Domain > cotrasa.rhgestor.com.br

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-06	104.26.13.156 (ClassC)
2025-08-01	172.67.69.165 (ClassC)

HTTP/1.1 403 ForbiddenDate: Fri, 01 Aug 2025 09:22:43 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer(),autoplay(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()Referrer-Policy: same-originServer-Timing: chlray;desc968445d0b8f7503fX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Frame-Options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTAccess-Control-Allow-Origin: https://rhgestorstorage.blob.core.windows.net, https://scorm.sistema.rhgestor.com.br, https://*.rhgestor.com.br, https://*.google-analytics.com, https://google-analytics.com, https://google.com, https://graph.facebook.comReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?scoWm2f1jpA8AcUEj%2FFRC6UZYTSkSMvnlciaqY7Bxw5FshmVIsyBIVLwzNhj6r1Wq8WC7bBaEOnAX7M59bW7tN25i2GPV1qgbrn5dF6iPmr9JgRqiJXM%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 968445d0b8f7503f-PDX

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: cotrasa.rhgestor.com.br,cType: managed,cRay: 968445d0b8f7503f,cH: CroCiOD6.9H7aXPgZlFgXei7K9NffvflHJXRq6Bh59I-1754040163-1.2.1.1-O2NktaUVt1SjPlkxPrthIZefJ1SzL3MBiHJC27BDZcPZmOwyM_afPZvhb1LDwmVC,cUPMDTk:/?__cf_chl_tknCt7uSsy.rpPTjEgkSp5LDjTyDe43f9gscbKvhM6M9M-1754040163-1.0.1.1-I9xlxjIyryPDQ7W7Y5M724ZeYEKrSsL4Nobjn82jpdw,cFPWv: b,cITimeS: 1754040163,cTplC:0,cTplV:5,cTplB: cf,fa:/?__cf_chl_f_tknCt7uSsy.rpPTjEgkSp5LDjTyDe43f9gscbKvhM6M9M-1754040163-1.0.1.1-I9xlxjIyryPDQ7W7Y5M724ZeYEKrSsL4Nobjn82jpdw,md: XJtWMecG5d9wpQxzYHBs9gWurKdzQdg2xTJixTaiU0M-1754040163-1.2.1.1-6CB2DD6gDDX_tdtIuBPD4gppqa6DRUviLyn9d36QK28_omD_ENbbCSVFBV8J3Q5M2cOx_Of3L8KHVEqetH7eHbdky4pKsN2aB3M.yOCbrl5I75TthiqB2LgM35h1luJQDMGuEuO2cOgPs617rPwt.KnamitKG6I6F0I2IETtOCa1gAkZZsRVxZ0hVKT.v62gE4_romaeZ61..vOjpOXcs7XOwgCID67uWVEJv7cqO5MEyowH6e8_jgWtJeQhBmbh_upLGJdXVjpdx.QILrUKMdBd0ntc0PnyOfoQfu8_oVvkNLN0S2eEiR9caq7Q5Tkx1V9pSJH9uxJBmhTQZ1E9UC3TquinPOUTF3kK8K0uAlvIMn7kHRzLPkNIGYGU01cy4BBpBahbTWW6My32iCHtCAkZ9E06qGe0HPl6cbfRFvsz3Pgn4hgvU5Z9vCQ1mY6hPSdt2_4E1mJff6S9NHlNAaFq2ATceN7zuzrpaa4BDyKxbt_ECkTQRutAmbcUcvvuXUzZVaozNOjutq8CcDmsB0xts1elQvJxlAnxmekMGPTRa8TPkmrRv2pq0w4A.B0Ycv2WPTUsUF7IAO7xijjuaHMZzE1nz4j7V.PQC6nm6JU_9rt8mlvhf67WCHrmngkfUXaevvc99lYTYosNUpIT4h93cXqM54SNO4Y6gPVrX7wbccDfT.sqiDc0KM2aLa0LSw3BpknFzhCJUi6.UU0E68OG5lytqJ2_8qwlFFkCjgA51XXdL_oYV7fo7bb9yHri22jGWEWeULIrrFnBvLg316OdkprMJ3eSl2UcNChz7l2.H.VJNOretEUy1kqj.K9iND_pQ5X5OaHPMMbm6BEAwloVXV1Z_xj0KGUKG1hPbeHS1W.wp2UwV8eUtw7jpE5RLlqya1sY.4.5J6dd_mWRbkaqo9ZGL54dzdW._86VK_hM.Hli4I_jeicZJ6WQge_Gy.D1xl9.Xpf5t5pddCDBzsQ3J_5ieFJCpfqQDul7wU26_f5Hew_GpzZ5imAdoQi7G6tSK.XVhymmoMyS0qgUJF0bh87DEy4w3ZvMuGaPoksbVYk5CO_fLAUXY2WuQwsX,mdrd: ,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray968445d0b8f7503f;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,/?__cf_chl_rt_tknCt7uSsy.rpPTjEgkSp5LDjTyDe43f9gscbKvhM6M9M-1754040163-1.0.1.1-I9xlxjIyryPDQ7W7Y5M724ZeYEKrSsL4Nobjn82jpdw+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenDate: Fri, 01 Aug 2025 09:22:44 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer(),autoplay(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()Referrer-Policy: same-originServer-Timing: chlray;desc968445d11fde1687X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Frame-Options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTStrict-Transport-Security: max-age15552000; includeSubDomainsAccess-Control-Allow-Origin: https://rhgestorstorage.blob.core.windows.net, https://scorm.sistema.rhgestor.com.br, https://*.rhgestor.com.br, https://*.google-analytics.com, https://google-analytics.com, https://google.com, https://graph.facebook.comReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sfiS227h2lB51TG6%2B4oNB7vLEFzgds4sNlintcAJt5prS9CEuqOEeEjrXJJeETE0n8Y1FjPUtPOpOEZhirWZ7b%2BD8w4u%2BjP40jROOlTC9tgg9qXkc}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 968445d11fde1687-PDX

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: cotrasa.rhgestor.com.br,cType: managed,cRay: 968445d11fde1687,cH: I8uzwa9alQtpjKgXCNmo8amaj09Ds4wKQt9IADKViuY-1754040164-1.2.1.1-c7EvNpRNDGwVO0e2BLFvgIlmLNYuecIWu9_6PtXdOcuUaCk4ZTSmfdKNne1_de8v,cUPMDTk:/?__cf_chl_tkwbkxW2AUs.5ffwY4NHVcRkhsn.EX.XsSsqNq0MPp6_0-1754040164-1.0.1.1-Bi0cSrrqQPvk_.7shk1F_v7c6Xk78jecqvcwN_G2Ra8,cFPWv: b,cITimeS: 1754040164,cTplC:0,cTplV:5,cTplB: cf,fa:/?__cf_chl_f_tkwbkxW2AUs.5ffwY4NHVcRkhsn.EX.XsSsqNq0MPp6_0-1754040164-1.0.1.1-Bi0cSrrqQPvk_.7shk1F_v7c6Xk78jecqvcwN_G2Ra8,md: Tz3W6u9cTu05jHmBpXvMXb.DV5xy3JcZ6j3KCZMrVk0-1754040164-1.2.1.1-9OHz.X7KPdGu_OCl.nXulyc.9X_JZjBFsC45AR33L9zCSz3NV5mKgiRazE.zOOw87vsZTFcFOFS3LfwwWpSBW4o4tXVEIe3_Ur0CNyb63BdhRdPpImdwZvmKOdHwXYMgF3LxkJAuHk5_p3U_CR2VEin08bSfVoi..D3oiiC0_YAAsHOzMLHKjrZXu7BSC76FKnjFuE6iyFGz2LPEAuMrohGycHWKPC8jy_jsx.EoA8ZHI66m7tTxlu1Sk6jf6jnlWoCqi3TyGK8riwdk0wqe3oU6EjpOPPAhlJOGt38vHvUjHodRGSnPtCHlafSPlG4TgMX5KbQL3_kuXJqbspfqkXnnWybR5e1GRffk2i7IswSTq1_fczVkqANOm17P0moyWkUnved8MVfSClotpZWheqyS.mFCiptWH3fbYq9uJg3Abj2.n0NRACRdmVGoUahV6Q_SagjekPJx_NJsiseDbdoOfpdUOmiZGM35KxENc2vmz_Zd9psyM_qNvd4RyWWbc6wS4HeXJBIpXQdWsdO087WNxLgINlbiEyL1tOSPbjBX9UcBDYQNUh0gPbokhMgTfXLNjC7oBuep7LeMRnl1NzRK1bGIzUFpohN_jTFgBRXqg9ERJmnq_zAVU3aPHLHL_3fPhdN0uM6fj7HkB468LOiqoKclmLB3P9AKeR8HqU5L1YkgkcIopZNMcH1uldmx92WhpDgbDlNcINA3VE3C14oE8DGs6CRCgt9pp8yPKvDNh5nAX1HDAxDV.nxvAE4hyUUKy0wHJ5HiVPIv4XgVL0Mioa8mbiTEiIyuqF3PbNdcbYUL5bt.8XzP8.8tC5lrGQLi5Mrf9rs2YsKcpMSqWilS8kkyVOEkYnFcYZDsK1gwBmDineOf6f7UaVdCs2.HOGqKsnTa55C6tUufrsOy9goBBc8JSwe.y4VSYRcb0n4r383ESe3vKvWBi71By8DoL843lLUke1ZzNHFdF5EBqDAZ8XmrCy3NaTBTJ7RNgZhAJq7P6P0y2XFCq43xmCSsNbBf68KF4ANBR8IVf7T2Yf4ReK3w0wSqlwYIJPlqICQkl.fLzXO6yaI8GZXWH_GlyU8.GEfoGcop.QdxC7MRRw,mdrd: ,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray968445d11fde1687;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,/?__cf_chl_rt_tkwbkxW2AUs.5ffwY4NHVcRkhsn.EX.XsSsqNq0MPp6_0-1754040164-1.0.1.1-Bi0cSrrqQPvk_.7shk1F_v7c6Xk78jecqvcwN_G2Ra8+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cotrasa.rhgestor.com.br

Is this malicious?

DNS Resolutions

Port 80

Port 443