| | 172.67.83.132 | 301 Moved Permanently | 4.6 kB |
IP 172.67.83.132:443
CertificateIssuerGoogle Trust Services Subjectis.gd FingerprintEE:78:AC:56:20:2E:98:58:98:97:24:76:D3:CF:46:50:3E:5F:53:D9 ValidityMon, 28 Apr 2025 01:05:43 GMT - Sun, 27 Jul 2025 02:05:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /U6dqLT?m=true HTTP/1.1
Host: is.gd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://business.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 13 Jun 2025 22:54:00 GMT
content-type: text/html; charset=UTF-8
location: https://zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=cV9BjDaLyHEn72S99maWBOIxkAFs6zB2pBJHJJ63iyk-1749855240-1.0.1.1-ImekdsiM2vXBHEWKbmz9GphNjWMmSJdhdwRGw.rZ3uJJrCE0K4rZcIAeq3IaWAuHlgaxV5hlbIxk99IBYHDVnDsdkz_qzsvis0QjNzmqeJc; path=/; expires=Fri, 13-Jun-25 23:24:00 GMT; domain=.is.gd; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 94f52ad5eb900b69-OSL
X-Firefox-Spdy: h2
|
|
| zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html | 104.21.84.68 | 403 Forbidden | 4.6 kB |
URL User Request GET zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html IP 104.21.84.68:443
CertificateIssuerGoogle Trust Services Subjectea83a1e8.sni.cloudflaressl.com Fingerprint97:E8:E4:3D:35:5E:B7:24:2F:F7:F5:A1:66:7F:77:63:97:E1:27:21 ValidityTue, 10 Jun 2025 19:45:48 GMT - Mon, 08 Sep 2025 20:45:42 GMT
File typeHTML document, ASCII text, with very long lines (394) Hasha9c05cf7901163060d273051d38c0876 8c5e38f74dc78168f7ba410176943026f4ac3857 174e440255e6603c9c2c233193c5700f9e695d5d81b2d68b6217d97b10b44fd7
Analyzer | Verdict | Alert | OpenPhish | phishing | Generic/Spear Phishing |
GET /sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html HTTP/1.1
Host: zgrconsultores.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://business.google.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 13 Jun 2025 22:54:00 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bE%2BcSLCGUF56kxH%2B7gTzCgZzj0493MDO8at8zlQnUr8NOR7QbbG663a0aUuGCyWInwXY%2BwHEdP%2FLCFDxSUiQrzMtiZfCXlHuWLdumvVJ7oe8ssvqlbZ1Wvo2QGAUT70aq9Trifk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 94f52ad7c8a9569c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| zgrconsultores.com/cdn-cgi/styles/cf.errors.css | 104.21.84.68 | 200 OK | 24 kB |
URL GET zgrconsultores.com/cdn-cgi/styles/cf.errors.css IP 104.21.84.68:443
Requested byhttps://zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html CertificateIssuerGoogle Trust Services Subjectea83a1e8.sni.cloudflaressl.com Fingerprint97:E8:E4:3D:35:5E:B7:24:2F:F7:F5:A1:66:7F:77:63:97:E1:27:21 ValidityTue, 10 Jun 2025 19:45:48 GMT - Mon, 08 Sep 2025 20:45:42 GMT
File typeASCII text, with very long lines (24050) Hash5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: zgrconsultores.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:54:01 GMT
content-type: text/css
last-modified: Tue, 10 Jun 2025 15:47:54 GMT
etag: W/"684853aa-5df3"
server: cloudflare
cf-ray: 94f52ad89958569c-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sat, 14 Jun 2025 00:54:01 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| zgrconsultores.com/cdn-cgi/images/icon-exclamation.png?1376755637 | 104.21.84.68 | 200 OK | 452 B |
URL GET zgrconsultores.com/cdn-cgi/images/icon-exclamation.png?1376755637 IP 104.21.84.68:443
Requested byhttps://zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html CertificateIssuerGoogle Trust Services Subjectea83a1e8.sni.cloudflaressl.com Fingerprint97:E8:E4:3D:35:5E:B7:24:2F:F7:F5:A1:66:7F:77:63:97:E1:27:21 ValidityTue, 10 Jun 2025 19:45:48 GMT - Mon, 08 Sep 2025 20:45:42 GMT
File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced Hashc33de66281e933259772399d10a6afe8 b9f9d500f8814381451011d4dcf59cd2d90ad94f f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016
GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: zgrconsultores.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zgrconsultores.com/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 22:54:01 GMT
content-type: image/png
content-length: 452
last-modified: Tue, 10 Jun 2025 15:47:54 GMT
etag: "684853aa-1c4"
server: cloudflare
cf-ray: 94f52ad8e9c7569c-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sat, 14 Jun 2025 00:54:01 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| zgrconsultores.com/favicon.ico | 104.21.84.68 | 404 Not Found | 27 kB |
URL GET zgrconsultores.com/favicon.ico IP 104.21.84.68:443
Requested byhttps://zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html CertificateIssuerGoogle Trust Services Subjectea83a1e8.sni.cloudflaressl.com Fingerprint97:E8:E4:3D:35:5E:B7:24:2F:F7:F5:A1:66:7F:77:63:97:E1:27:21 ValidityTue, 10 Jun 2025 19:45:48 GMT - Mon, 08 Sep 2025 20:45:42 GMT
File typeHTML document, ASCII text, with very long lines (611) Hash46dd133ee00dc1bae5e4eeba7b88432f 8af86a4ac91ce48c062216fb94a6e1d57618a19b 9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66
GET /favicon.ico HTTP/1.1
Host: zgrconsultores.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zgrconsultores.com/sZ22NBS6oOc3RcBTvTotlc8xOPcyuYzwr0Y6yoW.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 13 Jun 2025 22:54:01 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mi9GpjGdkBkZpk03k2WKQ%2Fp1KOwnRC%2B%2BRwSB3CkChloSs0PFklU9oXWqfQZY022uElF5TGg9WTNcUzO1xpy7kSOu3aDo3bFYDh0tKa1I1ZOChDElRXYg2noXIylV3Iy8z9BHGto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 94f52ad909df569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=998&min_rtt=416&rtt_var=747&sent=19&recv=17&lost=0&retrans=0&sent_bytes=11056&recv_bytes=1607&delivery_rate=9692101&cwnd=257&unsent_bytes=0&cid=4144d2c94209190b&ts=428&x=0"
X-Firefox-Spdy: h2
|
|
| business.google.com/website_shared/launch_bw.html?f=//is%EF%BD%A1gd/U6dqLT | 142.250.178.110 | 200 OK | 6.0 kB |
URL User Request GET business.google.com/website_shared/launch_bw.html?f=//is%EF%BD%A1gd/U6dqLT IP 142.250.178.110:443
CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint09:73:D4:56:AF:03:7E:40:3B:60:95:56:66:8D:E9:27:E0:DA:EC:DA ValidityMon, 19 May 2025 08:41:43 GMT - Mon, 11 Aug 2025 08:41:42 GMT
File typeHTML document, ASCII text Hash3c08096b2a203bd025437ae37995b574 be33f92edbdf4e984c78e7a3c36e85937af24614 a93012dde8bf01e41fa4dd495b142a4b99ec2cff41d0799f3adc3b799266eeff
GET /website_shared/launch_bw.html?f=//is%EF%BD%A1gd/U6dqLT HTTP/1.1
Host: business.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
cache-control: no-cache, must-revalidate
last-modified: Fri, 20 Sep 2024 01:15:31 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding, Origin
content-type: text/html; charset=UTF-8
content-length: 2135
accept-ranges: bytes
content-security-policy-report-only: script-src 'nonce-UqYlT8pLbHSCqMJcegTb-g' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/geo-merchant-presto-backend; base-uri 'self', require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-merchant-presto-backend
cross-origin-opener-policy: same-origin; report-to="geo-merchant-presto-backend"
report-to: {"group":"geo-merchant-presto-backend","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-merchant-presto-backend"}]}
date: Fri, 13 Jun 2025 22:54:00 GMT
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300 | 142.250.74.10 | 200 OK | 5.5 kB |
URL GET fonts.googleapis.com/css?family=Roboto:300 IP 142.250.74.10:443
Requested byhttps://business.google.com/website_shared/launch_bw.html?f=//is%EF%BD%A1gd/U6dqLT CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File typeASCII text, with very long lines (1572) Hash903382ea9395963a56cfc1e409e71ead 0fd7edc84ffcbecb7c7e9210002ef94887e191b1 4abca440d805ccebd2327a02f50d38b79ed9497bda1b6640e9b461a0c47aa7ef
GET /css?family=Roboto:300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://business.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jun 2025 22:54:00 GMT
date: Fri, 13 Jun 2025 22:54:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|