353e536a5240cefbabcbeb6
94112aecb7ec00e7b07c3e0f39708726f9cc87fa
1a3b87f8f326002bee0709755b303880bd05241735f877f03ae2f24e4b853d63

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-components/js/componentes/loading/loading.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 20:08:38 GMT
ETag: "223-6163c4db7bd80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 285
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/login_desktop.css?v=36

52.67.81.108

200 OK

2.3 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/login_desktop.css?v=36
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text, with CRLF line terminators
Size
2.3 kB (2320 bytes)
Hash
ec1a72ab27501c28220a6f5ff5f3c99f
7ed26f466eb1ede03e2edfb15690ca110cb2e565
c3892915c37eb021a8fe755d9ce38777b98c6c7bd9c1e090f824a485cadfe460

HTTP Headers

GET /novo/acesso/statics-core/css/login_desktop.css?v=36 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/login.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:49:08 GMT
ETag: "1f04-6163a5ad3ad00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2320
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/datalist.css?v=38

52.67.81.108

200 OK

774 B

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/datalist.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text
Size
774 B (774 bytes)
Hash
821fa37cb2b89eb80ba0d6c642c7b61a
fda5fb979996370f2a795a96e79fbd285dac00ba
8eede361637e3b42a616c308b76c5e7631496d42fbe280fd57077581ac5371a4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/datalist.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/principal.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:50:14 GMT
ETag: "85f-6163a5ec2c180-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 774
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/principal_desktop.css?v=38

52.67.81.108

200 OK

13 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/principal_desktop.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
assembler source, ASCII text, with CRLF line terminators
Size
13 kB (12712 bytes)
Hash
462a3a574f3248ee41f3cea26d8dd663
7dbcc0fb66fac57ab12bda6936d57b84b67bc978
5d7f8bc8184213af93e6a2dc6202de98b8cd276849c765cda4f041a8ff598e9c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/principal_desktop.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/principal.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:49:44 GMT
ETag: "106c8-6163a5cf8fe00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12712
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/print.css?v=38

52.67.81.108

200 OK

2.5 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/print.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
assembler source, ASCII text, with very long lines (792), with CRLF line terminators
Size
2.5 kB (2521 bytes)
Hash
a961a936d3a152acebe41e54a65d87e3
c660e22d85ed63466dd18ef33729e7020f008fd2
13dc88ddf97c546c10cbe491e3b3c0be872c5bfa3b059eb25c31b40a7090bef7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/print.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/principal.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:49:58 GMT
ETag: "3091-6163a5dce9d80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2521
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/css/style.css?v=38

52.67.81.108

200 OK

88 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/style.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
assembler source, ASCII text
Size
88 kB (87982 bytes)
Hash
d2fa17f7617811a46e9cd419a6e464e2
f669c75d0195a6df07d015b87eed6c58ce140b73
c270ad395a4a17825c6ffc9fa22d94687f8ee8aa038cd7f30538d2e373b826c5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/style.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/principal.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:19 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:49:30 GMT
ETag: "105686-6163a5c235e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/img/gcx/gcx-logo.png

52.67.81.108

200 OK

28 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/img/gcx/gcx-logo.png
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
PNG image data, 567 x 134, 8-bit/color RGBA, non-interlaced
Size
28 kB (27984 bytes)
Hash
8cd990da49aac712e82c56f1948b6976
f9e5adc75cc2168f5495d756e643590e277ad323
31cdaf44501f1af7eb6bf40090d05c576601c806358f95ea830060963906e7a2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/img/gcx/gcx-logo.png HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:46:00 GMT
ETag: "6d50-6163a4f9f0600"
Accept-Ranges: bytes
Content-Length: 27984
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

caixa.xcv.cx/novo/acesso/statics-core/css/material_icons.css?v=38

52.67.81.108

200 OK

615 B

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/css/material_icons.css?v=38
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text
Size
615 B (615 bytes)
Hash
8550e9d124442564cad4c4c8724b60b8
80492abae878adc6593b0ab2fc6f9ba66a272f15
94f4ca3149e2b1a41ea429c61b54452d6a457ec31920dc99563a614dba64dce2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/css/material_icons.css?v=38 HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/style.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 18:40:26 GMT
ETag: "e4f-6163b124a3a80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 615
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/fontawesome/css/all.min.css

52.67.81.108

200 OK

12 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/fontawesome/css/all.min.css
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
ASCII text, with very long lines (56994)
Size
12 kB (12408 bytes)
Hash
500d1a92f875b1d96d37a3a3f8f0438c
703603273f5d5d52eb456d6385e1a68294fbd568
c9b46437d7418e1712daaad6d73fa17c2c6afb5681770c90339c25428415b7fd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/fontawesome/css/all.min.css HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/style.css?v=38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 18:41:20 GMT
ETag: "df5c-6163b15823400-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12408
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

caixa.xcv.cx/novo/acesso/statics-core/img/sprites.png

52.67.81.108

200 OK

82 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-core/img/sprites.png
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Size
82 kB (81568 bytes)
Hash
1a61c352b03be59e4f392491beb49aae
eec688a561d82b3f67966efc449bbeb5d073e2aa
b07f3473f3a889798a93b7b02c3b9399d4814e82765b988aa54edb93f4d5f2c5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-core/img/sprites.png HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/statics-core/css/login_desktop.css?v=36
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 18:42:10 GMT
ETag: "13ea0-6163b187d2480"
Accept-Ranges: bytes
Content-Length: 81568
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

caixa.xcv.cx/novo/acesso/statics-portal/conteudo_login/PRODUCAO_INTER/29022024_175437_img9.jpg

52.67.81.108

200 OK

70 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-portal/conteudo_login/PRODUCAO_INTER/29022024_175437_img9.jpg
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 191x379, components 3
Size
70 kB (70513 bytes)
Hash
d98d15754fc18dad6a3a15ab1351b856
f32bc4bfd802ff393b925714d9aeb69e4298f112
20a5ea73f9b4c45bc73e6a3792bc2a0598db87445c564dfe0bddd8fbc69dd1ed

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-portal/conteudo_login/PRODUCAO_INTER/29022024_175437_img9.jpg HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 21:26:50 GMT
ETag: "11371-6163d6561fa80"
Accept-Ranges: bytes
Content-Length: 70513
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

caixa.xcv.cx/novo/acesso/statics-portal/conteudo_login/PRODUCAO_INTER/29022024_175304_img3.jpg

52.67.81.108

200 OK

217 kB

URL GET HTTP/1.1
caixa.xcv.cx/novo/acesso/statics-portal/conteudo_login/PRODUCAO_INTER/29022024_175304_img3.jpg
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1282x408, components 3
Size
217 kB (216695 bytes)
Hash
5c4b6c98607f0baa95f17ea2431016f8
75e0e0eed6ae9036ef7f8d0dcded6a7967d1aefa
75c9b0f49d7b259030c86e819965fe983fb9800e42d8957a3a1391bed4ff1ee7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /novo/acesso/statics-portal/conteudo_login/PRODUCAO_INTER/29022024_175304_img3.jpg HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 16 Apr 2024 17:46:42 GMT
ETag: "34e77-6163a521fe480"
Accept-Ranges: bytes
Content-Length: 216695
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

caixa.xcv.cx/assets/imagens/favicon.ico

52.67.81.108

200 OK

1.2 kB

URL GET HTTP/1.1
caixa.xcv.cx/assets/imagens/favicon.ico
IP
52.67.81.108:443
ASN
#16509 AMAZON-02

Requested by
https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Certificate
IssuerLet's Encrypt
Subjectcaixa.xcv.cx
Fingerprint42:4C:A6:E8:03:52:4B:CC:D7:B0:69:87:B6:E7:F6:94:FB:23:4E:20
ValidityFri, 10 May 2024 02:15:29 GMT - Thu, 08 Aug 2024 02:15:28 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
5f38804b352fb4c2fe2fe65f29e2103b
0f6a5607093b86a016528dd24d5ee91fc592fb80
493d7c9945e2370e2b58a43546f1035d3db967eee8fe0c82b4082c97bac09f24

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Caixa Economica Federal

HTTP Headers

GET /assets/imagens/favicon.ico HTTP/1.1
Host: caixa.xcv.cx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://caixa.xcv.cx/novo/acesso/?3TSKS2qrapkoajfTjMLxdoR16x0eRP777r5lPPI7EYO11aAd7ydUH97bP7YpRmOdCIn6VGFTswGt9nWVXlK3lcp6ws9KKax4BMV15xCPod3mED5HAMUpNDwhIOQEjZNTyXwikVx9SHcBrxElzOCIkx../../../../../../../../
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 17:22:20 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Fri, 19 Apr 2024 19:51:52 GMT
ETag: "47e-616786b478600"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size