| www.visaprepaidprocessing.com/content/PRC384/CP384-T03-019/_Images/logo.png | 104.18.11.147 | 200 OK | 7.7 kB |
URL GET www.visaprepaidprocessing.com/content/PRC384/CP384-T03-019/_Images/logo.png IP 104.18.11.147:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerCLOUDFLARE, INC. Subjectwww.visaprepaidprocessing.com Fingerprint58:E0:01:98:C4:E9:69:CB:56:5D:F2:20:80:03:9A:3D:8A:8C:79:29 ValidityMon, 28 Oct 2024 02:44:45 GMT - Tue, 28 Oct 2025 02:51:24 GMT
File typePNG image data, 250 x 25, 8-bit/color RGBA, non-interlaced Hash62b1cd8a110706260023cd91d7316096 ec98871b14975f225946431a0cb0fdb27fba35e1 ad62eb85667532488d032273c196c7ea1c10e0897223c4b66cd38b8c5e5215a4
GET /content/PRC384/CP384-T03-019/_Images/logo.png HTTP/1.1
Host: www.visaprepaidprocessing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 03 Apr 2025 12:15:24 GMT
Content-Type: image/png
Content-Length: 7719
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 14:27:22 GMT
ETag: "d8d87ca86483d51:0"
X-OPNET-Transaction-Trace: a2_f96448bf-5765-4a43-aabf-66756e9927ac-16000-599487
Strict-Transport-Security: max-age=3153600; includeSubDomains
CF-Cache-Status: HIT
Age: 3687
Expires: Thu, 03 Apr 2025 16:15:24 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Set-Cookie: __cf_bm=MbMFBFedrExocO98zw6oQD_FkArVq5DamHIpJCx4vZ0-1743682524-1.0.1.1-BBnkoLMHHgESlPFE5pgrJPT9tjtYAdujxeNZAmZ_h7vMSIxt.cCtvkpebyADdMz.plNyvhOoaDnn4.xY_B49n6Iu19u6dea9Dr3cxKN03N4; path=/; expires=Thu, 03-Apr-25 12:45:24 GMT; domain=.visaprepaidprocessing.com; HttpOnly; Secure; SameSite=None
__cfruid=ff0551c199529b8df80ed5554c0d8e8ea23298ea-1743682524; path=/; domain=.visaprepaidprocessing.com; HttpOnly; Secure; SameSite=None
_cfuvid=agSI2V6wIxTBOkCKfjBqE5Niw2brexeF97L15v4dQxE-1743682524503-0.0.1.1-604800000; path=/; domain=.visaprepaidprocessing.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 92a87dc1e84b56b1-OSL
|
|
| www.visaprepaidprocessing.com/content/PRC384/_images/logo.png | 104.18.11.147 | 200 OK | 7.7 kB |
URL GET www.visaprepaidprocessing.com/content/PRC384/_images/logo.png IP 104.18.11.147:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerCLOUDFLARE, INC. Subjectwww.visaprepaidprocessing.com Fingerprint58:E0:01:98:C4:E9:69:CB:56:5D:F2:20:80:03:9A:3D:8A:8C:79:29 ValidityMon, 28 Oct 2024 02:44:45 GMT - Tue, 28 Oct 2025 02:51:24 GMT
File typePNG image data, 250 x 25, 8-bit/color RGBA, non-interlaced Hash4bdaebff69d7ccb9aa4594cde4a3993d 9bc8a3873ff1d569e98bf65d1794615f44e84ccc 880607ae689c1b591ea1162ac16e6ad0b2ec68e80bb86b5e9f86bce6c0e274a7
GET /content/PRC384/_images/logo.png HTTP/1.1
Host: www.visaprepaidprocessing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 03 Apr 2025 12:15:24 GMT
Content-Type: image/png
Content-Length: 7719
Connection: keep-alive
Last-Modified: Thu, 03 Sep 2020 15:21:41 GMT
ETag: "80709aec582d61:0"
X-OPNET-Transaction-Trace: a2_3a5f944e-648d-4886-80ef-db2bc2a0f756-47888-94265
Strict-Transport-Security: max-age=3153600; includeSubDomains
CF-Cache-Status: HIT
Age: 3687
Expires: Thu, 03 Apr 2025 16:15:24 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Set-Cookie: __cf_bm=F.Et4_CH1QfgTo8mItyvtpR.23Giyjg0QrPjIr4kUQU-1743682524-1.0.1.1-xpJMcEBGIuLE7aSjaiwUCOcrSiYo9bkTfKtRN2IYmAGqoadZRU0l2bReVLAIX15aLSW8tutBaVOTdKn9NgNQdDcycZLROFXqbvhsrNE05HY; path=/; expires=Thu, 03-Apr-25 12:45:24 GMT; domain=.visaprepaidprocessing.com; HttpOnly; Secure; SameSite=None
__cfruid=ff0551c199529b8df80ed5554c0d8e8ea23298ea-1743682524; path=/; domain=.visaprepaidprocessing.com; HttpOnly; Secure; SameSite=None
_cfuvid=6zKvUpb7P7LcmUCjmInk.bsi2aixKL_c42vUuCHjRHE-1743682524443-0.0.1.1-604800000; path=/; domain=.visaprepaidprocessing.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 92a87dc17fa90b31-OSL
|
|
| kit.fontawesome.com/585b051251.js | 104.18.40.68 | 403 Forbidden | 9 B |
URL GET kit.fontawesome.com/585b051251.js IP 104.18.40.68:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerGoogle Trust Services Subjectfontawesome.com FingerprintFC:32:90:2B:CD:63:94:32:F0:48:71:9F:50:A4:58:6D:8F:0C:D0:4D ValidityThu, 27 Feb 2025 21:23:34 GMT - Wed, 28 May 2025 22:23:32 GMT
File typeASCII text, with no line terminators Hash722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gi.globalseven.pt
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 03 Apr 2025 12:15:25 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GDLOBKE9w06In8j0pq_B
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 92a87dc468dd56c0-OSL
X-Firefox-Spdy: h2
|
|
| gi.globalseven.pt/edd/index4.html | 0.0.0.0 | | 0 B |
URL User Request GET gi.globalseven.pt/edd/index4.html IP 0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Bank of America |
GET /edd/index4.html HTTP/1.1
Host: gi.globalseven.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| code.jquery.com/jquery-3.1.1.min.js | 151.101.130.137 | 200 OK | 87 kB |
URL GET code.jquery.com/jquery-3.1.1.min.js IP 151.101.130.137:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030) Hashe071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Apr 2025 12:15:24 GMT
age: 4917125
x-served-by: cache-lga21947-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 137550
x-timer: S1743682524.323944,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.3.1.js | 151.101.130.137 | 200 OK | 272 kB |
URL GET code.jquery.com/jquery-3.3.1.js IP 151.101.130.137:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Size272 kB (271751 bytes) Hash6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gi.globalseven.pt
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Apr 2025 12:15:24 GMT
age: 1991514
x-served-by: cache-lga21980-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 1984
x-timer: S1743682524.386724,VS0,VE0
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/585b051251.js | 104.18.40.68 | 403 Forbidden | 9 B |
URL GET kit.fontawesome.com/585b051251.js IP 104.18.40.68:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerGoogle Trust Services Subjectfontawesome.com FingerprintFC:32:90:2B:CD:63:94:32:F0:48:71:9F:50:A4:58:6D:8F:0C:D0:4D ValidityThu, 27 Feb 2025 21:23:34 GMT - Wed, 28 May 2025 22:23:32 GMT
File typeASCII text, with no line terminators Hash722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gi.globalseven.pt
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 03 Apr 2025 12:15:24 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GDLOBGX_-6uIV7NNtoSh
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 92a87dbe899d56c0-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.25.14 | 200 OK | 19 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP 104.17.25.14:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gi.globalseven.pt
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Apr 2025 12:15:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
cf-ray: 92a87dbfd8165688-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1109771
expires: Tue, 24 Mar 2026 12:15:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJ5gmOXelKUzFIq0RzpkUdfeLfrp0bCyNuqrevYWtQ6OG1Hp%2Fna7QjSeYHDekMxISzJYsIjfDcux1Feg3Fh%2Bjqo4Att3xkQZ2SxHihlgsisnZB1Ki6D%2BH8kSVsx5%2FKSM%2BXA5idY5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.130.137 | 200 OK | 70 kB |
URL GET code.jquery.com/jquery-3.2.1.slim.min.js IP 151.101.130.137:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gi.globalseven.pt
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Apr 2025 12:15:24 GMT
age: 2006363
x-served-by: cache-lga21963-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 38, 13742
x-timer: S1743682524.115207,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.170 | 200 OK | 86 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.170:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 30 Mar 2025 20:47:35 GMT
expires: Mon, 30 Mar 2026 20:47:35 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 314869
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 49 kB |
URL GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.10.207:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint90:B1:98:4A:7E:D6:37:CF:9B:DC:7D:67:82:58:17:6C:F7:F6:11:DE ValiditySun, 16 Mar 2025 01:14:49 GMT - Sat, 14 Jun 2025 02:14:23 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gi.globalseven.pt
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 03 Apr 2025 12:15:24 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/22/2025 12:19:15
cdn-proxyver: 1.22
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 1
cdn-requestid: a8faf6ede40f338e1bdd39ccc1844084
cdn-cache: HIT
cf-cache-status: HIT
age: 6634
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 92a87dbfce1456b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gi.globalseven.pt/edd/index4.html | 185.2.5.12 | 200 OK | 221 kB |
URL User Request GET gi.globalseven.pt/edd/index4.html IP 185.2.5.12:80
ASN#203461 Register S.p.A.
File typeHTML document, ASCII text, with very long lines (385), with CRLF line terminators Size221 kB (221377 bytes) Hash46c31833998190576a1de701093b1f1d 40c41590293dc38ba91ea7da275045b60cab0b58 d0e24c1d07971179486b07900c5c00cc84bff117317493f3efeed0744cd3f1d4
Analyzer | Verdict | Alert | OpenPhish | phishing | Bank of America |
GET /edd/index4.html HTTP/1.1
Host: gi.globalseven.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 03 Apr 2025 12:15:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 26 Apr 2022 02:24:26 GMT
ETag: W/"360c1-5dd8564422a80"
Server-Timing: rt;dur=0.014;desc=Process-Time
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css?family=Archivo+Narrow&display=swap | 142.250.74.10 | 200 OK | 1.4 kB |
URL GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap IP 142.250.74.10:443
Requested byhttp://gi.globalseven.pt/edd/index4.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File typeASCII text, with very long lines (1377), with no line terminators Hasheeb4a21f34b25af30ec1728c4f17ab8e 0786a5914ddabf65fafc54c1af8d8f5f984048eb 177ba00a009c8ac81c7d7b4f084e019354cd1ff28fc0c988de4519e18c1ecc78
GET /css?family=Archivo+Narrow&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 03 Apr 2025 12:15:24 GMT
date: Thu, 03 Apr 2025 12:15:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gi.globalseven.pt/favicon.ico | 185.2.5.12 | 200 OK | 14 B |
URL GET gi.globalseven.pt/favicon.ico IP 185.2.5.12:80
ASN#203461 Register S.p.A.
Requested byhttp://gi.globalseven.pt/edd/index4.html
File typeASCII text, with no line terminators Hash3be7b8b182ccd96e48989b4e57311193 78fb38f212fa49029aff24c669a39648d9b4e68b d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed
GET /favicon.ico HTTP/1.1
Host: gi.globalseven.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gi.globalseven.pt/edd/index4.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 03 Apr 2025 12:15:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.2.34
Server-Timing: rt;dur=0.012;desc=Process-Time
Content-Encoding: gzip
|
|