Domain > colorfix.rhgestor.com.br

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-10	104.26.13.156 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sat, 10 Jan 2026 18:29:45 GMTContent-Type: text/html; charsetUTF-8Content-Length: 6520Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9bbe3dde08ab8beex-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sVMuGufTTh8XXrrVFF922F02x6coSiEPnlFfs8ZKezOd0dq5aJw%2FkMvvtSfe8OzqMRGbvZZOu8WjBxZAT3XGwqmBAHofjkLarndtUyX9WgYpKvHxuvqDEEldaxGlhnILVNTvZuy4tZF8KcA%3D%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Strict-Transport-Security: max-age15552000; includeSubDomainsAccess-Control-Allow-Origin: https://rhgestorstorage.blob.core.windows.net, https://scorm.sistema.rhgestor.com.br, https://*.rhgestor.com.br, https://*.google-analytics.com, https://google-analytics.com, https://google.com, https://graph.facebook.comServer: cloudflareCF-RAY: 9bbe3dde08ab8bee-PDX

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSI+PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCAxIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41NjMgOS41aDIuNzgzem0tMS4wODQgMS40MjdxLjY2IDAgMS4wNTcuMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: colorfix.rhgestor.com.br,cType: managed,cRay: 9bbe3dde08ab8bee,cH: 7LLiTCuaC6J1X17h34L7kt8WtNpkUEYBrZ.aU7nqa_U-1768069785-1.2.1.1-Cetx0_dUn9DmVV0EhwAK6S.AF1jiWMRWLNq42P1tzlOHH_jnGsxpgH6MZF3Q22Xv,cUPMDTk:\/?__cf_chl_tkMQ3Gn7XN3tgXVwAYZ8rI8L6UGstOabVwwEl8Mc53ZGk-1768069785-1.0.1.1-uYK7IyN6MDEcVtF1467h00Jp0pfTBLQeKQNwz1ZuX1c,cFPWv: g,cITimeS: 1768069785,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tkMQ3Gn7XN3tgXVwAYZ8rI8L6UGstOabVwwEl8Mc53ZGk-1768069785-1.0.1.1-uYK7IyN6MDEcVtF1467h00Jp0pfTBLQeKQNwz1ZuX1c,md: CGFMFR6BgcGJA2.k9SJZXUjqRVAs9EiENrgmZXwIgfs-1768069785-1.2.1.1-UxprxF7X51F3ntZplMI4CWxN2t3DzHh87goYkwhtZik8BmKb9vO4DznqCnvPvu934tqR3nf8Ub9I8eWMnRPNnu4acFbTfabKwT.l5Kt_5LV.9NIEEOUJ3aKuZvCSINdnwQOmi8_Bg65X6_GZqMTp1NyOuOootxeoxzPh76NDS0.6y035EbLVW_7zSYR9KQ8SMQnYttHVjs1W1B1YgwdmsRokvmUkQO2wD33Ts4xYGqKNwCQP.tPmd4ZBqJL9LsKM6YIS7LohEtkmi9xYYl53hcytIgQGJuIm8RM7b7ULw0fegf4j7pmae_xHunhcT4IwJUnrXknNV2vOOq48j954JIQZ3jERBatA8t8BEr1s0d4NY8u_neBvjZWGsc97Il_0vdSV6AkTiIvAcEf2kxdEHU.bjjsB.S39Y4qwKts6sHq.sTYrz2T2T0jN4fRYHFujbA7nDcQipdvuT7SMoNdTWwXyDn5VerOhywl1xqzVOJjBUS.M.WRzIbuofnEIf33Y.8U5n5BMjwrPMSYq4a11d.CsGGkqDY87KnAW8uws6s3.XLVwlM3ghtCE2GKG32J0MRiX.avaPAfORsA1F5QiuZpFMNc_nzD89hND2YBNRQFvCo09n.0yZVsU2Ry_nSodISPAdxYqWlh409oEpyfsyUs2wHgzwlYKKamjdXvulyKFxy5NSUthNk3NxqTj_TLmlThniSf8zQFwJ2PLUa6lMaIMgWpzfhNQ6xsqKdCdiwq22Z7O_G9UrjK_FTprJ8zMsubEceW6hybGc4.qA2U7ftyDSojXHMRkzFqOME2mR0oB3mLlUpRZc0Nssx.47zUN6GfJqQB1.W09ni71cSHQDufCdquDP2CH9LBLUu3mwP96utvkv58.6_nIwKZ7NQvd6uS5np6LnIGHteG59vcclg,mdrd: zznjvumIOHM.lFS2klvEiaW1pa7uFO4W8pa9clMlnOI-1768069785-1.2.1.1-RBstPc3z_ire0zpmLZ5aMdt1FvQcQe0CIBh4sCDRn50XPsIe2btNLsemm4xSPEinjZnRwzmN8qT6QcMrwCexUkXuTKRS7D7cSYoAePLPqf9ryp7eCmsX6EjumFBnWD2QVIxVjiN4bAJjxf2QMkJLU4Ypi0L5ES.r8c_raYnEX4k8A.73iL9vY5hO8wP0_iUtwVQItaaDTkqqwI8nhdQqdHxgivG1yk62UVgxBLFOrTSn_eWuYIM3i6mFjNnDjhLYzT9MV5znxoTy.Q9.eMqdY.pYvHzNwiYbPI4JPSlcvXq02SgkD4dJFIr9_ycQEWfGD9Ua2n.8.Q5vWt6YA2N5_xrXJqtConRkfVz3pwFheEZ6JgHTDNlKEnisHl714ALPKjKSqh8iHKy7eCt1s1wORM869tI2ac0D2fDKkAMXkMf9LFtieJ8VYPZMDmIfRFigT.LwZO_DCWAzcjTJg6J22lCUbAnaILWblV21u8THFTCIWvxYlGfgfKe1.3VdCqZUGI.d1hxAqj8EoOatT.l7puuh_NuQiK4IcvmZdCLbZhoThKJj66UOOhu0gagclMbvos0JaYITW52dB5EULXb0V0p.qg9gsiWRDNR_AS7xinvPCZkgJqjLGIzMW4hAfapLKoQqCGE_KTbvsjIR_hdZh_4knMu4EZpYx2rSqGUcBaGco8NfERPIMMWkIulDldSlru8FTx.VbSuNgnntPU2lyJrdnt_BCuYo9coX_oQVcUVWj4.ZYJ3Z6SJ3OcULB96z95zXmLFAchk1KmxixO2qypAvR9os0lOLC8OQJnA7xuIkO.T9rGHvydbKtW4R.GzynV8KP1FvMuXybLTR9dwHKnrXf_EBc2sKaXUGSiScQtIeaR6ZLXhWmdLBkXbAinYcetM.PQhQFGQ6W5LPPwgTmHjmKrRxIAzvQ0k8XvSSvdOnO.eVDHcE9811d6rzwuXZrGiuBS6d0sMtGJxBErE0ut1ba.AdwBgM7dh9rLuv.LTty9NcSR7w4xl1QJ2MZxYwxCaE52SHdqmFaJmQI_gpJILbcuHi_kbl9P6DFz6miqyYMIs7dYcmtm.nA8F2MNswJ05K0zqhnY4VLfnKZ1V6EFRM0KQ6.Y3Bbq61BXNX00MYlQl1pJEn9A0BRJooRkCOt3eNZ_dIsnPxlIFKCa26FJDT4V8zela25nyzNNbTYeSPlm7dpfV2TX.NHjmFnJZpVUUEbs7Dy41b7zxmKy4qnCr7nlp712zKFzEfH3zVDPTVbdAfWmffxjDVgHRNUtZz3hqW67CIz0MXF3aRvkFAfwWJ2MCXHmfoP_D6xjUcYj99xdqmM3AEJX6E1bsAG6wHD4MNwfrSJbsNFZSSKDsmDwqZhQZ_86JVhViazxS___4eJifgKJns8kMwGmzWkQUBs2F94QeJRpCB3SeSB13pCPCZHrXTvE3BHzUUDj14YW5MY_1Jhmn3PpcZiwhK25jDmzqBYdehfaRtY10tl4vEoyznHTM9FBAUZZpOb.nO.5.X0mEEHyK8MNvX_ph_AMrhJXXvMNQ43IFbLn.fN_wPnkQzDIvnojZnAk_Qe40QcfzJA4dNbZZ6dVJ1BFsXsLsLulu1R4W7RCxrkIOmnd2nkH_61AOU0a5qoX7h7WlUHsbckiaOiakW8_EbGQOexf9QkX1TNUfB5ff4UXJxfwKXs9KU0P23aAL8OAuJiqvhuOe1BguEhyFCRi3nTodL_jKuY6Tg2lNxy3GbyH8CkYDgeaoU_AWLT_bQpUacmjx9Yv_.VxBYYfpzO1LYOjNHRpQ8bPJ4pEDcstGBr43z2yQitn64VWEkVZy.pfrhYidVLpl1uR.QfwZjEddWiCqKsA5gz7HY63P1WcoK53FW4gUFBmbf4PxEPrDuTNrHsvO_w_6YG8OSNEGnfrCBGtAcXrh0Sfrd093SjaX_Hg1E4ggNkcTngDhz9eeaqjuhIES_edJg3FP8HNjeiAl9adHMa.akLvA7ebu8an4wSW.XoFLffA,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray9bbe3dde08ab8bee;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tkMQ3Gn7XN3tgXVwAYZ8rI8L6UGstOabVwwEl8Mc53ZGk-1768069785-1.0.1.1-uYK7IyN6MDEcVtF1467h00Jp0pfTBLQeKQNwz1ZuX1c+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

Subdomains

Date	Domain	IP
gruposimecpinda.rhgestor.com.br	2025-12-15	104.26.12.156
aquecimentodeploy.sistema.rhgestor.com.br	2026-01-04	172.67.69.165
hospitalematernidadesantabarbara.rhgestor.com.br	2025-12-15	20.206.176.1
brzinfra.rhgestor.com.br	2026-01-06	20.206.176.1
gammadistribuidora.rhgestor.com.br	2025-08-01	104.26.12.156
cotrasa.rhgestor.com.br	2025-08-01	172.67.69.165
hococ.rhgestor.com.br	2026-01-05	172.67.69.165
clsqualidade.rhgestor.com.br	2025-10-27	104.26.13.156
apisecure.rhgestor.com.br	2026-01-05	104.26.12.156
baduchi.rhgestor.com.br	2026-01-04	104.26.13.156
ativoscapital.rhgestor.com.br	2025-08-02	172.67.69.165
ilsabrasil.rhgestor.com.br	2025-10-24	20.206.176.1
grupoimam.rhgestor.com.br	2025-08-01	104.26.12.156
exitotm.rhgestor.com.br	2025-12-17	104.26.13.156
grupominipreco.rhgestor.com.br	2026-01-06	172.67.69.165
comunicado.rhgestor.com.br	2025-12-15	172.67.69.165
agrocerrado.rhgestor.com.br	2026-01-04	20.206.176.1
gmpromo.rhgestor.com.br	2025-08-01	104.26.12.156
globalship.rhgestor.com.br	2025-09-25	172.67.69.165
npegroup.rhgestor.com.br	2025-06-25	172.67.69.165
doutoremcuidar.rhgestor.com.br	2025-08-01	104.26.12.156
abecker.rhgestor.com.br	2025-09-27	172.67.69.165
frigocenter.rhgestor.com.br	2025-12-11	20.206.176.1
ccpr.rhgestor.com.br	2025-08-26	104.26.12.156
aspr.rhgestor.com.br	2025-10-20	104.26.13.156
colorminas.rhgestor.com.br	2025-08-27	104.26.12.156
hsbs.rhgestor.com.br	2026-01-10	172.67.69.165
lms.solides.rhgestor.com.br	2025-08-01	104.26.13.156
empreendimentosms.rhgestor.com.br	2026-01-05	172.67.69.165
grupoclaw.rhgestor.com.br	2025-10-22	172.67.69.165
colorfix.rhgestor.com.br	2026-01-10	104.26.13.156
eduzz.rhgestor.com.br	2025-12-25	172.67.69.165

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > colorfix.rhgestor.com.br

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains