| gestaocgdsecure.com/cgd/logo-ap_Blue.png |  172.67.142.188 | 200 OK | 5.3 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/logo-ap_Blue.png IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typePNG image data, 130 x 94, 8-bit/color RGBA, non-interlaced Hash9f3898d15fd66e26719f7293e9778765 01e9d3a2ca33a16921ece7927f360d2ad7824221 4cebe4aa89b1d82e08c6b1e16328d4f621e122eecde4d9737e59cb0d25d699a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/logo-ap_Blue.png HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: image/png
content-length: 5276
last-modified: Sat, 10 Feb 2024 01:09:08 GMT
etag: "149c-610fcb1059500"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U1PR7yfuslIDiQV61yK2FUS8zKnmgcc1Fou%2BGSGjlllDJP04aLY8XjD9uCaTQdTymICRdCeEgdKZbrixNO%2BOWFKNd7J%2F1osxE6iY5ud6kzGs9qk5M3Gu6UlBq1iMEp2qgyx2aXR5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d17bf10b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/login.php | 172.67.142.188 | 200 OK | 74 kB |
URL User Request GET HTTP/2gestaocgdsecure.com/cgd/login.php IP172.67.142.188:443
CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (24271), with CRLF line terminators Hash5f87e1a46d42ba9ba2a3b613e3905dde edaf10adcdd2f1139f6c58681affbbc1b8beff36 50d73f8d78f7f7859c41348183445effd2259055dfcf57ab779d1e9256e85041
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Caixa Geral de Depositos | | Quad9 DNS | malicious | Sinkholed |
GET /cgd/login.php HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AE6i0ebVYvZgyWlUG3PazKNHBz2wVd%2FWtElJpo4IAYjOZWjjFzSPN%2FSuAdxRwNsPHd%2F2BZuhsK83KXoKWlMw6zhF5fE4t99EUDqXTcgYcq3drnca2uoNHsCO97fU3%2FLR5wLXAju%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f3e9cddcd256c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gestaocgdsecure.com/cgd/files/login_and_register.css | 172.67.142.188 | 200 OK | 54 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/login_and_register.css IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash2fae4bc1613080360921bf572e71ea87 320bd6685cfe8e482f5e201924d8882150a20d40 4dc8a1053a0600cdfcdc74f9814dff2b4e1abbefd9d3d0badf23f35f588e5471
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/login_and_register.css HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: text/css
last-modified: Thu, 06 Jan 2022 07:20:26 GMT
etag: W/"b291-5d4e4b44b0280"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=foZcV%2FaPBdtm2MrIynfXX1QuU6WBaif1600JTrn21uShjl4mUKGem6And9kppTKP6vbQzqj3AATF1331v3LOH3%2Bm20BXJ7EQ2Eh9UmQLJvXns5WglcYPqdV0SgN4n6mFYZUt8p6B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d17be70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/ficheros/modern/images/icons/santander-icon.svg | 172.67.142.188 | 404 Not Found | 738 B |
URL GET HTTP/3gestaocgdsecure.com/ficheros/modern/images/icons/santander-icon.svg IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, ASCII text Hashe890b6e7f95596ad9a5ac595f15f9a51 538f70a67e4666d7d18a83e85b7c5cf447c81c7a ddcd219339638b1b77e6a7cb1955d0f234f4cfba6f33cd32bd5008300f1a721f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ficheros/modern/images/icons/santander-icon.svg HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sun, 05 May 2024 21:44:43 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gRNAmUcEbH2SBpGsqVsMJC2yA0Gk6bLyRHtE0p10cGl2eFWams9IXhbFX4BDczgjG8F3f8RHj9UCyO3yRCyoWQmD%2BftygmHk1C%2FaExKd%2BuPSKqvGatGIckPSg7VKQCpY%2FeB6HP5n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d50e180b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/files/jquery.js | 172.67.142.188 | 200 OK | 38 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/jquery.js IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators Hash3e4bb227fb55271bfe9c9d4a09147bd8 156837f75f6600ccb602b4efcbd393636c33f35e ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/jquery.js HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: text/javascript
last-modified: Wed, 05 Jan 2022 10:59:20 GMT
etag: W/"15d9d-5d4d3a54c9200"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M990vj3PbtJCX02rrgd4xesgqmVB%2FBL9gC7OJEGOjG6aPElZhB%2FU4WVVvB0tLXiuqEX0mfRrnrh2gQmZrmnfPMF5H0xOCdue5N2iJpzkxZDm%2BokDvjmGoMR7cDpermh0Jn32XCS4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d17be60b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg | 172.67.142.188 | 200 OK | 56 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 566x458, components 3 Hash493e1eb4c7f0f6a9aa911539fe5998d3 fedc53cb79a029f18b0d570b43c833cd43fd6717 cd221db65cb250c5cfb48c4728d64d05fb9869c1e9c5b5a564e5b11499b06223
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: image/jpeg
content-length: 55895
last-modified: Sat, 10 Feb 2024 01:09:08 GMT
etag: "da57-610fcb1059500"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ldFJSa3I617y5G4xdXj%2FvDN6NdaJzPpW9OKFCEj18WTa%2F9PLM0sbDOPL0XfN6SCl%2BQUe9HP%2BV7iWs06Nc%2FKZvCAWwBeEPo1f13Rg0tsmsHSV0MRUCvMs6RAGq1ZnB061dAWT8UwQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d18c170b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/ficheros/modern/images/icons/eye-icon_show.svg | 172.67.142.188 | 404 Not Found | 305 B |
URL GET HTTP/3gestaocgdsecure.com/ficheros/modern/images/icons/eye-icon_show.svg IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, ASCII text, with very long lines (316), with no line terminators Hashccc2e87bd121117411ee5818ffef3f54 c1de01cfa6f761a06ed30e9ac4932336ee6007b4 d9302f964c85cc0f63f92c91ade0ff6715edb7b2952d17af38db68a2ff4f30d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ficheros/modern/images/icons/eye-icon_show.svg HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/files/login_and_register.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 05 May 2024 21:44:43 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPjSp4EdQ%2FyCWJ5wBjLXBFtvG58mK6rkd85G6FACG1cl8vULDT7BiC98iVaW7b9vL%2FKqdEYMpGSWQ2E9IDgs1kLm5%2FPBGFtKIFylFS0bSUFsz3Y%2Br6EJyuYbBiIGfQwCpZqWANUN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d37d450b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/files/SantanderTextW05-Regular.woff | 172.67.142.188 | 200 OK | 46 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/SantanderTextW05-Regular.woff IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeWeb Open Font Format, TrueType, length 46268, version 1.0 Hashce966ea6470e77ea66fa28923428ee9f e0652b2b341269d2a489b66b56a01b276b88f935 78e528416f0569f2ff89bfb0dcf524f9b27a9fd847fe5e85e150f2b39fdff090
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/SantanderTextW05-Regular.woff HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: font/woff
content-length: 46268
last-modified: Sat, 27 Mar 2021 05:51:44 GMT
etag: "b4bc-5be7e3e4ddc00"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zb21R0Tsw%2BNU1drpLm3PNFXwytiTim9Vb6u%2BD%2BxRDAI2z%2FXnNq9ZRpoV9524es4Ux%2B7CGlUUzYDLQHi1bTSOOy0JCyZLfLgnu3%2BYHHFyuFuKEhxlecz%2BbO%2FyYufFjs23lp1v3jUB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d37d4a0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/cgd/files/nbp_popin.css | 172.67.142.188 | 200 OK | 4.0 kB |
URL GET HTTP/3gestaocgdsecure.com/cgd/files/nbp_popin.css IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeASCII text, with very long lines (4414), with no line terminators Hash237599d9fbd1bcb26740f1970b62c79c 70d367a59a833222e4defeb275663773cf704b77 39cad93d352027e555279d1634c2847b87895d3cc8fe97b023574d3d4bbd1f4d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgd/files/nbp_popin.css HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 21:44:42 GMT
content-type: text/css
last-modified: Thu, 06 Jan 2022 07:20:24 GMT
etag: W/"f8a-5d4e4b42c7e00"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZhByDVF3uSW2QiC7hny4j0CiMGGHhKC2mTkrTsrH9ugXVKa5Yv0rXITfAWmWvpSuLBPXQPScg9pbK9U6QCBNrPGMIaTx68egy%2Fm6i75wxYOXBy7VjxZfbs3StjQIj0wEpn5cdMx8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d17beb0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gestaocgdsecure.com/ficheros/modern/images/icons/apple-touch-icon.png | 172.67.142.188 | 404 Not Found | 305 B |
URL GET HTTP/3gestaocgdsecure.com/ficheros/modern/images/icons/apple-touch-icon.png IP172.67.142.188:443
Requested byhttps://gestaocgdsecure.com/cgd/login.php CertificateIssuerGoogle Trust Services LLC Subjectgestaocgdsecure.com FingerprintA8:A9:9C:6B:43:53:E8:5B:F7:E5:F4:3C:61:DB:74:26:6D:51:3C:AF ValidityFri, 03 May 2024 13:34:02 GMT - Thu, 01 Aug 2024 13:34:01 GMT
File typeHTML document, ASCII text, with very long lines (316), with no line terminators Hashccc2e87bd121117411ee5818ffef3f54 c1de01cfa6f761a06ed30e9ac4932336ee6007b4 d9302f964c85cc0f63f92c91ade0ff6715edb7b2952d17af38db68a2ff4f30d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ficheros/modern/images/icons/apple-touch-icon.png HTTP/1.1
Host: gestaocgdsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gestaocgdsecure.com/cgd/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 05 May 2024 21:44:43 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FCR2O228JCVk7qRm3bWxQfhwlYUkqt%2FAZehgbeo8UG5u%2B15RaeichteiUTd1wImKIwAAySImpCZu03zYIZt3RPZQIpxBeHjAECPKt%2Fl%2B1zIIKoh1%2FVhVpzpNOpuJYCQvtPe6jYqN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f3e9d50e160b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
104.21.27.136