Domain > mesada-dev.provi.com.br

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-05-31	104.26.9.233 (ClassC)
2025-05-10	172.67.198.158 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Sat, 10 May 2025 10:43:21 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveCache-Control: max-age3600Expires: Sat, 10 May 2025 11:43:21 GMTLocation: https://mesada-dev.provi.com.br/Report-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?svTk%2F3AjtaBgnQLCZfbo%2B88tKZ6%2Buphqmch41kZEojQufi9GfHJ11MOzUjzRC0Fk81WJirc8MX%2FRw9pZbeoBXEyQeQn2vCON11A%2BZ%2B4k6dgB%2BB%2BN%2FKsLEflj7UAXOBfWRrlZr42ZmpkgrRQ%3D%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}expect-ct: max-age86400, enforcereferrer-policy: same-originx-content-type-options: nosniffx-frame-options: SAMEORIGINx-xss-protection: 1; modeblockServer: cloudflareCF-RAY: 93d8d5c9cc18503f-PDXalt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt8162&min_rtt8162&rtt_var4081&sent1&recv3&lost0&retrans0&sent_bytes0&recv_bytes62&delivery_rate0&cwnd93&unsent_bytes0&cid0000000000000000&ts0&x0

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>cloudflare/center>/body>/html>

Port 443

HTTP/1.1 302 FoundDate: Sat, 10 May 2025 10:43:21 GMTContent-Type: text/htmlContent-Length: 143Connection: keep-aliveServer: cloudflareAccess-Control-Max-Age: 1200Cf-Ray: 93d8d5ca3b665913-PDXAccess-Control-Allow-Credentials: trueCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTLocation: https://principia-net.cloudflareaccess.com/cdn-cgi/access/login/mesada-dev.provi.com.br?kidce4757c9e2f3eea48db741de4149d14e69663c0470163fb9290d5833b46912ad&redirect_url%2F&metaeyJraWQiOiI5MGEzMzM1ZWExYWE5NGIyODlkODU2MWRhM2ZlZjliOTg1ODUyYWU2ODJmNWI2NzVkMTE1NDM5NjczYmVkZTI5IiwiYWxnIjoiUlMyNTYiLCJ0eXAiOiJKV1QifQ.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.SaBcvigkToSFU-RHxbXhBEBT5Z4hW9ALyhF065_NWOuNXYkSovd_inQ4zOWpcG2QwN2vrvqdYAAvx7-asAnuFbzXsfcdOyApFs5vs7csN8Fz3O5tn0gLqbMvzuwhbgA_VikIHNOAbbxQVA4sGl1IcgCTRvxdn3PJAhQKVbqGsJ83mR79UyLg6cVCOtEcllVFulcJ3upmxG7q6ebAJ6UmqlfR540t2jcgFbeyQl6EwcqSr_ZseiEr8Dea-Fh4AO094B3hgsbVTirwp5H1g36CG12aD-_N-1ihZGmP_8jbr-GJScN7WJO1_NXsF09xFL_Q85upEHjD3Kzs3YP0eRJeRwReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sd7jWAOuXV07l80u%2BeZkaCsEvjPZQSA23Nrx1Zw7Y7LFazlbyMtZppbYQmYe85pwlyLA9pS3RRMoQibIzAHyMUoz9%2BM%2FkGZZYMbOA8NV0GcYTp%2F6mEjR%2Fru1di6eq9N3DDvSyg9aImIuGjQ%3D%3D},group:cf-nel,max_age:604800}Nel: {success_fraction:0,report_to:cf-nel,max_age:604800}Strict-Transport-Security: max-age0Expect-Ct: max-age86400, enforceReferrer-Policy: same-originContent-Security-Policy: frame-ancestorsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Xss-Protection: 1; modeblockSet-Cookie: CF_AppSessionn69e140183b2066c7; HttpOnly; Secure; Path/; ExpiresSun, 11 May 2025 10:43:21 GMTalt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt8375&min_rtt8210&rtt_var2525&sent4&recv6&lost0&retrans0&sent_bytes2853&recv_bytes734&delivery_rate352740&cwnd69&unsent_bytes0&cidb9346f5350fca3c5&ts38&x0

html>head>title>302 Found/title>/head>body>center>h1>302 Found/h1>/center>hr>center>cloudflare/center>/body>/html>

