| cedula.com.ve/web/css/style.css |  104.21.63.88 | 200 OK | 5.0 kB |
URL GET HTTP/3cedula.com.ve/web/css/style.css IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeassembler source, ASCII text Hashab53f5e110c8e411367e2f51309f7dc9 c47531cab066499a9ba5b0d1a6e414e211ba5572 cb103df933ef95cb4148ed3405dc3265d223e080c354b4c7872aeb7b1f5c3dcf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/css/style.css HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: text/css
last-modified: Fri, 21 Jul 2023 17:34:12 GMT
vary: Accept-Encoding
etag: W/"64bac194-4ab5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GfJshrGtboz00YIQExd2YyURVdDJN6Sm%2FpRLVILwKvtSYg%2B%2BFugPgEvC0wD1tzeey%2FITqZtARoVDwevlwuzkZr11Qr8J6vOjJ%2FEh%2B%2B5nvmUNYvEXCSwK8zJLowhAI9lT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb08a41568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 |  216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cedula.com.ve
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:02 GMT
expires: Fri, 18 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 582326
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/oxygen/v15/2sDcZG1Wl4LcnbuCNWgzaGW5.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/oxygen/v15/2sDcZG1Wl4LcnbuCNWgzaGW5.woff2 IP216.58.207.227:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16172, version 1.0 Hash891cacadb2d3449b6f342f571dc743ae e35ea255304a2981b27f6c2822eb4fd8eaa984d5 5740bce57f68562d42e8ca6f6eb70dca3bc33be11ef0361e78274d360f41adc9
GET /s/oxygen/v15/2sDcZG1Wl4LcnbuCNWgzaGW5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cedula.com.ve
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16172
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:33:35 GMT
expires: Fri, 18 Apr 2025 02:33:35 GMT
cache-control: public, max-age=31536000
age: 582593
last-modified: Mon, 09 May 2022 18:30:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cedula.com.ve/web/css/bootstrap.css | 104.21.63.88 | 200 OK | 22 kB |
URL GET HTTP/3cedula.com.ve/web/css/bootstrap.css IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeASCII text, with very long lines (540) Hash2183d05f5a0a9a3b2e8cb0509ca363e3 f2183455571b19311a235bd5aa204e694ade8e94 c942686010e285633d77a24341c43850ccd6162fcc7e8281ae8a70c2921a9af5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/css/bootstrap.css HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: text/css
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-22936"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfoW9v9KLBIvpwWwyvLjTTwBOij1Q0DxUaWO6juAHSRFk5UnbUGPGs9Tg52dyvs4zlT9BT0l2Dqfhnmpl9b1mHBTb%2BI9rIZcyxV1%2F5FPS3KPoQ6KJAtlxBlAnWLm9LgK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb08a3f568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cedula.com.ve/web/images/logo-cedula2.png | 104.21.63.88 | 200 OK | 14 kB |
URL GET HTTP/3cedula.com.ve/web/images/logo-cedula2.png IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typePNG image data, 160 x 157, 8-bit/color RGBA, non-interlaced Hash8a672798d458ec459a6b6c4e1808c4bd 0be740102578a73b68c877eb34a55814c3754132 5af01b7692d7bfca3186d74f918169d707de3949aab36aee81757b35f2d353ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/images/logo-cedula2.png HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: image/png
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-3639"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gWH8EOJR%2FJzKNCm9D%2FCgiaDBiVgEWGSk8OwR8hN3uq9Mdp0WLVaPAJnY3AnQkNCGsrScVSnN%2FqMt6sMVib%2Fo3oVBLnG6%2FazE66y6%2B8OBa6xxM2JF%2FJUkfQDuX%2FOrpZhY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb09a51568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cedula.com.ve/web/js/responsive-nav.js | 104.21.63.88 | 200 OK | 978 B |
URL GET HTTP/3cedula.com.ve/web/js/responsive-nav.js IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeJavaScript source, ASCII text Hashc6a89d7098b845ee883a36c2c114d725 80a18896ce75659dbec875fb17dd546b1872682c bbd47871c790776a3ef9eecc12fd3c9b836283b493eeb28afd3393a6f9ce5ad9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/js/responsive-nav.js HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: application/javascript
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-4f4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t1wuPzSJs4pzG55rX%2BrcRzWkUCjgjIuw2t%2BjMwx8uk9XsKgyXknd644Wk%2F5ogRw%2BakDXJPWHI4vh5w66a8NazYR8f6qL2qKk5L7s%2BMPUVtp0oHuMsU5tMHKFeORllTLI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb09a55568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api.js?onload=myCallBack&render=explicit | 142.250.74.164 | 200 OK | 1.1 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js?onload=myCallBack&render=explicit IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
Hashf4eaac6b942f7a8575bf33a74ed1d027 291a6b894087c5559905df2a1f658efb104068d8 f4015f5554b61cb2c388cf5e90a418585b47e59c9309ef75aae8b6f6105985bf
GET /recaptcha/api.js?onload=myCallBack&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 24 Apr 2024 20:23:28 GMT
date: Wed, 24 Apr 2024 20:23:28 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cedula.com.ve/web/login.php | 104.21.63.88 | 200 OK | 30 kB |
URL User Request GET HTTP/2cedula.com.ve/web/login.php IP104.21.63.88:443
CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeHTML document text HTML document, Unicode text, UTF-8 text, with very long lines (10226) Hashba105b17cd02da3c32684c725f7ea68c eb1d08ee6b44427bbb62804b12056dd777940271 4c820e014d2902267ef67681a56d142171d061ff11df72ede89cb6b1cda2b229
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/login.php HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 20:23:27 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0l%2BcuNPPNIICXPRsS0VhYH3UBTDMkUovjBaWZHfTatdyuF4sFyHdWSapMHIPQsQXYF5vpi5TvFwCiIDNnYoLX%2FQ1CEgAD5IBSbAe%2B%2FsdzsyqwG46HUVrKtIJsA1nayeN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfac4da2b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat:400,700 | 216.58.207.234 | 200 OK | 6.6 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Montserrat:400,700 IP216.58.207.234:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hash07bf50dddcdac12193a1e0c0c516c345 e7ee337f5a90c08c762c2652c7d5d906e683d25d b14144e6aa3610416319585fee041861e58ad08e79898a24f3c218d8e9b3a3fc
GET /css?family=Montserrat:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 20:23:28 GMT
date: Wed, 24 Apr 2024 20:23:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cedula.com.ve/web/fonts/glyphicons-halflings-regular.woff2 | 104.21.63.88 | 200 OK | 18 kB |
URL GET HTTP/3cedula.com.ve/web/fonts/glyphicons-halflings-regular.woff2 IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18028, version 1.589 Hash448c34a56d699c29117adc64c43affeb ca35b697d99cae4d1b60f2d60fcd37771987eb07 fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/css/bootstrap.css
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:29 GMT
content-type: application/octet-stream
content-length: 18028
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: "552a89c2-466c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HR20jNUikiQ0nLCPeEcZM8LuzokDpRKVQVO1eSNyZ8nikC%2FuJ%2BLs38fes18a1kHp1qbJUENaD2q8Up%2FC0%2BMTbu0gpYZC0n2GtfOMuu4SqP6yqMgEcLiMIFLvpoDRl8Ld"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb57971568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cedula.com.ve
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 138521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cedula.com.ve/web/images/icon.png | 104.21.63.88 | 200 OK | 81 kB |
URL GET HTTP/3cedula.com.ve/web/images/icon.png IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typePNG image data, 557 x 545, 8-bit/color RGBA, non-interlaced Hash346727b378abccb2bb88662cba0fea51 6bd1291d84c2b26fb1ad63f9c1a343cc25592a1b 678f17ffdf1c9aa272c44faad04ef8159d164a85f4dbb93823ce2fb950935a65
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/images/icon.png HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:30 GMT
content-type: image/png
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-dc8f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FdvvN5VTTah4mZXEN670XEWvfkv5ssQVG6Qx%2F8wv5%2FnXxGjxpUQj5SkY6VeLHYMZ6EpyCCDA8R40twe80WL%2B%2B3YZchYVxSie1imAlz6O76MP%2BeHQryBdJG7iR2wG4I6e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb8ee75568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cedula.com.ve/web/images/price_bg.jpg | 104.21.63.88 | 200 OK | 232 kB |
URL GET HTTP/3cedula.com.ve/web/images/price_bg.jpg IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1599x252, components 3 Size232 kB (232049 bytes) Hashf8b20a49341a0c354c739738787ac92b c79f6bd3995e3321ab8d408aaffa973b5df45672 573ebc1d68b19340d664bd51335dbf41443833b7d4fa42dce450ef56f7abe791
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/images/price_bg.jpg HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/css/style.css
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:29 GMT
content-type: image/jpeg
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-6686"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v0V3hsjcCn87F3Zm2Np8vYVKr9Uq5CdcisZGQSpEfvDmSiRxGdy%2Ft6Gqg9KS5JujZDmlSkzyx2ZXbllkzcSQbeCDA1vp7yaErQC2dcF6XPbrH13Cy5kIHRyqQJvFmESF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb53924568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=zfd8hfk6dhkk | 142.250.74.164 | 200 OK | 234 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=zfd8hfk6dhkk IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (37106) Size234 kB (234236 bytes) Hash1022c347f14a83f26d5c4c577081f0c8 81a0d6e42364a665b5407ceb8419537b48d98896 e1a3c48016a2a448df942ed7082a8dc63557e8e2f1907c67cb62956bc864f15d
GET /recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=zfd8hfk6dhkk HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 20:23:29 GMT
content-security-policy: script-src 'nonce-ZAuCjCKCj59pyuGJvJoUuQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 138522
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cedula.com.ve/web/images/heading.png | 104.21.63.88 | 200 OK | 18 kB |
URL GET HTTP/3cedula.com.ve/web/images/heading.png IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typePNG image data, 1 x 3, 8-bit/color RGBA, interlaced Hash60f0aa254ee909b944b04e2b2aa3283f 3204df4097ae036bb7b6b7d628fee5370eed3cb7 0a0ae1076066a3bcdd74ce1c45b6460cc67357d38247b8472487d6561e84c99d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/images/heading.png HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/css/style.css
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:29 GMT
content-type: image/png
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-b01"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2DGtGZbn%2B2U5wVYWtjaW6QofHkDPWsbSgpotvpI3lIO0AIYAiG91EdYsLkd441x2t%2BjALNEw1PKInM9SNSATqarPXMys7Ek83LuYFffxnVcHrFl1PPeMIzhF87keb5z6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb5594c568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.164 | 200 OK | 2.3 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=zfd8hfk6dhkk CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash318383482baab4f7d17507373bd8a84f 8804baca752ff3c292113e637e66a770af980145 791703d6d03807b8efb032a6d6d512f21e878c701bd25e218bedac25bb79a8e2
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gm0hdcmpvq60
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 24 Apr 2024 20:23:30 GMT
date: Wed, 24 Apr 2024 20:23:30 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gy1rrumjhtqu CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (17602) Hasha881e4c268e13ad20405ae80fca4c36b dee477906e2c92b4c7747029a2409069b9b676ad 63d2e26aa68933bac804050c4e0f0293f1f97e927ad4a79ac9e6a0e8b310fb77
GET /js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gm0hdcmpvq60
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 05:05:57 GMT
expires: Thu, 24 Apr 2025 05:05:57 GMT
cache-control: public, max-age=31536000
age: 55053
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gy1rrumjhtqu CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 582027
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 138522
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.164 | 200 OK | 7.6 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=zfd8hfk6dhkk CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash1c10de955d29db27d5c149805a0d2f33 2e69a3a4333a4894f59965538ad7d562bb53d003 a2c70679f85f1c2ae04db7018631b279a3c2aa95bd4f46eaa5111793e0afc87f
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=zfd8hfk6dhkk
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 24 Apr 2024 20:23:30 GMT
date: Wed, 24 Apr 2024 20:23:30 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gy1rrumjhtqu CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 582027
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 7.4 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
Hash8ef1a9e5c65ea6364fc165801f1b76e1 30bcab355f21d2df8cdf1ecf837ca7294385a423 2371aa9f0c2ce94aa9ffeca7b7324388f418c63e73e39848622e279eed67c393
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 138522
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cedula.com.ve/web/js/bootstrap-select.js | 104.21.63.88 | 200 OK | 216 kB |
URL GET HTTP/3cedula.com.ve/web/js/bootstrap-select.js IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeJavaScript source, ASCII text Size216 kB (216344 bytes) Hash54833b78a19a38ecefd39bfc05bf79a1 43a771b6dd24fdef157fe478aaf6204d58056761 01edfe80606752be1ef61d10183f62d549a0b469fcc9c26e2f778e99863a3486
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/js/bootstrap-select.js HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: application/javascript
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-aad4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYei3oEylsG0pnmU9e9bymAxuKOnZ9z0sbCpl19cugY%2FT16oYp%2FgYodzBmmKWXzq2t7XYzY9IaALd1IcQhJqax%2FTR6ERObsybPlwP6ojmzgA2%2Fu%2B34mXUmX8YZtuQ2na"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb09a4f568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 15:50:55 GMT
expires: Wed, 23 Apr 2025 15:50:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 102756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cedula.com.ve/web/images/nav.png | 104.21.63.88 | 200 OK | 209 kB |
URL GET HTTP/3cedula.com.ve/web/images/nav.png IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Size209 kB (208764 bytes) Hash9d458fe7b4a055fec3cec0091b85120c f51bfefac5dcd28df720e5ecf917c875d6d8d6d0 d6b83663f384a2f2177998769d6bfc0a757e91f88d327520c8ef1b3ae7995cd0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/images/nav.png HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: image/png
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-b91"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b5PRLRrVMTTY7PzL%2F8VtGnSb62%2Bi67kVXDSgrb46GVUADv3nPfh9DVSMaLex86YSNH5g4xOo7qv%2Fjk%2FVlGdIPJPDDSUWywjNtqb1grTX226hI8UDZO5OvO5GfoAS1BIw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb09a54568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 138523
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 15:50:55 GMT
expires: Wed, 23 Apr 2025 15:50:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 102756
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 138523
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gy1rrumjhtqu | 142.250.74.164 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gy1rrumjhtqu IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (36966) Hashc9c669334da43fc77fe2da16688a1b6a f22b0be5791bbe7dd0e5c9118d5bfb4f3676c475 19fe8379793b31a46e14780aae87cbbc73ef4c9924f123766ed9008244834529
GET /recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gy1rrumjhtqu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 20:23:29 GMT
content-security-policy: script-src 'nonce-E6UUAcKsTjWOeMKulqjS1A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cedula.com.ve/web/js/bootstrap.js | 104.21.63.88 | 200 OK | 68 kB |
URL GET HTTP/3cedula.com.ve/web/js/bootstrap.js IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeJavaScript source, ASCII text Hash9cb0532955cf4d4fb43f792ce0f87227 542cfd539f0cad650342c8cab8baf1cdbcd5fea6 41af969ee00e8132a0040094db2b1a79a15b4d9b7e2bb485012970fdf7b5c455
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/js/bootstrap.js HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: application/javascript
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-107da"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxgaRBtFMD4DbQFOFKDCOrt28NDudqHll1IsI%2BQ%2BAi3cCXFzD5opjSHkR160btse%2FeX17LofiC4sqd1YJau1Sz2YG%2F2mGKsmhAHAWVBZ9lgDoKaZq7LLOW7FoDr%2BS7WU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb09a4d568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (7675), with no line terminators Hash7a629ae9d6047f91379419f04197bba7 5643d5c8fb8f2119c14901fdebc0d6d596e2de0a 7a62b0eaed729cfb49fe90c5ae343b41730f6772614a6658fca5bf98ad3dea54
GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 20:23:31 GMT
content-security-policy: script-src 'nonce-z15B-_5iWbJtKpg2CqmJOg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gm0hdcmpvq60 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:54:07 GMT
expires: Thu, 25 Apr 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 581363
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cedula.com.ve/web/js/jquery-1.11.1.min.js | 104.21.63.88 | 200 OK | 96 kB |
URL GET HTTP/3cedula.com.ve/web/js/jquery-1.11.1.min.js IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/js/jquery-1.11.1.min.js HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: application/javascript
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-1762a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2Bbxy7Jy5JG005DOb%2FkQqYcHP4gfwL07QXtsw%2FZX9%2F5jLEGZHIklgy5Yb%2BVXL4nYIp9IbY2CxPyiyWB77A3Xi3n40vPisLXzBB9e25ZnDUde71k94xgCs2z7ZxFAQFyi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb08a46568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Oxygen:400,700 | 216.58.207.234 | 200 OK | 1.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Oxygen:400,700 IP216.58.207.234:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (1500), with no line terminators Hashd55a060e90e712ae8f7e3e55a84a848a 896af77dfb5fe325246419e9e93ad52d8a8a8b38 e844b710eac9569fe2a9b5e69e45619c550d23d36ae1b545ad3ac49d9c3ecb3e
GET /css?family=Oxygen:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 20:23:28 GMT
date: Wed, 24 Apr 2024 20:23:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cedula.com.ve/web/images/footer_icon.png | 104.21.63.88 | 200 OK | 27 kB |
URL GET HTTP/3cedula.com.ve/web/images/footer_icon.png IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typePNG image data, 106 x 106, 8-bit/color RGBA, non-interlaced Hasha0ef15cbe91b5d823cdcf4ed0d1d46f1 e6d51e9cb2c8056990272db62491e603da40c56b eb640d56e90268a4faa612855c14c12518b3f97d45ae1f39f62ffb8c7cabefda
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/images/footer_icon.png HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: image/png
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-67c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dMmOqMAjT56HEACGOwy92P2k03b7qHpndMytF7QAh6OftRwXG4ZwsmJ%2B91M6da0M8bIRkgH8EJHfl6v7xGnETMqtoP3Sjb9Fnpa9RESn80II5jBf97sh5aHGAqkzYmAO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb0aa6b568b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cedula.com.ve/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.21.63.88 | 200 OK | 1.2 kB |
URL GET HTTP/3cedula.com.ve/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeHTML document, ASCII text, with very long lines (1271), with no line terminators Hash40d981045a7516cdadd00e8dccc9c58d 8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3 71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 20:54:07 GMT
etag: W/"6622d9ef-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yRnOmLGdV5ChJlhLjyf9VmDPQgiUeR88DCaUT%2Bo5rbNjeH5ZLew556UMvoBovGeN%2FlSIzkfwPJM0rvCVCruJcKyhU2rBDDl6hJafVZqMHzrDdQhRTdaiBhslPB2ssNMR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8798cfb0aa6d568b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 26 Apr 2024 20:23:28 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (7672), with no line terminators Hash4ad1d1a60161f4ff28a43282c511ffc0 fdc011ae26aeadf87a741b27a7eed21fb4cd9f60 e87150353df94674c4049facb42a3500a92a925cfbdd6647625758a5d719354a
GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 20:23:31 GMT
content-security-policy: script-src 'nonce-UkdhIs13ATDBovnLQH9UUA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (7672), with no line terminators Hashfd5b899c38e0eca79af40e0fce2691fa 344a25c7057011a86cea2190475488591da4a5c6 2543b4356d1f479c04cbb2bd84bef001e9ec19b47f5263502b1dae1ea3684c02
GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 20:23:31 GMT
content-security-policy: script-src 'nonce-dt_umbvdS-0z1qalDFXwhg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cedula.com.ve/web/css/bootstrap-select.min.css | 104.21.63.88 | 200 OK | 5.7 kB |
URL GET HTTP/3cedula.com.ve/web/css/bootstrap-select.min.css IP104.21.63.88:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subjectcedula.com.ve Fingerprint1E:28:86:88:8E:A6:0E:B2:9B:A1:94:20:8A:C9:FE:5F:AC:FD:AF:53 ValiditySat, 13 Apr 2024 23:30:20 GMT - Fri, 12 Jul 2024 23:30:19 GMT
File typeASCII text, with very long lines (5692), with no line terminators Hash44ae34ca181de853f80fd29dfc9df8f7 5a747550f57c31b64ad6adc0424e8dbf1cb828ca 6a3b9aeca61e3825e6e1b6653ab016ecdd00f931e03565b8c315ec99b65e5f50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web/css/bootstrap-select.min.css HTTP/1.1
Host: cedula.com.ve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/web/login.php
Cookie: PHPSESSID=0dfb8dc18d25846963a789d259d0777a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 20:23:28 GMT
content-type: text/css
last-modified: Sun, 12 Apr 2015 15:05:38 GMT
vary: Accept-Encoding
etag: W/"552a89c2-1636"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8oAO6V3%2BsZeSf52JJaLnAv%2FyzpcBIiPzI3RHVTDRIYQzZbEFBz4V0QBcx08e9yBtpKjMQs82yyfMhH8obY8vaJd%2FnCItO51L8YPWKZ3Lg5ha%2BQq0%2B4NDk6fbxSwwTDF3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8798cfb09a4a568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gm0hdcmpvq60 | 142.250.74.164 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gm0hdcmpvq60 IP142.250.74.164:443
Requested byhttps://cedula.com.ve/web/login.php CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (36816) Hash93eae20d493ff1e3a36a9ed7e87bca6e f212514ffc58d0188ee15bc26c1b2e7e37465ca5 1b98fa5b15601e07b34048b39da93d39517f85a1308de66a6cd789df6afb7233
GET /recaptcha/api2/anchor?ar=1&k=6LdeKwQTAAAAAIY0xUJxr3oVP7rJuwgb3y65Km9r&co=aHR0cHM6Ly9jZWR1bGEuY29tLnZlOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&theme=light&size=normal&cb=gm0hdcmpvq60 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cedula.com.ve/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 20:23:29 GMT
content-security-policy: script-src 'nonce-XQM2a8V-tTP5aARrNKlvoQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
0.0.0.0