Report - dotz-4ve.pages.dev/

Report Overview

Submitted URL
dotz-4ve.pages.dev/
IP
172.66.47.27
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 15:43:08
Access
public
Website Title
Banco do Brasil
Final URL
dotz-4ve.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-16	901 B	26 kB	151.101.193.229
dotz-4ve.pages.dev	unknown	unknown	No data	No data	6.1 kB	1.1 MB	172.66.47.27
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-16	425 B	101 kB	142.250.74.168
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-16	455 B	5.2 kB	104.17.24.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.
2024-04-16	medium	dotz-4ve.pages.dev/	Banco do Brasil S.A.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	dotz-4ve.pages.dev/assets/js/scripts.js	7.8 kB	2024-04-16	2024-04-16
Pretty URL dotz-4ve.pages.dev/assets/js/scripts.js IP 172.66.47.27 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 17:43:14 Last Seen2024-04-16 17:43:14 Times Seen1 Hash 667df472eaad87b382f419c2db447653 5e3781676727706cf644752ae8cc899328f04ea8 e9b2dc8a9a7dd8ef51d6e757e3e07d85e4f327ae190c7ed7c0adba6fe6fbd663 Loading...

	dotz-4ve.pages.dev/	0 B	2023-03-07	2024-04-29
Pretty URL dotz-4ve.pages.dev/ IP 172.66.47.27 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-29 20:57:39 Times Seen37189635 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	dotz-4ve.pages.dev/	0 B	2023-03-07	2024-04-29
Pretty URL dotz-4ve.pages.dev/ IP 172.66.47.27 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-29 20:57:39 Times Seen37189635 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.googletagmanager.com/gtag/js?id=G-M25H06MJ9K	302 kB	2024-04-16	2024-04-16
Pretty URL www.googletagmanager.com/gtag/js?id=G-M25H06MJ9K IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 17:43:15 Last Seen2024-04-16 17:43:15 Times Seen2 Hash d9c52b430df32924fda7802ee54dde59 9cd1c4e8517b9178dd18cae715e7d121d7b5998c eaab75060dc0ec0dde975bedb2ad648243ac3f1bb7724b49d69b452525ed77f4 Loading...

	dotz-4ve.pages.dev/	0 B	2023-03-07	2024-04-29
Pretty URL dotz-4ve.pages.dev/ IP 172.66.47.27 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-29 20:57:39 Times Seen37189635 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.jsdelivr.net/npm/sweetalert2@10.16.6/dist/sweetalert2.all.min.js	73 kB	2023-07-01	2024-04-16
Pretty URL cdn.jsdelivr.net/npm/sweetalert2@10.16.6/dist/sweetalert2.all.min.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-01 11:25:55 Last Seen2024-04-16 17:43:15 Times Seen43 Hash 309df53a79ced3bb72182cf55f60aec6 519463a13630a4f3618cef2589c157f91b1b1bef 042037da753e9b278b09dff0f7a73e163b628c355988442eb983893122c5ed49 Loading...

	dotz-4ve.pages.dev/assets/js/jquery-3.6.3.min.js	169 kB	2023-12-28	2024-04-16
Pretty URL dotz-4ve.pages.dev/assets/js/jquery-3.6.3.min.js IP 172.66.47.27 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-28 14:53:12 Last Seen2024-04-16 17:43:15 Times Seen20 Hash 1c51b37873d6f4763c93b2983e64179a d4d6d049e7ce349992cd827a07760b0e94a9a415 cc0da88aceb3f677ed399f4aee067018aa9537aca4874b68698b46b65e9cfd25 Loading...

	dotz-4ve.pages.dev/assets/js/jquery.mask.js	18 kB	2023-12-28	2024-04-16
Pretty URL dotz-4ve.pages.dev/assets/js/jquery.mask.js IP 172.66.47.27 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-28 14:53:12 Last Seen2024-04-16 17:43:15 Times Seen20 Hash df2e8f437c9f000e56eca0a326c27cc6 336a9736aa86c82d60c8565ef043556cc6e2b6f6 3b69846ca90c9f3edf9ed7ba2779c218ba15beefb4224f6496172ef575b7a627 Loading...

HTTP Transactions (17)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css

104.17.24.14

200 OK

4.2 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65348)
Size
4.2 kB (4216 bytes)
Hash
c0be8e53226ac34833fd9b5dbc01ebc5
b81ef1b22de26af8a7a4656f565fbc91a69d7518
5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f

HTTP Headers

GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 15:42:41 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f5628a2-11846"
last-modified: Mon, 07 Sep 2020 12:33:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 12656333
expires: Sun, 06 Apr 2025 15:42:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lEvvPZllfGkJ4Fci0NUo34ylnMwSds3LOJo2WGUfsqfUAeTxlNLGzyiWwL%2Bdh6Vh3u6GgnEbQzATFWCDAWLNJnR9FA6ryJNupFoD8gKiSlF3P8nYjsylzahLMnnqV3HEA5OYoZUJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875549685f880b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/sweetalert2@10.16.6/dist/sweetalert2.all.min.js

151.101.193.229

200 OK

20 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/sweetalert2@10.16.6/dist/sweetalert2.all.min.js
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (47883)
Size
20 kB (20242 bytes)
Hash
309df53a79ced3bb72182cf55f60aec6
519463a13630a4f3618cef2589c157f91b1b1bef
042037da753e9b278b09dff0f7a73e163b628c355988442eb983893122c5ed49

HTTP Headers

GET /npm/sweetalert2@10.16.6/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 10.16.6
x-jsd-version-type: version
etag: W/"11b92-UZRjoTYwpPNhjO8licFX+RsbG+8"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 15:42:42 GMT
age: 1147905
x-served-by: cache-fra-eddf8230125-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20242
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/sweetalert2@10.16.6/dist/sweetalert2.min.css

151.101.193.229

200 OK

4.6 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/sweetalert2@10.16.6/dist/sweetalert2.min.css
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (24459), with no line terminators
Size
4.6 kB (4610 bytes)
Hash
a9c2f4051b00fbcf2987591a80ae8f06
d0005069b942ca6e7a09e0fca98509181b96f447
fa2feafb22f53d9b46ed75dca33bf4eab83d763bb68263481d6eec27eb2efd4e

HTTP Headers

GET /npm/sweetalert2@10.16.6/dist/sweetalert2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 10.16.6
x-jsd-version-type: version
etag: W/"5f8b-0ABQablCym56CeD8qYUJGBuW9Ec"
content-encoding: br
accept-ranges: bytes
age: 1171694
date: Tue, 16 Apr 2024 15:42:42 GMT
x-served-by: cache-fra-etou8220065-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4610
X-Firefox-Spdy: h2

dotz-4ve.pages.dev/assets/img/seta.png

172.66.47.27

200 OK

639 B

URL GET HTTP/3
dotz-4ve.pages.dev/assets/img/seta.png
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Size
639 B (639 bytes)
Hash
457f1ecbae5482823b2d8b3ee49ce8b7
d1b2dcf60fc770e6d559304684427cede792ed3b
18f2a80ff2f961110b984fb7f5d50351a62b07c35d133e015ff7993c0f82086b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/img/seta.png HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: image/png
content-length: 639
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "100404b647026a5ce19048ec248de5fd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lVoJTt%2F4cxLE6NKOsbwHDriGjwBl9VGCe1%2F0rsJAc%2By7Tls8mNTog3Mjm71SLnv2WGQmwGJ9RAC3USIXZZF5xvAiao1U0ZI3k5panG%2F4VvUTW1UR36sK%2B91vKFVDqOu9XLCbtsg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875549684a0156aa-OSL
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/img/dotz.png

172.66.47.27

200 OK

14 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/img/dotz.png
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
PNG image data, 547 x 174, 8-bit/color RGBA, non-interlaced
Size
14 kB (13576 bytes)
Hash
bc29883c524b238e932258e51e36aa8a
fdaea9c54e90bc71fa3473f041bee787341c30e0
ae85777c5e639e25b3307a1cd44ca520520452ca694fbf5c9b162f4a5f5d1a88

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/img/dotz.png HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: image/png
content-length: 13576
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b94cbaee6a7a4f5f31dfcc054ae420ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=23%2B4zuwPWy99NbpYDJzLBNmnosCXULFzvcFO7l31zqmlN2%2BtYgqfZ8k387nkZvekCY8kQLRJDERjJ4P3%2BA4Bq998YgOo7lWQACCk5%2FhQXPpaTwPVJlVEmK3PU6vzMOdiORylxr0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496849f356aa-OSL
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/img/bblogo2.png

172.66.47.27

200 OK

48 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/img/bblogo2.png
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
PNG image data, 850 x 856, 8-bit/color RGBA, non-interlaced
Size
48 kB (47689 bytes)
Hash
ac8fb56cfdbc20278793b124b87afeec
3734e446af62d7cdfeaab827e8c27330a73443e6
de53dd7277c3cc978e5b0275cd6880f3c785cc8e133f6fc3301a69a72d983735

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/img/bblogo2.png HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: image/png
content-length: 47689
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "48d1f1fd28a3fb19e29fcfdda24d680f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TN8rdyq5Pu1N4Q71e4xutwh3i3vw3ZHkKxSgrOIw7Y%2FlrvDn5tfuho4Reky1NWymLpLFkDEOtr%2Bzh74YZn7aDOe22ax527X%2FnGLAy%2BvYejT37Nd8Kqu4cOAMdqO2NYEm2ePoRbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496849ee56aa-OSL
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/img/logo.png

172.66.47.27

200 OK

397 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/img/logo.png
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
PNG image data, 1997 x 1981, 8-bit/color RGBA, non-interlaced
Size
397 kB (396886 bytes)
Hash
34027716b9d1a27f1bb8f86106ac09c7
5cf8a95301acc5ca881c011dce141a5076c5ff98
c91497e10bf4d85b86b4d4a20da081847fab2f605662f503bbc3db1a8781ff88

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/img/logo.png HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: image/png
content-length: 396886
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "20c05024eaa09e187885e0d48dbf814d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lh7Phf%2FxPhlT4f3Z8%2F2o4tM8fLmi4X3igbzYbRKkXJGOkcYumv75sSZnuN04U%2BKdLA6LXSsro%2BvrZZIj2CuEmhVPO%2B86cErXaQ%2BZ1NIAVDlCFdcJ2iW4g0cMzLLrdc%2BcwQCZ9MU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496849f156aa-OSL
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/img/dotz_about.png

172.66.47.27

200 OK

514 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/img/dotz_about.png
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
PNG image data, 850 x 856, 8-bit/color RGB, non-interlaced
Size
514 kB (514147 bytes)
Hash
c721878cec3120818873d18252cb82a2
331a2260ad57b5142561fbefc13012bc9d1fecd6
b0ad766a6ef6b542a42bd33d44330d185b89d7a9296a5d40e72cc3949cdd9a2f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/img/dotz_about.png HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: image/png
content-length: 514147
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d02de95d20e3185d047327b0e51c0cc4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GnCIahBJjfbSvW8ZAjXYfxXjNfJmeeboXgCU2QtgnvZC3Czi4o9uBz3ejA2UKEErTkOf9TAtTw5utIeWqK3rHSgBP7zJMNyI5P7NrRYTZddMyWlhHHVGczZd5ZkJ9%2Bru5Cnr9CE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496849f556aa-OSL
alt-svc: h3=":443"; ma=86400

www.googletagmanager.com/gtag/js?id=G-M25H06MJ9K

142.250.74.168

200 OK

101 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-M25H06MJ9K
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D
ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
101 kB (100666 bytes)
Hash
d9c52b430df32924fda7802ee54dde59
9cd1c4e8517b9178dd18cae715e7d121d7b5998c
eaab75060dc0ec0dde975bedb2ad648243ac3f1bb7724b49d69b452525ed77f4

HTTP Headers

GET /gtag/js?id=G-M25H06MJ9K HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 16 Apr 2024 15:42:42 GMT
expires: Tue, 16 Apr 2024 15:42:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100666
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dotz-4ve.pages.dev/click

172.66.47.27

200 OK

2 B

URL POST HTTP/3
dotz-4ve.pages.dev/click
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
JSON text data
Size
2 B (2 bytes)
Hash
99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

POST /click HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://dotz-4ve.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: application/json;charset=UTF-8
content-length: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hDZUISG07Y%2FxDrf35QDOUTg07kGgpygMhYkbx3cqJRfqYVDp%2BSNCnOXjHMEBKzhWmOwe41%2FnZg5XQTM2apZ8nGI%2BzXNVjttHf0MfiE6viBj5ih0O2nhpaCB6qLPd2bYkaPSW7H0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496a0d7156aa-OSL
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/img/favicon.ico

172.66.47.27

200 OK

3.7 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/img/favicon.ico
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
3.7 kB (3742 bytes)
Hash
ba83af640ba589e306764ce530a05726
16d0ce6d1442b0916e234f4bfcbb37233b6145ce
78a71d92fe04d9c9f4d21554f8bba882137f21d3461c233012932424055d6f48

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/img/favicon.ico HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: _ga_M25H06MJ9K=GS1.1.1713282162.1.0.1713282162.0.0.0; _ga=GA1.1.456319098.1713282162
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: image/vnd.microsoft.icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bfe3424c95a69958e41cce7fd32d26c2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPqP3RFAUVCvNgcGOMhViGPkDoy9k6KM6%2Bzr24OAc4TqUOU17caeX3lKKjZakAxJYwKIpnt%2FdpAcaE2wFO5PL%2BJhcDxp7B6ZfJEJPoA1Ui5W3MCBnsziOWa7H%2BmLKKvNRevlej4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496b5fe656aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/js/jquery-3.6.3.min.js

172.66.47.27

200 OK

49 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/js/jquery-3.6.3.min.js
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
JavaScript source, ASCII text
Size
49 kB (48726 bytes)
Hash
1c51b37873d6f4763c93b2983e64179a
d4d6d049e7ce349992cd827a07760b0e94a9a415
cc0da88aceb3f677ed399f4aee067018aa9537aca4874b68698b46b65e9cfd25

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/js/jquery-3.6.3.min.js HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"90391a5fffdd00a1f49b9253d7c7894b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TH%2BKyDaEexjnh6r2YSkTRc%2FcG1cmaa12tHEohwUVCW0CRVPkuyNta99i8P65mVgNDCS%2FV5iPyk4uYmm85D7f5c2jm9AtIxYN6v6rh2MbvUc70K%2B0wLHxtbKK2oIyf1w%2Bc796ubY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875549684a0256aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/js/jquery.mask.js

172.66.47.27

200 OK

18 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/js/jquery.mask.js
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
JavaScript source, ASCII text
Size
18 kB (17985 bytes)
Hash
df2e8f437c9f000e56eca0a326c27cc6
336a9736aa86c82d60c8565ef043556cc6e2b6f6
3b69846ca90c9f3edf9ed7ba2779c218ba15beefb4224f6496172ef575b7a627

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/js/jquery.mask.js HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c02b12b719b3439bd5ab0a379d8947fe"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WhRxI1v%2BUv7ia15tob3LS8thKXSA28gSQeQQbgaWlPNRVIrRrmCtNw4pidW8V3Elqv9yj3mghSougO0xaJxrRkj90KaTp6GMfE5ISlfQCrfxdLDoSv2I%2F%2BoIf7AVkg%2BcACyIilo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875549684a0356aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/css/style_dotz.css

172.66.47.27

200 OK

5.9 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/css/style_dotz.css
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
ASCII text, with very long lines (6645), with no line terminators
Size
5.9 kB (5913 bytes)
Hash
c24780d05e38bf748cd8ae7e5526cc62
b1f7d71971c948e67db9b2d1e600e91d2fa11bdb
143f9dd563719c30a7778018765c0cf6d413d815cd773fd421d42ef915a93f43