Subdomains

Date	Domain	IP
avalista-v1.provi.com.br	2025-04-01	172.67.198.158
avalista-staging-v1.provi.com.br	2024-09-09	104.21.21.125
provi2.provi.com.br	2025-04-01	66.33.60.130
avalista-v2.provi.com.br	2025-04-01	172.67.198.158
avalista-dev-v2.provi.com.br	2025-01-04	104.21.21.125
pay2.provi.com.br	2025-04-08	172.67.198.158
indica.provi.com.br	2024-12-02	172.67.198.158
meta.provi.com.br	2025-01-19	18.211.46.16
ms-wirecard.provi.com.br	2025-01-22	172.67.198.158
dashboard.provi.com.br	2025-04-01	172.67.198.158
metabase.provi.com.br	2025-04-10	104.21.21.125
site.provi.com.br	2025-04-02	172.67.198.158
pay2-staging.provi.com.br	2025-04-01	104.21.21.125
mesada-staging.provi.com.br	2025-04-01	172.67.198.158
isa-staging.provi.com.br	2025-04-02	104.21.21.125
ms-wirecard-staging.provi.com.br	2025-04-04	104.21.21.125
ms-backoffice-staging.provi.com.br	2025-01-07	104.21.21.125
ms-creditrule-staging.provi.com.br	2025-01-06	172.67.198.158
ms-site-staging.provi.com.br	2024-12-14	104.21.21.125
ms-hosting-staging.provi.com.br	2025-03-05	172.67.198.158
ms-creditpath-staging.provi.com.br	2025-04-01	172.67.198.158
api-staging.provi.com.br	2025-01-19	172.67.198.158
ms-starkbank-staging.provi.com.br	2025-02-04	172.67.198.158
admin-staging.provi.com.br	2024-08-31	3.163.24.31
ms-communication-staging.provi.com.br	2025-04-01	104.21.21.125
credito-staging.provi.com.br	2024-11-13	172.67.198.158
ms-guarantor-staging.provi.com.br	2025-01-19	172.67.198.158
assinaturas-staging.provi.com.br	2025-01-04	104.21.21.125
ms-partners-workers-staging.provi.com.br	2024-12-16	172.67.198.158
ms-passwordless-staging.provi.com.br	2025-04-02	104.21.21.125
ms-product-staging.provi.com.br	2025-04-01	104.21.21.125
workersstaging.provi.com.br	2025-04-01	104.21.21.125
ms-hosting.provi.com.br	2024-12-01	104.21.21.125
api.provi.com.br	2025-01-25	104.21.21.125
ms-starkbank.provi.com.br	2025-04-01	172.67.198.158
admin.provi.com.br	2025-04-07	104.21.21.125
impulso.provi.com.br	2025-04-02	104.21.21.125
credito.provi.com.br	2025-04-05	104.21.21.125
wp.provi.com.br	2025-04-28	35.208.188.125
conteudos.provi.com.br	2024-12-04	172.67.198.158
ms-partners-workers.provi.com.br	2025-01-31	104.21.21.125
ms-product.provi.com.br	2025-04-01	172.67.198.158
checkout.provi.com.br	2025-04-25	172.67.198.158
mesada-dev.provi.com.br	2025-05-10	172.67.198.158
isa-dev.provi.com.br	2025-04-22	172.67.198.158
avalista-dev.provi.com.br	2024-08-28	104.21.21.125
www.provi.com.br	2025-01-06	172.67.198.158
bluefriday.provi.com.br	2025-04-19	104.21.21.125

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mesada-dev.provi.com.br

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains