Domain > gestao.meuelevestage.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-13	20.119.144.13 (ClassC)

HTTP/1.1 301 Moved PermanentlyContent-Length: 156Content-Type: text/html; charsetutf-8Date: Mon, 13 Jan 2025 06:10:40 GMTAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, AcceptAccess-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETEAccess-Control-Allow-Origin: *Location: https://gestao.meuelevestage.com/Set-Cookie: ARRAffinity261d951d69f0428930fe62a6cf964d040d0ec192dcfa9759226384e5a10b87f8;Path/;HttpOnly;Domaingestao.meuelevestage.comContent-Security-Policy: base-uri self;                 default-src self https://platform.notifications-homolog.totvsmpn.com.br https://nfe.portoalegre.rs.gov.br https://nfe-web.portoalegre.rs.gov.br;                 img-src data: https: https://mpn.azureedge.net http://cdnfly01.azureedge.net https://cdnmpn.blob.core.windows.net https://thexback-dev.totvshotelaria.com;                 object-src self blob: data:;                 frame-src data: https://docs.google.com https://nfe.portoalegre.rs.gov.br https://mpn.azureedge.net https://nfe-web.portoalegre.rs.gov.br;                 connect-src self wss://platform.notifications-homolog.totvsmpn.com.br wss://widget-mediator.zopim.com https://platform.notifications-homolog.totvsmpn.com.br https://ekr.zdassets.com https://totvssuporte.zendesk.com https://getmyip.cloudtotvs.com.br https://static.userguiding.com wss://ws.hotjar.com https://content.hotjar.io https://vc.hotjar.io https://user.userguiding.com https://metrics.hotjar.io https://www.gstatic.com https://unpkg.com https://widget-mediator.zopim.com/;                 media-src https://static.zdassets.com;                 script-src self unsafe-eval unsafe-inline https://mpn.azureedge.net https://assets.zendesk.com https://static.zdassets.com https://widget-mediator.zopim.com  https://cdnjs.cloudflare.com https://rawgit.com https://static.hotjar.com https://script.hotjar.com https://static.userguiding.com https://rawgit.com https://script.hotjar.com https://www.googletagmanager.com https://www.gstatic.com;                 style-src self unsafe-inline https://mpn.azureedge.net https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.gstatic.com;                 font-src self data: https://fonts.gstatic.com https://fonts.googleapis.com https://script.hotjar.com https://unpkg.com https://mpn.azureedge.net;                 upgrade-insecure-requests;

head>title>Document Moved/title>/head>body>h1>Object Moved/h1>This document may be found a HREFhttps://gestao.meuelevestage.com/>here/a>/body>

Port 443

HTTP/1.1 302 FoundContent-Length: 145Content-Type: text/html; charsetutf-8Date: Mon, 13 Jan 2025 06:10:40 GMTAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, AcceptAccess-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETEAccess-Control-Allow-Origin: *Cache-Control: privateLocation: /Account/Login?ReturnUrl%2fSet-Cookie: ARRAffinity261d951d69f0428930fe62a6cf964d040d0ec192dcfa9759226384e5a10b87f8;Path/;HttpOnly;Secure;Domaingestao.meuelevestage.comSet-Cookie: ARRAffinitySameSite261d951d69f0428930fe62a6cf964d040d0ec192dcfa9759226384e5a10b87f8;Path/;HttpOnly;SameSiteNone;Secure;Domaingestao.meuelevestage.comContent-Security-Policy: base-uri self;                 default-src self https://platform.notifications-homolog.totvsmpn.com.br https://nfe.portoalegre.rs.gov.br https://nfe-web.portoalegre.rs.gov.br;                 img-src data: https: https://mpn.azureedge.net http://cdnfly01.azureedge.net https://cdnmpn.blob.core.windows.net https://thexback-dev.totvshotelaria.com;                 object-src self blob: data:;                 frame-src data: https://docs.google.com https://nfe.portoalegre.rs.gov.br https://mpn.azureedge.net https://nfe-web.portoalegre.rs.gov.br;                 connect-src self wss://platform.notifications-homolog.totvsmpn.com.br wss://widget-mediator.zopim.com https://platform.notifications-homolog.totvsmpn.com.br https://ekr.zdassets.com https://totvssuporte.zendesk.com https://getmyip.cloudtotvs.com.br https://static.userguiding.com wss://ws.hotjar.com https://content.hotjar.io https://vc.hotjar.io https://user.userguiding.com https://metrics.hotjar.io https://www.gstatic.com https://unpkg.com https://widget-mediator.zopim.com/;                 media-src https://static.zdassets.com;                 script-src self unsafe-eval unsafe-inline https://mpn.azureedge.net https://assets.zendesk.com https://static.zdassets.com https://widget-mediator.zopim.com  https://cdnjs.cloudflare.com https://rawgit.com https://static.hotjar.com https://script.hotjar.com https://static.userguiding.com https://rawgit.com https://script.hotjar.com https://www.googletagmanager.com https://www.gstatic.com;                 style-src self unsafe-inline https://mpn.azureedge.net https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.gstatic.com;                 font-src self data: https://fonts.gstatic.com https://fonts.googleapis.com https://script.hotjar.com https://unpkg.com https://mpn.azureedge.net;                 upgrade-insecure-requests;

html>head>title>Object moved/title>/head>body>h2>Object moved to a href/Account/Login?ReturnUrl%2f>here/a>./h2>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gestao.meuelevestage.com

Is this malicious?

DNS Resolutions

Port 80

Port 443