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/css/style_dotz.css HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5cd6fc1e185feaabf65107ed69f89259"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D94wyjxzs5PU21OdogEi3R1Counic%2FLAQS1iaizP%2BTEzGi2WyEVKecJMR1%2FGnl2kaJY9sKTwvTFUZr9nMDyGeALpP8RrdnkEWPPYuwZHCEjlLpnrs8sam8%2F8SNTnx6%2BDfwT2bIk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755496839e356aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/js/scripts.js

172.66.47.27

200 OK

7.8 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/js/scripts.js
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (8379), with no line terminators
Size
7.8 kB (7807 bytes)
Hash
723393660bbda70c8fe8063023ed41dd
9c1b4e947b7c92cfaabdd212a4d19f05c3d7bcd4
2a490c36e9553512f9012db65379f13d5aca30a5b3bb850ac93e9ae0b35cf0e5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/js/scripts.js HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"9cab98d2a305636f6f421f2899c13d77"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8ljI25JMq%2FvBWBjEBx4DhxMAQTtLqFKqyb03l2BPF315QHJEUB4ZrgDgl8xyGSdlQZ08PX3fXK63lqTtiKr2u4V3pW35OFOEb7SwS7TBq3OzMz4Oiz9oJWdZuSJj%2F4DyEIH%2B%2FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875549684a0756aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/assets/fonts/BancoDoBrasilTextos-Regular.ttf

172.66.47.27

200 OK

58 kB

URL GET HTTP/3
dotz-4ve.pages.dev/assets/fonts/BancoDoBrasilTextos-Regular.ttf
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dotz-4ve.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright � 2020 Banco do Brasil S.A. All rights reserved.BancoDoBrasil TextosRegular1.000;FHTP;
Size
58 kB (58092 bytes)
Hash
579c05347bfa86264e98d2033fb4cef0
e9fe67cf58af49c541b2f48e78a361ef6c9e6bad
845ab7b51bbdcac3b290c67a15a30ad91aedccf163c6ad1f4cee43e53391915c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET /assets/fonts/BancoDoBrasilTextos-Regular.ttf HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dotz-4ve.pages.dev/assets/css/style_dotz.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:42:42 GMT
content-type: font/ttf
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"767aab76c1fb69452103d7fc8058a24e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPnXyfX2m%2FsjkRGMg4ThEtL841V784q1wdEOwa7KYQf6XMLqkV5XqbHOJA1N3%2F%2FISApCy%2FUTGYngDSoTuwqGJZIIIfG5vUBWi18uKQ5OASQ8VUWW6zUivHKvKhxhnJ8atiQeOLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87554969fd6456aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

dotz-4ve.pages.dev/

172.66.47.27

200 OK

8.0 kB

URL User Request GET HTTP/2
dotz-4ve.pages.dev/
IP
172.66.47.27:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdotz-4ve.pages.dev
Fingerprint47:73:A6:AD:A8:17:0D:D9:14:21:FB:F6:3D:4D:91:13:74:E6:4E:6F
ValidityMon, 15 Apr 2024 18:01:59 GMT - Sun, 14 Jul 2024 18:01:58 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (8695), with no line terminators
Size
8.0 kB (8022 bytes)
Hash
027ebf982593ea37808a972b32f332a8
d0c9113b0bac924a07d24dbf7db8e83bd14e1267
d974a757cfc075d9eef02e0b0a72a8e58d70efa2a0f02f5ac12614987784a353

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Banco do Brasil S.A.

HTTP Headers

GET / HTTP/1.1
Host: dotz-4ve.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 15:42:41 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b7215722d577e2c186f6faef6b709707"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WhZLa%2B40pyA3ViWvFQLgD%2B6umeP2Lmxfi63L7vh4xAenMb3PguQa2cKazZqGgJcWsMA%2B7fXUgDyARpssqUxwC2zTorj8pUtSz7gJ7hT3Bv8lWzCgdRU%2Bwtm1yk0XeTDJt%2BEaTeo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87554966783156b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML