Report - www.vaquinhabrasil.com.br/SG/Sghend/

Report Overview

Submitted URL
www.vaquinhabrasil.com.br/SG/Sghend/
IP
50.6.138.129
ASN
#19871 NETWORK-SOLUTIONS-HOSTING
Submitted
2024-04-23 17:42:32
Access
public
Website Title
Société Générale | Connexion
Final URL
www.vaquinhabrasil.com.br/SG/Sghend/
Tags
societe_generale financial phishing
urlquery detections
Phishing - Societe Generale

Detections

urlquery
63
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.vaquinhabrasil.com.br	unknown	2023-05-24	2020-06-20	2020-06-20	12 kB	2.2 MB	50.6.138.129

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	www.vaquinhabrasil.com.br/SG/Sghend/	243 B	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/ IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen399 Hash 71d19f7fe5d2135f268f61647dc03988 1e25ed11489509b55de05241a48d728969493458 5e5eaf8632a7264aaa23953240629b96a0709d13b1091fc9763970c2dd8a02ce Loading...

	www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery.js	88 kB	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery.js IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-03 18:47:20 Times Seen96770 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	unknown	601 B	2023-04-13	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 09:04:01 Last Seen2024-05-03 18:34:01 Times Seen390 Hash 56cd57cab9aa2700068ff79bb038a7a5 f8a30016cb976300910d908d278a66118c7df2fc 73724ae008cf4909631ffebcb26867d9486a7ad898060790619926f9499fc92a Loading...

	www.vaquinhabrasil.com.br/SG/Sghend/	483 B	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/ IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen397 Hash d4e17ac95f6499091f5567792887b0fe 605112c6edb9f3f3aa27108cb32230deedbac7d2 e02463ed16a3d8b83b06cbc206098817ba44827c535b8a3971b78ccdb327abff Loading...

	www.vaquinhabrasil.com.br/SG/Sghend/files/js/rules.js	488 B	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/files/js/rules.js IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen800 Hash cd884ffdf1f759fbdeaae54b636288d4 450ea313a0b4b250024abd0935c1f59617841134 f0f8ce50e148b374b7b9b29180824007970478e81ce52669d531a669d9c4c34d Loading...

	unknown	348 B	2023-04-13	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 09:04:01 Last Seen2024-05-03 18:34:01 Times Seen390 Hash 7f439c6c2a49cdb2f74f78ba119ce489 8beb3121045e0506df9a71c51b0c6a4d76701c68 e140fb816df49620a4efeb7c9ee66c30b4f76fd0cf6e248c3cc3997ef6fbe693 Loading...

	www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery2.js	70 kB	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery2.js IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen837 Hash f86b7a0e560edb5951576cf8884153e6 e5b4c5b95c79e6e42ef676ed77986db3f85223ab 74a340d2c31205e840515065e739e3d08fa169bc8fa52c66db838dbf749103c1 Loading...

	www.vaquinhabrasil.com.br/SG/Sghend/	303 B	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/ IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen394 Hash df4d122557c68345696b953efe9e8f1d 664b2317e9984afa6eadd6ad13bf90b92b1e8d31 e082f41c3e3feb3e3d50eb92d57a6f04b702744fbc401dca0fdd749808e70f8c Loading...

	www.vaquinhabrasil.com.br/SG/Sghend/files/js/js.js	1.3 MB	2023-03-07	2024-05-03
Pretty URL www.vaquinhabrasil.com.br/SG/Sghend/files/js/js.js IP 50.6.138.129 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen581 Hash 6e6c70c409456c23a09d9adbce8d2e80 0f50b6f4f4555c31e8f832b446cda4996acb4460 3957ed7a4d5b5f5c36fe0872fbc2f619b8d2d0094b134dd65d1ebd6f3352847b Loading...

	unknown	171 B	2023-04-13	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 09:04:01 Last Seen2024-05-03 18:34:01 Times Seen390 Hash 17d527f0bf9fc871c030bdd3baa73f72 e53ccb8d239a7286525b686f3da6d65b462e6ea2 93998249270c96f5c32ba2c8c0baffc43032b571e0684ec9c55d8d7d01f64bc9 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-03
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-03 18:37:25 Times Seen351411 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#2 Eval - 81506f6c9b74db893b121a759da430d7	1.0 kB	2023-03-07	2024-05-03
Pretty Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-03 18:34:01 Times Seen454 Hash 81506f6c9b74db893b121a759da430d7 2d4226d3b0de0217029bc6113d7489f398b5a4be a49959becff3155c2f2c2ba4684dfecdf77e055678880cbddac3c81eba11fe3c Loading...

HTTP Transactions (24)

URL IP Response Size

www.vaquinhabrasil.com.br/SG/Sghend/

50.6.138.129

200 OK

6.1 kB

URL User Request GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (519)
Size
6.1 kB (6104 bytes)
Hash
67e81f2b567c64f8ab5bb5ec4733ee99
189445ee3e2f3aaa187ecc78b4b3704f1337b3ee
f55c3cba1c7179e76cb2e9ae41d6250e92ac9e687ca363f774b6ead1e83336c9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/ HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 6104
content-type: text/html; charset=UTF-8
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/js/rules.js

50.6.138.129

200 OK

248 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/js/rules.js
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
ASCII text, with CRLF line terminators
Size
248 B (248 bytes)
Hash
cd884ffdf1f759fbdeaae54b636288d4
450ea313a0b4b250024abd0935c1f59617841134
f0f8ce50e148b374b7b9b29180824007970478e81ce52669d531a669d9c4c34d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/js/rules.js HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 248
content-type: application/javascript
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/css/spec56_btn_gsm_all_gcd_20190320190559.min.css

50.6.138.129

200 OK

319 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/css/spec56_btn_gsm_all_gcd_20190320190559.min.css
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
ASCII text, with CRLF line terminators
Size
319 B (319 bytes)
Hash
eabaf0aaf10e39b24e4bc7c25d2e7ec8
d0e48a9cdb4d870b510d88cdfc325a2614071327
31525381d30528a71a4c4419b0ee495b4053428b061e75ac0e9556b00d56d1e4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/css/spec56_btn_gsm_all_gcd_20190320190559.min.css HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 319
content-type: text/css
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/logo-sg-muet.svg

50.6.138.129

200 OK

402 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/logo-sg-muet.svg
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
SVG Scalable Vector Graphics image
Size
402 B (402 bytes)
Hash
392bde7f3217782d2f98bff1db922a9c
ce2e5b3a064e2dfa92039cc1caa37d8c6d3e144f
38f90a05ed700e9adb2b37d23337eee3be2c658bdb1f38f258c15920b36d1676

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/logo-sg-muet.svg HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:40 GMT
accept-ranges: bytes
content-length: 402
content-type: image/svg+xml
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/logo-sg.svg

50.6.138.129

200 OK

2.7 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/logo-sg.svg
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
SVG Scalable Vector Graphics image
Size
2.7 kB (2666 bytes)
Hash
10e841a89a9c667fa6b17ea44c60529e
c65e827b075418de2a04d59a29fd7875921f52ef
2e19511d9133c826bfd5555070b89ac5cb3d108828b9e49c72d2d3ddbcbfe9ab

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/logo-sg.svg HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:42 GMT
accept-ranges: bytes
content-length: 2666
content-type: image/svg+xml
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/logo-sg-seul.svg

50.6.138.129

200 OK

3.0 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/logo-sg-seul.svg
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
SVG Scalable Vector Graphics image
Size
3.0 kB (3042 bytes)
Hash
a4905efc552b898322c256cb4d4f55c3
6ca6d615b2ebe329819a0338879c1d206ad0b90b
4d5f7f9cf24e66420cd0f39be3d181b4566ff8dcc8e699731c88787e511befd3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/logo-sg-seul.svg HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:42 GMT
accept-ranges: bytes
content-length: 3042
content-type: image/svg+xml
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/gen_ui.png

50.6.138.129

200 OK

6.4 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/gen_ui.png
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Size
6.4 kB (6380 bytes)
Hash
f5f55947733314117f1109f93f826b5f
394e87fcb82200b9c108182bdc761dc6aa016467
c4763204659e2a150da0e4f784da55eff7c77ae08b0c4fe9156a832093fb90fb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/gen_ui.png HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:42 GMT
accept-ranges: bytes
content-length: 6380
content-type: image/png
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/css/print_20190320190559.min.css

50.6.138.129

200 OK

969 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/css/print_20190320190559.min.css
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
ASCII text, with very long lines (3067), with no line terminators
Size
969 B (969 bytes)
Hash
e4d358e525d052a0377f57af7a5f5a82
f1dc2890a644a2bd2daba774933381739698c036
cbf2f9788fa5b22dd4c4428843fdd3ea68595db536cf347517da7d048d3bedcf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/css/print_20190320190559.min.css HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 969
content-type: text/css
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/trame.png

50.6.138.129

200 OK

208 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/trame.png
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced
Size
208 B (208 bytes)
Hash
f9dc6373846a99bfe761d3427d50632d
685843d14882374bcf6b0798ab60bbecc84567a8
d41b3311daa52ffdfb112169926c6b68fee615ea6c72abac25fa1dbe799131d5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/trame.png HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/index_20190723161948.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:42 GMT
accept-ranges: bytes
content-length: 208
content-type: image/png
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/new_sprite.png

50.6.138.129

200 OK

10 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/new_sprite.png
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
PNG image data, 312 x 104, 8-bit/color RGBA, non-interlaced
Size
10 kB (9961 bytes)
Hash
675d3d69bb78ed155d9d443bef4cccd8
8266846da238de6218a75a11744f35f821baff74
0d477834d11f75ff989d2b6bfbcbaaed80a8e4f8efe65569f4cee2ad603a73af

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/new_sprite.png HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:42 GMT
accept-ranges: bytes
content-length: 9961
content-type: image/png
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/spriteV4.png

50.6.138.129

200 OK

56 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/spriteV4.png
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
PNG image data, 880 x 650, 8-bit/color RGBA, non-interlaced
Size
56 kB (56012 bytes)
Hash
2489b1de4b742de1d025c2751296143e
ca790ae20b4603ce6595ab1a0384dd217105306c
fdffcd1a92a88cf374901faf2ec466c6d16c0baa8b1f92426a24424743b65ab4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/spriteV4.png HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:42 GMT
accept-ranges: bytes
content-length: 56012
content-type: image/png
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-regular.eot

50.6.138.129

200 OK

0 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-regular.eot
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/fonts/sourcesanspro-regular.eot HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-semibold.eot

50.6.138.129

200 OK

0 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-semibold.eot
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/fonts/sourcesanspro-semibold.eot HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-bold.eot

50.6.138.129

200 OK

0 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-bold.eot
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/fonts/sourcesanspro-bold.eot HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-regular.woff

50.6.138.129

200 OK

75 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-regular.woff
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
Web Open Font Format, CFF, length 75420, version 0.0
Size
75 kB (75420 bytes)
Hash
52f5045b30343cd0e0a5acbd215a50e9
dc37d3ef1b5939ad6a5dfae601ae183c503095f2
f679efce1ea9cbed26a573aa8c8db1d01fe51abe4fcc2a77d18ab7bcb03e0bb1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/fonts/sourcesanspro-regular.woff HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:44 GMT
accept-ranges: bytes
content-length: 75420
content-type: font/woff
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-semibold.woff

50.6.138.129

200 OK

75 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-semibold.woff
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
Web Open Font Format, CFF, length 74996, version 0.0
Size
75 kB (74996 bytes)
Hash
f079be3e96761bf618ea2a5b314eb014
2aad9b3d874cdd21ee8496738af5f5b94c7382a0
b2106f33585940e944fac6de500dd767c4592692689c001c45c475476583404e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/fonts/sourcesanspro-semibold.woff HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:44 GMT
accept-ranges: bytes
content-length: 74996
content-type: font/woff
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-bold.woff

50.6.138.129

200 OK

76 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/fonts/sourcesanspro-bold.woff
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
Web Open Font Format, CFF, length 76236, version 0.0
Size
76 kB (76236 bytes)
Hash
3e7af4d251f183a9ea98bfd812016274
231ff1575fa3fdcde1fe985786c3622719653d8b
f33d4ed699473243d3304fb2ee9435043ead92e092e76c04656a6745cf00e8d4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/fonts/sourcesanspro-bold.woff HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:46 GMT
accept-ranges: bytes
content-length: 76236
content-type: font/woff
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/css/inbenta.css

50.6.138.129

200 OK

27 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/css/inbenta.css
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
gzip compressed data, from Unix
Size
27 kB (27049 bytes)
Hash
3d9e0926116925acc3512fd6c43c2dc6
b8a1be5962b8d68f6c30210a14db2a58739be3cb
098ff67201a2ba4ffc191dc210bc262d6d42e19b13c59bc4786396c347a8cd2c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/css/inbenta.css HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/img/favicon.ico

50.6.138.129

200 OK

318 B

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/img/favicon.ico
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 16 colors
Size
318 B (318 bytes)
Hash
ca10c09aeaf43460d3760f50c608eb51
f2ed2a4fe0e1eadb7dd28444ea6b7a04abf0d38e
daf58b06a09d467436ee5fd10eefbeadac3cf6ecaef1eca1884ef8330f561642

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/img/favicon.ico HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:40 GMT
accept-ranges: bytes
content-length: 318
cache-control: max-age=604800
expires: Tue, 30 Apr 2024 17:42:07 GMT
content-type: image/x-icon
date: Tue, 23 Apr 2024 17:42:07 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css

50.6.138.129

200 OK

180 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/css/style.css
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
ASCII text, with very long lines (1330), with CRLF line terminators
Size
180 kB (180495 bytes)
Hash
1f236b933d9108a8f6ad7672f40a097f
88a3cffda08247363d328b68252910390601ba3f
1f553a143ee858f8c7002b84160ec73dedbedb8377937ca593efda6a4f468a27

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/css/style.css HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery2.js

50.6.138.129

200 OK

70 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery2.js
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
JavaScript source, ASCII text, with very long lines (33165)
Size
70 kB (70472 bytes)
Hash
f86b7a0e560edb5951576cf8884153e6
e5b4c5b95c79e6e42ef676ed77986db3f85223ab
74a340d2c31205e840515065e739e3d08fa169bc8fa52c66db838dbf749103c1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/js/jquery2.js HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/css/index_20190723161948.min.css

50.6.138.129

200 OK

267 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/css/index_20190723161948.min.css
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
ASCII text, with very long lines (310), with CRLF line terminators
Size
267 kB (267414 bytes)
Hash
3ceb0fb380c636a6e7849491323d71b0
0bc15dd5af9e83955b3d12f8d08e36f7ebf434de
f513229e1ccc5679b510e10814c2dcb9431574dfcdf2ad7d0e24a67c8344c9cd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/css/index_20190723161948.min.css HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery.js

50.6.138.129

200 OK

88 kB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/js/jquery.js
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/js/jquery.js HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

www.vaquinhabrasil.com.br/SG/Sghend/files/js/js.js

50.6.138.129

200 OK

1.3 MB

URL GET HTTP/2
www.vaquinhabrasil.com.br/SG/Sghend/files/js/js.js
IP
50.6.138.129:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www.vaquinhabrasil.com.br/SG/Sghend/
Certificate
IssuerLet's Encrypt
Subjectvaquinhabrasil.com.br
Fingerprint7E:8A:C5:D7:9D:0D:74:AE:D6:18:03:5E:C9:0C:7B:45:04:DD:46:52
ValidityMon, 25 Mar 2024 16:45:53 GMT - Sun, 23 Jun 2024 16:45:52 GMT

File type

Size
1.3 MB (1264576 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /SG/Sghend/files/js/js.js HTTP/1.1
Host: www.vaquinhabrasil.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vaquinhabrasil.com.br/SG/Sghend/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 24 Mar 2022 20:07:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Tue, 23 Apr 2024 17:42:06 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML