Report - securecgdapp-net.com/cgd/login.php

Report Overview

Submitted URL
securecgdapp-net.com/cgd/login.php
IP
158.69.150.41
ASN
#16276 OVH SAS
Submitted
2024-05-01 21:40:30
Access
public
Website Title
CGD-PARTICULARES
Final URL
securecgdapp-net.com/cgd/login.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
securecgdapp-net.com	unknown	unknown	No data	No data	3.9 kB	352 kB	158.69.150.41

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed
2024-05-01	medium	securecgdapp-net.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	securecgdapp-net.com/cgd/files/jquery.js	90 kB	2023-03-07	2024-05-15
Pretty URL securecgdapp-net.com/cgd/files/jquery.js IP 158.69.150.41 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:21 Last Seen2024-05-15 19:23:43 Times Seen6127 Hash 3e4bb227fb55271bfe9c9d4a09147bd8 156837f75f6600ccb602b4efcbd393636c33f35e ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127 Loading...

HTTP Transactions (10)

URL IP Response Size

securecgdapp-net.com/cgd/login.php

158.69.150.41

200 OK

101 kB

URL User Request GET HTTP/1.1
securecgdapp-net.com/cgd/login.php
IP
158.69.150.41:80
ASN
#16276 OVH SAS

File type
HTML document, Unicode text, UTF-8 text, with very long lines (24271), with CRLF line terminators
Size
101 kB (101181 bytes)
Hash
5f87e1a46d42ba9ba2a3b613e3905dde
edaf10adcdd2f1139f6c58681affbbc1b8beff36
50d73f8d78f7f7859c41348183445effd2259055dfcf57ab779d1e9256e85041

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/login.php HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

securecgdapp-net.com/cgd/files/nbp_popin.css

158.69.150.41

200 OK

4.0 kB

URL GET HTTP/1.1
securecgdapp-net.com/cgd/files/nbp_popin.css
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
ASCII text, with CRLF line terminators
Size
4.0 kB (3978 bytes)
Hash
28a619dd2efb18d5ce48c1b74dd1c2c3
9ca9900574eed7e670006d415c1d955a03d07d8a
51a77b84fd1e0904911e2e93d0c39e562473ef9602624aa97161a36fd8937faa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/files/nbp_popin.css HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Thu, 06 Jan 2022 07:20:24 GMT
ETag: "f8a-5d4e4b42c7e00"
Accept-Ranges: bytes
Content-Length: 3978
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

securecgdapp-net.com/cgd/files/jquery.js

158.69.150.41

200 OK

90 kB

URL GET HTTP/1.1
securecgdapp-net.com/cgd/files/jquery.js
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators
Size
90 kB (89501 bytes)
Hash
3e4bb227fb55271bfe9c9d4a09147bd8
156837f75f6600ccb602b4efcbd393636c33f35e
ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/files/jquery.js HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Wed, 05 Jan 2022 10:59:20 GMT
ETag: "15d9d-5d4d3a54c9200"
Accept-Ranges: bytes
Content-Length: 89501
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript

securecgdapp-net.com/cgd/files/login_and_register.css

158.69.150.41

200 OK

46 kB

URL GET HTTP/1.1
securecgdapp-net.com/cgd/files/login_and_register.css
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
46 kB (45713 bytes)
Hash
2fae4bc1613080360921bf572e71ea87
320bd6685cfe8e482f5e201924d8882150a20d40
4dc8a1053a0600cdfcdc74f9814dff2b4e1abbefd9d3d0badf23f35f588e5471

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/files/login_and_register.css HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Thu, 06 Jan 2022 07:20:26 GMT
ETag: "b291-5d4e4b44b0280"
Accept-Ranges: bytes
Content-Length: 45713
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

securecgdapp-net.com/cgd/logo-ap_Blue.png

158.69.150.41

200 OK

5.3 kB

URL GET HTTP/1.1
securecgdapp-net.com/cgd/logo-ap_Blue.png
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
PNG image data, 130 x 94, 8-bit/color RGBA, non-interlaced
Size
5.3 kB (5276 bytes)
Hash
9f3898d15fd66e26719f7293e9778765
01e9d3a2ca33a16921ece7927f360d2ad7824221
4cebe4aa89b1d82e08c6b1e16328d4f621e122eecde4d9737e59cb0d25d699a3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/logo-ap_Blue.png HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 10 Feb 2024 01:09:08 GMT
ETag: "149c-610fcb1059500"
Accept-Ranges: bytes
Content-Length: 5276
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

securecgdapp-net.com/ficheros/modern/images/icons/eye-icon_show.svg

158.69.150.41

404 Not Found

306 B

URL GET HTTP/1.1
securecgdapp-net.com/ficheros/modern/images/icons/eye-icon_show.svg
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
HTML document, ASCII text
Size
306 B (306 bytes)
Hash
041f8864ef306071b8bb6a1089d85323
a575ef6e69ef41d2c9512e4f66104ec3f12ef7e4
2dde8839e24f86b1d8c2bb82de07acd4a7bbc376ff5be59664081bbe29efb321

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ficheros/modern/images/icons/eye-icon_show.svg HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/files/login_and_register.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 306
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

securecgdapp-net.com/cgd/files/SantanderTextW05-Regular.woff

158.69.150.41

200 OK

46 kB

URL GET HTTP/1.1
securecgdapp-net.com/cgd/files/SantanderTextW05-Regular.woff
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
Web Open Font Format, TrueType, length 46268, version 1.0
Size
46 kB (46268 bytes)
Hash
ce966ea6470e77ea66fa28923428ee9f
e0652b2b341269d2a489b66b56a01b276b88f935
78e528416f0569f2ff89bfb0dcf524f9b27a9fd847fe5e85e150f2b39fdff090

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/files/SantanderTextW05-Regular.woff HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 27 Mar 2021 05:51:44 GMT
ETag: "b4bc-5be7e3e4ddc00"
Accept-Ranges: bytes
Content-Length: 46268
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff

securecgdapp-net.com/cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg

158.69.150.41

200 OK

56 kB

URL GET HTTP/1.1
securecgdapp-net.com/cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 566x458, components 3
Size
56 kB (55895 bytes)
Hash
493e1eb4c7f0f6a9aa911539fe5998d3
fedc53cb79a029f18b0d570b43c833cd43fd6717
cd221db65cb250c5cfb48c4728d64d05fb9869c1e9c5b5a564e5b11499b06223

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgd/CGDpt-Pag-OndeEstiver-566x458-v2.jpg HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sat, 10 Feb 2024 01:09:08 GMT
ETag: "da57-610fcb1059500"
Accept-Ranges: bytes
Content-Length: 55895
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

securecgdapp-net.com/ficheros/modern/images/icons/apple-touch-icon.png

158.69.150.41

404 Not Found

306 B

URL GET HTTP/1.1
securecgdapp-net.com/ficheros/modern/images/icons/apple-touch-icon.png
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
HTML document, ASCII text
Size
306 B (306 bytes)
Hash
041f8864ef306071b8bb6a1089d85323
a575ef6e69ef41d2c9512e4f66104ec3f12ef7e4
2dde8839e24f86b1d8c2bb82de07acd4a7bbc376ff5be59664081bbe29efb321

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ficheros/modern/images/icons/apple-touch-icon.png HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 306
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

securecgdapp-net.com/ficheros/modern/images/icons/santander-icon.svg

158.69.150.41

404 Not Found

306 B

URL GET HTTP/1.1
securecgdapp-net.com/ficheros/modern/images/icons/santander-icon.svg
IP
158.69.150.41:80
ASN
#16276 OVH SAS

Requested by
http://securecgdapp-net.com/cgd/login.php

File type
HTML document, ASCII text
Size
306 B (306 bytes)
Hash
041f8864ef306071b8bb6a1089d85323
a575ef6e69ef41d2c9512e4f66104ec3f12ef7e4
2dde8839e24f86b1d8c2bb82de07acd4a7bbc376ff5be59664081bbe29efb321

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ficheros/modern/images/icons/santander-icon.svg HTTP/1.1
Host: securecgdapp-net.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://securecgdapp-net.com/cgd/login.php
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 01 May 2024 21:40:05 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 306
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP