{"report_id":"10af1840-a438-48f2-be68-58a0fd6a1407","version":6,"status":"done","tags":[],"date":"2025-10-06T10:08:05Z","url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"13.248.148.254","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"title":"cursoscomdesconto.online"},"submit":{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"13.248.148.254","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-10T10:08:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ww38.cursoscomdesconto.online","ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-02-28","domain_rank":0,"first_seen":"2025-10-06T10:08:05.663326Z","last_seen":"2025-10-06T10:08:05.663326Z","alert_count":24,"request_count":6,"received_data":20044,"sent_data":3202,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"euob.youseasky.com","ip":{"addr":"3.164.68.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":394467,"first_seen":"2025-06-17T15:02:15.832689Z","last_seen":"2025-09-30T20:39:40.665643Z","alert_count":0,"request_count":1,"received_data":118227,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"18.165.132.97","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22T18:48:38Z","last_seen":"2025-10-05T22:33:25.171995Z","alert_count":0,"request_count":1,"received_data":11842,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":5365,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-10-05T22:16:57.751046Z","alert_count":0,"request_count":4,"received_data":178466,"sent_data":3955,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":65181,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-10-05T22:16:57.741693Z","alert_count":0,"request_count":2,"received_data":2237,"sent_data":1005,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-05T22:12:06.955348Z","alert_count":0,"request_count":1,"received_data":159698,"sent_data":376,"comment":"","tags":null,"fingerprints":null},{"fqdn":"obseu.youseasky.com","ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-01","domain_rank":340380,"first_seen":"2025-06-17T15:02:15.833324Z","last_seen":"2025-09-30T17:43:06.447737Z","alert_count":0,"request_count":6,"received_data":5453,"sent_data":9554,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.164.68.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6435a99b96721932e5d9217b545770c3","sha1":"d1fea437e5bce4bb29428c089bcf8d6bc68ac9b7","sha256":"9e2d72207f0dbd75ac2763b6365239c80032a404b9a8036fc1d83e8d97882a2f","sha512":"3b7c154d7b87c02720f64a7e081dcdb643111c4901b42d16e638d4b539ea0801cda624ef21ad3fadd75486c64dd3cb4099b0ddfc42976adbad55bf5eb4c7335b","ssdeep":"1536:9Ojcob5rkwwMy65IckUSQLon22pDxoEfexrcTYYtCHlgx63V3qO3D8Wm7PxExybC:9OoxM557EfY8xO3+7P4AMAbHc","tlshash":"43b3d7adb2e27025439334a5157f410ae27b5e503c4b8294d17ee9d4ac7ce8e817bfac","size":117701,"data":"","first_seen":"2025-09-16T17:03:48.947199Z","last_seen":"2025-10-17T13:09:43.711417Z","times_seen":42889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c77554570ae0fa8e4fb31747dc213058","sha1":"e989fbde07e6a68975c7a31e1d4df76afd90b96f","sha256":"c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77","sha512":"130189a67dea3f0d7ba0591ffbff46f37993ae8b07409e84dfb571f6d31f1b20f97cf76b7cd0751450eec5f294906f95fd35f3dfa37d58bc80433f4c9b4064a9","ssdeep":"","tlshash":"171148b58c9b942f6b37592fa69a72816c41a1179c013a18b14cc7302fdc71d6470bf6","size":968,"data":"","first_seen":"2023-03-08T02:24:08Z","last_seen":"2026-01-15T16:13:58.011798Z","times_seen":181951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f05da7cafd50c35f5a6c2ca0cc41350","sha1":"cd08acf7594a878a8e295bc369d5b2876f778b4d","sha256":"b26bcee5561b8d0e4e08c4a2d7b9501f2b840bc343f46b9e77f5e000ed12e1ef","sha512":"598505e41201871591fcb680cb40e884f3923f9ca0adf728520d457c90371a44ac2175269f8f1dcd0fa06f23490f32f2e896cd55a163fec5498a9998190a28dd","ssdeep":"192:+CFeqPGXHHHiJmP88h9CV2V/Hi3DVcqTrIZ9eKD5edWDJTReqPGXHHHifIXGeqP1:/HanHigEM9A2V/HeDVcqTEZ9eKD5qW9n","tlshash":"2912a6b258431c324edf621eda3ad11ae5aef65f9c3628327457c1903381d0ee5a17ba","size":9118,"data":"","first_seen":"2025-10-06T10:08:09.319011Z","last_seen":"2025-10-06T10:08:09.319011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/ct?id=80705\u0026url=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=6a2fc98bb89a859b92040a267d099d0997a15260\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1759745272344\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=130151195027522091111122297602689222268161671920020569108908291072522002059682365688920197\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=pzWazI8kD4\u0026pto=4239\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1759745272.jkVbjyvm1ymC5Qo0\u0026suid=1.1759745272.isZnvCisSjj3KuZJ\u0026tuid=1.1759745272.SyqQhsFyVg1gySIS\u0026fbc=-\u0026gtm=-\u0026it=5%2C3292%2C81\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.0%3B\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5436583f835753c71caaa5579ffb0ca","sha1":"c0e19b6d3875777c9b88bbd6cfb47189cbea27c2","sha256":"c6915f9ae60555d0f481b4a685afcc4925a9a210dbc0329a2af86a7606ae5481","sha512":"ed48f4bb8330b9cff5992f99098f1a9038034e6b338c5fb5585cf95cf79469b89b88555d9e075646317f07e0f6239687a171f556dd4914f81ab847027cae4a79","ssdeep":"","tlshash":"a671f74e749dfcfa1692577ec24348d602b34e329fe3197fee59e0ca082b758ca0a014","size":3533,"data":"","first_seen":"2025-10-06T10:08:09.302887Z","last_seen":"2025-10-06T10:08:09.302887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd86e5c2c0b2bdad59a004aaceff1804","sha1":"11d6ec6d0ab8415fa0f9a30864a3b1d173265a78","sha256":"a479d94558fff152e484b465d1acb0c2962942cc2ceb32ce10b6a541bf8ea425","sha512":"1bed04278a9183dcd5bd08898f49b5dd4ffb04fe8b4d7cb057dd354c05bae3255ba18717cec23ddd62e5b6164238c674e6701b1708712b8b344146dfb9bf0f92","ssdeep":"","tlshash":"ce01780419e430b1461230ba890b910db638a51313098ea03b1c53d12fb917ed7abfe9","size":726,"data":"","first_seen":"2025-10-06T10:08:09.321801Z","last_seen":"2025-10-06T10:08:09.321801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-06-08T06:33:36.730842Z","times_seen":406064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-08T06:33:36.727186Z","times_seen":379319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-08T06:33:36.733022Z","times_seen":379281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3d06ce8e7ca7cdd5cfade167419b1bc","sha1":"24e8a5030654b078c20604dd7fdd68f3d0c875a4","sha256":"af0e61150e04f8d491fec062f627c0e8f3fb10e19c6e3bc40b74a088bded8ea1","sha512":"d90178b40dbc9306b2f56e8d7063177e5e3b3e6c7c83e7e799d882bffbebbae2b7baa3861f13d700fd53915e5a57b02b5367690ae7271c90fef598e3a521c511","ssdeep":"1536:sdzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:04tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"70f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","size":159029,"data":"","first_seen":"2025-10-02T13:54:11.529456Z","last_seen":"2025-10-06T20:48:58.517537Z","times_seen":2607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"407068d03b42c8ce4e27a913656a562b","sha1":"2b7425f98aadec17300ed869de42e4ff36dfa091","sha256":"0b64f6b23a570769b713ea18ecc1cca56d4f27477fc13d4037f1968d7d165778","sha512":"c6d655e86ab6da0fb32520994af5c2212d4ef031732a80268215ae0a837915d5f402a5d41db14142ba4649ec52b50807701397802edb4d40aeff2b03880fb5d8","ssdeep":"1536:HdzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:p4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"90f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","size":159036,"data":"","first_seen":"2025-10-02T14:16:21.813324Z","last_seen":"2025-10-06T20:56:46.419146Z","times_seen":2105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"65c8369b3607f59089ddd9f23b11f98c","sha1":"5a305680d67d825d8186fe1a52cb65e530301204","sha256":"e2508bc8b6eda959a5e887150cd18744f2aacb6eb98042b690f26443fc5b6d15","sha512":"7ce30bc944e8afd9c817174107ac9345a01537d5c76144f50040acc7d65a47d68276f7e9afe458e478cd1d088d19f0713c5d0f8196c04eb475cfbf82b4e0421b","ssdeep":"","tlshash":"c69004501411035735471404dc0d10c5cc14d1571350413d0353cc740141435fc01405","size":40,"data":"","first_seen":"2025-02-04T20:34:58.349606Z","last_seen":"2026-01-15T16:13:58.019084Z","times_seen":146939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18f2edc58d8a7b9e6b82454e8658c157","sha1":"e5dfdd0fa61b3a5ef68dab382a0ba93e9e7b67fb","sha256":"2d9b07a0704d92dda4deae88bc582aeb659923c8d44d0e7362e13cb28d88d250","sha512":"21505594429d2550843f79a1b5aa1555f5f9cac9ae8c281ab5cf48bb5831e39075e826ce61837ad3d6a7ad9a1fb227963eae6e2186b388c9af611e35a0f46f92","ssdeep":"","tlshash":"88f0659805f622d326aa60584df6eb0375a09023a20555c4fa7ca3119f5bc5702ddb8a","size":483,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.022487Z","times_seen":185093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-08T06:33:36.731921Z","times_seen":379325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b334e0123cf0cb113092022fb726782","sha1":"45abb42a6680499daa10d83d2859329de1843de2","sha256":"42591f96b9a41a7e2e5ecd0240dd7fecdcf03ef8454b57c68f08697474a4b579","sha512":"867e061d0f593815a87259d55d960e2000b776954b080157deabbf46850d7530b770d3d31abf6b901aee50bed5fa395be2ce4a6a075b703d07ff7c7c7b7d5cf6","ssdeep":"","tlshash":"6290040115134057505d05134375c101d5504c3f5005d531751c07435f1045f170075c","size":50,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.023216Z","times_seen":184974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.N8qMaNxeJ7IMNyrM8K5q7xsTeDg6Pa_2S4aeWftBxf4Es3k7GBMcVQ.SZVADgziUjnY7jFWfnGlrw.J42uHWZRXfJmBIpfpHl66FdXHOaBjl8kt5eFjh4fCEceV7NCR36k8g3OOrOaYe-n-D-W_Qikksg2ozoTyf3V4QeWkl0mzGqooR8oYPJ2R_BORhcv5_YnSr8DrljFc6XSAy-NxrNFzyMqMO0yu8dtIiyhAzIuo04n7-pQKpW-_x3B52S8Gbx_Rsn8AIqIkRgS5M9AttHgVcd7rGeX35ngptNsmC83ZRqkVNEFpOo-djGIxcz5Rfcfag5ssKvzv__m1sqIGrYrqFUhuavPiDIFgc9poKZc-1CtnT_PwhFyKkSbgukpMi8gF4Im_GTHtj0kr0kprkLA20OLZlMbH68-Kkdc0wzqmYpWYNyF0K8FDBhJ9m-ahie8g7xbMfrvMPbRO3HvdUXEkzL0UIu8B0itFtR2mZQXyeF-nZeblBtgwj3sSIQ1LSwfP0U-2RKOGRaRPr2nBfvtXWeOsd9UsNxu7hs1_rLl4SJPwvo5hfy7TcBWSMnWhEbtJw6qQFXuJpUVPsecyc6jJzu9bj3wLPSY_LPMCE7gZee6-g4yMexNSPzPOtv8c8WA35IUtwYm5KP4N8tWgP2D9cqbqQgpSj5h2XjW-OqUKPTNHQ-FqyTZtExXyCrSPSzpTX8McxpHMt1E.hiDRvuN12BDx7-XQH7tEdA\u0026type=3\u0026swp=as-drid-2617353989497713\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=8991759745272360\u0026num=0\u0026output=afd_ads\u0026domain_name=ww38.cursoscomdesconto.online\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759745272361\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=795\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a054ca91c89b85ea43217c28953c1886","sha1":"39a1cd1873a590bcf29201d347a7bbbff9610679","sha256":"862cc24480714437c4e09c541507f2fd4831baac79e5a25c67739bf4bab58d0c","sha512":"7aed34bc22563641337995a4ea38e50413462970f5e49e1fe7ad9f4cab13a3f5fdd8cb0fc15ed20ad10008f7ef4352b6f05802108835fe1c9b1903c03f236a2c","ssdeep":"","tlshash":"ac119b4598590539c537611706573b621c0b167121cb3c49d84ef96d20dcdedd59c33a","size":869,"data":"","first_seen":"2025-10-06T10:08:09.328163Z","last_seen":"2025-10-06T10:08:09.328163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:55.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1820\r\nOrigin: http://ww38.cursoscomdesconto.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nCookie: cg_uuid=72e5e28e00f19ef3c2f250940a4caa67\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.cursoscomdesconto.online\r\ncontent-type: application/json\r\ndate: Mon, 06 Oct 2025 10:07:55 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-06T10:07:48.110Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?subid1=20251006-2009-3482-9813-fb2a45ee13b3 HTTP/1.1\r\nHost: ww38.cursoscomdesconto.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 06 Oct 2025 10:07:51 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nVia: 1.1 Caddy, 0.0 Caddy\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LrD4WAKy8MCtElqwdA1m2ZqKtaXaQ3pRsJ36WZ3U6tU1dFFaMiBOkyDFyn6DjNzy1h7iUrbViKD1dTVyilVAbw==\r\nX-Buckets: bucket011,bucket088\r\nX-Domain: cursoscomdesconto.online\r\nX-Language: norwegian\r\nX-Pcrew-Blocked-Reason: \r\nX-Pcrew-Ip-Organization: OBOS OpenNet\r\nX-Subdomain: ww38\r\nX-Template: tpl_CleanPeppermintBlack_twoclick\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17926,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9158)","md5":"1a4f8a5a1729539ecab02a61340863b9","sha1":"de696b75f26342ef23af154f578f47bbdf9f1b86","sha256":"768c4537ddc7ccccd403187fe26b4a3e6db1508d55e5ad61c48d10e9d3d0d7d2","sha512":"e90119f46194c40b815fd299a75b77e69b8cb9df7d791263e18571e51d318b7b224c5bb1eaf9eae17e595deea5eba603df090f1fe0f0d57f10035c5144022fcf","ssdeep":"384:Ti7YoHMfOTqhWpoHanHigEM9A2V/HeDVcqTEZ9eKD5qW9TRHanHifLHanHi7pimK:TiRMfPcoHaCw9B/HSVcqTEZ9eKD57JRe","tlshash":"948219625cd3283658cf502dce7af209f49de24bc90b9c74b89d82a02f8595d95b27fc","first_seen":"2025-10-06T10:08:09.295148Z","last_seen":"2025-10-06T10:08:09.295148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3268,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":3258,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.164.68.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:51.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:E4:C6:70:2D:8F:86:68:CF:5D:7A:6C:62:4B:B8:0B:CC:F2:4A:30","sha256":"81:A7:F9:EB:A5:70:77:98:6A:07:25:32:18:5D:46:26:72:12:36:ED:D3:73:60:A7:01:F6:86:8A:27:08:78:56"}}},"request":{"raw":"GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1\r\nHost: euob.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 43411\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Mon, 06 Oct 2025 01:05:22 GMT\r\ncache-control: max-age=43200\r\nexpires: Mon, 06 Oct 2025 13:04:43 GMT\r\netag: \"1cbc5-0f6kN+W85LspQowIm8+Na8aKybc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c4596d40130fcd1e37f17f3220ae02b0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P4\r\nx-amz-cf-id: NDHuyWW_CNqh6N-PIufB2Ia9zNBlnvwGQAyOHFk0QqkkdIwL05VpfQ==\r\nage: 32588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117701,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"6435a99b96721932e5d9217b545770c3","sha1":"d1fea437e5bce4bb29428c089bcf8d6bc68ac9b7","sha256":"9e2d72207f0dbd75ac2763b6365239c80032a404b9a8036fc1d83e8d97882a2f","sha512":"3b7c154d7b87c02720f64a7e081dcdb643111c4901b42d16e638d4b539ea0801cda624ef21ad3fadd75486c64dd3cb4099b0ddfc42976adbad55bf5eb4c7335b","ssdeep":"1536:9Ojcob5rkwwMy65IckUSQLon22pDxoEfexrcTYYtCHlgx63V3qO3D8Wm7PxExybC:9OoxM557EfY8xO3+7P4AMAbHc","tlshash":"43b3d7adb2e27025439334a5157f410ae27b5e503c4b8294d17ee9d4ac7ce8e817bfac","first_seen":"2025-09-16T17:03:48.947199Z","last_seen":"2025-10-17T13:09:43.711417Z","times_seen":42889,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":38,"dns":4,"connect":14,"send":0,"wait":16,"receive":13,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.165.132.97","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.303Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 11375\r\nConnection: keep-alive\r\nServer: nginx\r\nDate: Mon, 06 Oct 2025 05:48:12 GMT\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 Aug 2025 17:42:07 GMT\r\nETag: \"dce8vhowlwqm8rz\"\r\nVary: Accept-Encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 f62dda7d026036fb70c194c62c99bb26.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: HEL51-P2\r\nX-Amz-Cf-Id: YQmKkz-WApmAwj3kRTU4s79t7w5fRBo03DxkTBY-jlkI1XK2b7sUig==\r\nAge: 15580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 600, 8-bit colormap, non-interlaced","md5":"0cb2e5165dc9324eb462199f04e1ffa9","sha1":"9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8","sha256":"67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865","sha512":"7a285c4a87b9f9093b7ba720d8fe08e0ad7e2ebde9ef8c8d11b70afa08245af8f8a7281c7b3fbe8bad21c3afde4f32634d3bd416822892aa47ba82c12f4b8191","ssdeep":"192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/","tlshash":"94329f86e207c9addc119cb16bd8e9384c673cc3c66925b748987669e4bb80475f049f","first_seen":"2023-04-05T14:20:44Z","last_seen":"2026-06-07T03:28:31.174315Z","times_seen":205338,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":0,"connect":15,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/ct?id=80705\u0026url=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=6a2fc98bb89a859b92040a267d099d0997a15260\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1759745272344\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=130151195027522091111122297602689222268161671920020569108908291072522002059682365688920197\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=pzWazI8kD4\u0026pto=4239\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1759745272.jkVbjyvm1ymC5Qo0\u0026suid=1.1759745272.isZnvCisSjj3KuZJ\u0026tuid=1.1759745272.SyqQhsFyVg1gySIS\u0026fbc=-\u0026gtm=-\u0026it=5%2C3292%2C81\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.0%3B\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"GET /ct?id=80705\u0026url=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=6a2fc98bb89a859b92040a267d099d0997a15260\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1759745272344\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=130151195027522091111122297602689222268161671920020569108908291072522002059682365688920197\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=pzWazI8kD4\u0026pto=4239\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1759745272.jkVbjyvm1ymC5Qo0\u0026suid=1.1759745272.isZnvCisSjj3KuZJ\u0026tuid=1.1759745272.SyqQhsFyVg1gySIS\u0026fbc=-\u0026gtm=-\u0026it=5%2C3292%2C81\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.0%3B\u0026sck=-\u0026io=aGA2Og%3D%3D HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 06 Oct 2025 10:07:52 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=72e5e28e00f19ef3c2f250940a4caa67; Max-Age=29030400; Path=/; Expires=Mon, 07 Sep 2026 10:07:52 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: http://ww38.cursoscomdesconto.online\r\ncontent-length: 1195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3533), with no line terminators","md5":"e5436583f835753c71caaa5579ffb0ca","sha1":"c0e19b6d3875777c9b88bbd6cfb47189cbea27c2","sha256":"c6915f9ae60555d0f481b4a685afcc4925a9a210dbc0329a2af86a7606ae5481","sha512":"ed48f4bb8330b9cff5992f99098f1a9038034e6b338c5fb5585cf95cf79469b89b88555d9e075646317f07e0f6239687a171f556dd4914f81ab847027cae4a79","ssdeep":"","tlshash":"a671f74e749dfcfa1692577ec24348d602b34e329fe3197fee59e0ca082b758ca0a014","first_seen":"2025-10-06T10:08:09.302887Z","last_seen":"2025-10-06T10:08:09.302887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":116,"dns":0,"connect":38,"send":0,"wait":57,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-06T10:07:43.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?subid1=20251006-2009-3482-9813-fb2a45ee13b3 HTTP/1.1\r\nHost: ww38.cursoscomdesconto.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":3,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.N8qMaNxeJ7IMNyrM8K5q7xsTeDg6Pa_2S4aeWftBxf4Es3k7GBMcVQ.SZVADgziUjnY7jFWfnGlrw.J42uHWZRXfJmBIpfpHl66FdXHOaBjl8kt5eFjh4fCEceV7NCR36k8g3OOrOaYe-n-D-W_Qikksg2ozoTyf3V4QeWkl0mzGqooR8oYPJ2R_BORhcv5_YnSr8DrljFc6XSAy-NxrNFzyMqMO0yu8dtIiyhAzIuo04n7-pQKpW-_x3B52S8Gbx_Rsn8AIqIkRgS5M9AttHgVcd7rGeX35ngptNsmC83ZRqkVNEFpOo-djGIxcz5Rfcfag5ssKvzv__m1sqIGrYrqFUhuavPiDIFgc9poKZc-1CtnT_PwhFyKkSbgukpMi8gF4Im_GTHtj0kr0kprkLA20OLZlMbH68-Kkdc0wzqmYpWYNyF0K8FDBhJ9m-ahie8g7xbMfrvMPbRO3HvdUXEkzL0UIu8B0itFtR2mZQXyeF-nZeblBtgwj3sSIQ1LSwfP0U-2RKOGRaRPr2nBfvtXWeOsd9UsNxu7hs1_rLl4SJPwvo5hfy7TcBWSMnWhEbtJw6qQFXuJpUVPsecyc6jJzu9bj3wLPSY_LPMCE7gZee6-g4yMexNSPzPOtv8c8WA35IUtwYm5KP4N8tWgP2D9cqbqQgpSj5h2XjW-OqUKPTNHQ-FqyTZtExXyCrSPSzpTX8McxpHMt1E.hiDRvuN12BDx7-XQH7tEdA\u0026type=3\u0026swp=as-drid-2617353989497713\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=8991759745272360\u0026num=0\u0026output=afd_ads\u0026domain_name=ww38.cursoscomdesconto.online\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759745272361\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=795\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.N8qMaNxeJ7IMNyrM8K5q7xsTeDg6Pa_2S4aeWftBxf4Es3k7GBMcVQ.SZVADgziUjnY7jFWfnGlrw.J42uHWZRXfJmBIpfpHl66FdXHOaBjl8kt5eFjh4fCEceV7NCR36k8g3OOrOaYe-n-D-W_Qikksg2ozoTyf3V4QeWkl0mzGqooR8oYPJ2R_BORhcv5_YnSr8DrljFc6XSAy-NxrNFzyMqMO0yu8dtIiyhAzIuo04n7-pQKpW-_x3B52S8Gbx_Rsn8AIqIkRgS5M9AttHgVcd7rGeX35ngptNsmC83ZRqkVNEFpOo-djGIxcz5Rfcfag5ssKvzv__m1sqIGrYrqFUhuavPiDIFgc9poKZc-1CtnT_PwhFyKkSbgukpMi8gF4Im_GTHtj0kr0kprkLA20OLZlMbH68-Kkdc0wzqmYpWYNyF0K8FDBhJ9m-ahie8g7xbMfrvMPbRO3HvdUXEkzL0UIu8B0itFtR2mZQXyeF-nZeblBtgwj3sSIQ1LSwfP0U-2RKOGRaRPr2nBfvtXWeOsd9UsNxu7hs1_rLl4SJPwvo5hfy7TcBWSMnWhEbtJw6qQFXuJpUVPsecyc6jJzu9bj3wLPSY_LPMCE7gZee6-g4yMexNSPzPOtv8c8WA35IUtwYm5KP4N8tWgP2D9cqbqQgpSj5h2XjW-OqUKPTNHQ-FqyTZtExXyCrSPSzpTX8McxpHMt1E.hiDRvuN12BDx7-XQH7tEdA\u0026type=3\u0026swp=as-drid-2617353989497713\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=8991759745272360\u0026num=0\u0026output=afd_ads\u0026domain_name=ww38.cursoscomdesconto.online\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759745272361\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=795\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Mon, 06 Oct 2025 10:07:52 GMT\r\nexpires: Mon, 06 Oct 2025 10:07:52 GMT\r\ncache-control: private, max-age=3600\r\nx-content-security-policy-report-only: default-src https: data:; options eval-script inline-script; report-uri /csp_report; referrer origin\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-WERB8WCnR1anJekoe65MdA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3713\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":16469,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15654)","md5":"0c4bd98faa7e16b38ae15d72d4d64e7c","sha1":"ef0d8077d56cc93fc757fc0be752e30f5374aee4","sha256":"6cfb716b478d2cd96cbaeb16737224102d34da4f0ac69b8a2b26e5acd2716adf","sha512":"a6a426187bf41eb2c3f70f0292e7bd835687d5f0dcdb8fe287d497fc1bc510976b788d54f633ff5dcd765f33ee8465f9a8983ba5fe5caee699df9f3514caa7c1","ssdeep":"192:GE12iMpgb4Lgh3+DWraeqPGXHHHi+eqPGXHHHif+eqPGXHHHigf2lKkC:Gni0232dHanHi+HanHif+HanHigf2gkC","tlshash":"b37274377062172945079c541b2a6f6ec285c42ac86b36f548e35f35c7e7f828fe228e","first_seen":"2025-10-06T10:08:09.305091Z","last_seen":"2025-10-06T10:08:09.305091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":58,"dns":0,"connect":8,"send":0,"wait":147,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.N8qMaNxeJ7IMNyrM8K5q7xsTeDg6Pa_2S4aeWftBxf4Es3k7GBMcVQ.SZVADgziUjnY7jFWfnGlrw.J42uHWZRXfJmBIpfpHl66FdXHOaBjl8kt5eFjh4fCEceV7NCR36k8g3OOrOaYe-n-D-W_Qikksg2ozoTyf3V4QeWkl0mzGqooR8oYPJ2R_BORhcv5_YnSr8DrljFc6XSAy-NxrNFzyMqMO0yu8dtIiyhAzIuo04n7-pQKpW-_x3B52S8Gbx_Rsn8AIqIkRgS5M9AttHgVcd7rGeX35ngptNsmC83ZRqkVNEFpOo-djGIxcz5Rfcfag5ssKvzv__m1sqIGrYrqFUhuavPiDIFgc9poKZc-1CtnT_PwhFyKkSbgukpMi8gF4Im_GTHtj0kr0kprkLA20OLZlMbH68-Kkdc0wzqmYpWYNyF0K8FDBhJ9m-ahie8g7xbMfrvMPbRO3HvdUXEkzL0UIu8B0itFtR2mZQXyeF-nZeblBtgwj3sSIQ1LSwfP0U-2RKOGRaRPr2nBfvtXWeOsd9UsNxu7hs1_rLl4SJPwvo5hfy7TcBWSMnWhEbtJw6qQFXuJpUVPsecyc6jJzu9bj3wLPSY_LPMCE7gZee6-g4yMexNSPzPOtv8c8WA35IUtwYm5KP4N8tWgP2D9cqbqQgpSj5h2XjW-OqUKPTNHQ-FqyTZtExXyCrSPSzpTX8McxpHMt1E.hiDRvuN12BDx7-XQH7tEdA\u0026type=3\u0026swp=as-drid-2617353989497713\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=8991759745272360\u0026num=0\u0026output=afd_ads\u0026domain_name=ww38.cursoscomdesconto.online\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759745272361\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=795\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Oct 2025 11:30:31 GMT\r\nexpires: Mon, 06 Oct 2025 10:30:31 GMT\r\ncache-control: public, max-age=82800\r\nage: 81441\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-06-08T02:25:10.760968Z","times_seen":412190,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":50,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=jvybl24xdzns\u0026cd_fexp=72717108\u0026aqid=-JTjaPL3G6-viM0P4vK72AM\u0026psid=5837883959\u0026pbt=bv\u0026adbx=375\u0026adby=170\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=813237002\u0026csala=2%7C0%7C230%7C40%7C185\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:54.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=jvybl24xdzns\u0026cd_fexp=72717108\u0026aqid=-JTjaPL3G6-viM0P4vK72AM\u0026psid=5837883959\u0026pbt=bv\u0026adbx=375\u0026adby=170\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=813237002\u0026csala=2%7C0%7C230%7C40%7C185\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-7uN-vGEshxY0K1SNzLlv8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 06 Oct 2025 10:07:54 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:08:02.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1823\r\nOrigin: http://ww38.cursoscomdesconto.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nCookie: cg_uuid=72e5e28e00f19ef3c2f250940a4caa67\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.cursoscomdesconto.online\r\ncontent-type: application/json\r\ndate: Mon, 06 Oct 2025 10:08:02 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.302Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026adsdeli=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Type: text/javascript; charset=UTF-8\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"ads-afs-ui\"\r\nReport-To: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\nDate: Mon, 06 Oct 2025 10:07:52 GMT\r\nExpires: Mon, 06 Oct 2025 10:07:52 GMT\r\nCache-Control: private, max-age=3600\r\nETag: \"1686258755885960523\"\r\nX-Content-Type-Options: nosniff\r\nLink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nServer: sffe\r\nX-XSS-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159029,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"c3d06ce8e7ca7cdd5cfade167419b1bc","sha1":"24e8a5030654b078c20604dd7fdd68f3d0c875a4","sha256":"af0e61150e04f8d491fec062f627c0e8f3fb10e19c6e3bc40b74a088bded8ea1","sha512":"d90178b40dbc9306b2f56e8d7063177e5e3b3e6c7c83e7e799d882bffbebbae2b7baa3861f13d700fd53915e5a57b02b5367690ae7271c90fef598e3a521c511","ssdeep":"1536:sdzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:04tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"70f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","first_seen":"2025-10-02T13:54:11.529456Z","last_seen":"2025-10-06T20:48:58.517537Z","times_seen":2607,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":8,"dns":1,"connect":8,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/favicon.ico","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.305Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww38.cursoscomdesconto.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nContent-Type: image/x-icon\r\nDate: Mon, 06 Oct 2025 10:07:53 GMT\r\nEtag: \"670f7248-0\"\r\nLast-Modified: Wed, 16 Oct 2024 07:59:04 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":2684,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":2681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/tracker/tc_imp.gif?e=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\u0026cri=pzWazI8kD4\u0026ts=189\u0026cb=1759745272533","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=pzWazI8kD4\u0026ts=189\u0026cb=1759745272533 HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nCookie: cg_uuid=72e5e28e00f19ef3c2f250940a4caa67\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Mon, 06 Oct 2025 10:07:52 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T06:33:36.726082Z","times_seen":394559,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/munin/a/tr/answercheck/yes?domain=cursoscomdesconto.online\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTc1OTc0NTI3MS4xOTM1OjdhNzk1MTI3YmYxNWE4OTZkZGI0NDMzZjU3YzQwNzEzMDhhZDA1NmMxNGYyMjg4M2MxMzBiYjczODUxNDdjZTI6NjhlMzk0ZjcyZjNmOQ%3D%3D","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.637Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /munin/a/tr/answercheck/yes?domain=cursoscomdesconto.online\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTc1OTc0NTI3MS4xOTM1OjdhNzk1MTI3YmYxNWE4OTZkZGI0NDMzZjU3YzQwNzEzMDhhZDA1NmMxNGYyMjg4M2MxMzBiYjczODUxNDdjZTI6NjhlMzk0ZjcyZjNmOQ%3D%3D HTTP/1.1\r\nHost: ww38.cursoscomdesconto.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3\r\nCookie: _cq_duid=1.1759745272.jkVbjyvm1ymC5Qo0; _cq_suid=1.1759745272.isZnvCisSjj3KuZJ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 06 Oct 2025 10:07:52 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy, 0.0 Caddy\r\nX-Custom-Track: answercheck\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":2,"dns":0,"connect":2,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.N8qMaNxeJ7IMNyrM8K5q7xsTeDg6Pa_2S4aeWftBxf4Es3k7GBMcVQ.SZVADgziUjnY7jFWfnGlrw.J42uHWZRXfJmBIpfpHl66FdXHOaBjl8kt5eFjh4fCEceV7NCR36k8g3OOrOaYe-n-D-W_Qikksg2ozoTyf3V4QeWkl0mzGqooR8oYPJ2R_BORhcv5_YnSr8DrljFc6XSAy-NxrNFzyMqMO0yu8dtIiyhAzIuo04n7-pQKpW-_x3B52S8Gbx_Rsn8AIqIkRgS5M9AttHgVcd7rGeX35ngptNsmC83ZRqkVNEFpOo-djGIxcz5Rfcfag5ssKvzv__m1sqIGrYrqFUhuavPiDIFgc9poKZc-1CtnT_PwhFyKkSbgukpMi8gF4Im_GTHtj0kr0kprkLA20OLZlMbH68-Kkdc0wzqmYpWYNyF0K8FDBhJ9m-ahie8g7xbMfrvMPbRO3HvdUXEkzL0UIu8B0itFtR2mZQXyeF-nZeblBtgwj3sSIQ1LSwfP0U-2RKOGRaRPr2nBfvtXWeOsd9UsNxu7hs1_rLl4SJPwvo5hfy7TcBWSMnWhEbtJw6qQFXuJpUVPsecyc6jJzu9bj3wLPSY_LPMCE7gZee6-g4yMexNSPzPOtv8c8WA35IUtwYm5KP4N8tWgP2D9cqbqQgpSj5h2XjW-OqUKPTNHQ-FqyTZtExXyCrSPSzpTX8McxpHMt1E.hiDRvuN12BDx7-XQH7tEdA\u0026type=3\u0026swp=as-drid-2617353989497713\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=8991759745272360\u0026num=0\u0026output=afd_ads\u0026domain_name=ww38.cursoscomdesconto.online\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759745272361\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=795\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Oct 2025 13:34:20 GMT\r\nexpires: Mon, 06 Oct 2025 12:34:20 GMT\r\ncache-control: public, max-age=82800\r\nage: 74012\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-06-04T20:40:23.121535Z","times_seen":243745,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":57,"dns":1,"connect":9,"send":0,"wait":8,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:57.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1820\r\nOrigin: http://ww38.cursoscomdesconto.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nCookie: cg_uuid=72e5e28e00f19ef3c2f250940a4caa67\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.cursoscomdesconto.online\r\ncontent-type: application/json\r\ndate: Mon, 06 Oct 2025 10:07:57 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/munin/a/tr/browserjs?domain=cursoscomdesconto.online\u0026toggle=browserjs\u0026uid=MTc1OTc0NTI3MS4xOTM1OjdhNzk1MTI3YmYxNWE4OTZkZGI0NDMzZjU3YzQwNzEzMDhhZDA1NmMxNGYyMjg4M2MxMzBiYjczODUxNDdjZTI6NjhlMzk0ZjcyZjNmOQ%3D%3D","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:51.414Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /munin/a/tr/browserjs?domain=cursoscomdesconto.online\u0026toggle=browserjs\u0026uid=MTc1OTc0NTI3MS4xOTM1OjdhNzk1MTI3YmYxNWE4OTZkZGI0NDMzZjU3YzQwNzEzMDhhZDA1NmMxNGYyMjg4M2MxMzBiYjczODUxNDdjZTI6NjhlMzk0ZjcyZjNmOQ%3D%3D HTTP/1.1\r\nHost: ww38.cursoscomdesconto.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 06 Oct 2025 10:07:51 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy, 0.0 Caddy\r\nX-Custom-Track: browserjs\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww38.cursoscomdesconto.online/munin/a/ls?t=68e394f7\u0026token=6a2fc98bb89a859b92040a267d099d0997a15260","fqdn":"ww38.cursoscomdesconto.online","domain":"cursoscomdesconto.online","tld":"online"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.199Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /munin/a/ls?t=68e394f7\u0026token=6a2fc98bb89a859b92040a267d099d0997a15260 HTTP/1.1\r\nHost: ww38.cursoscomdesconto.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 201 Created\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nContent-Length: 0\r\nDate: Mon, 06 Oct 2025 10:07:52 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy\r\nX-Log-Success: 68e394f8c87671b48115787f\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"ww38.cursoscomdesconto.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.N8qMaNxeJ7IMNyrM8K5q7xsTeDg6Pa_2S4aeWftBxf4Es3k7GBMcVQ.SZVADgziUjnY7jFWfnGlrw.J42uHWZRXfJmBIpfpHl66FdXHOaBjl8kt5eFjh4fCEceV7NCR36k8g3OOrOaYe-n-D-W_Qikksg2ozoTyf3V4QeWkl0mzGqooR8oYPJ2R_BORhcv5_YnSr8DrljFc6XSAy-NxrNFzyMqMO0yu8dtIiyhAzIuo04n7-pQKpW-_x3B52S8Gbx_Rsn8AIqIkRgS5M9AttHgVcd7rGeX35ngptNsmC83ZRqkVNEFpOo-djGIxcz5Rfcfag5ssKvzv__m1sqIGrYrqFUhuavPiDIFgc9poKZc-1CtnT_PwhFyKkSbgukpMi8gF4Im_GTHtj0kr0kprkLA20OLZlMbH68-Kkdc0wzqmYpWYNyF0K8FDBhJ9m-ahie8g7xbMfrvMPbRO3HvdUXEkzL0UIu8B0itFtR2mZQXyeF-nZeblBtgwj3sSIQ1LSwfP0U-2RKOGRaRPr2nBfvtXWeOsd9UsNxu7hs1_rLl4SJPwvo5hfy7TcBWSMnWhEbtJw6qQFXuJpUVPsecyc6jJzu9bj3wLPSY_LPMCE7gZee6-g4yMexNSPzPOtv8c8WA35IUtwYm5KP4N8tWgP2D9cqbqQgpSj5h2XjW-OqUKPTNHQ-FqyTZtExXyCrSPSzpTX8McxpHMt1E.hiDRvuN12BDx7-XQH7tEdA\u0026type=3\u0026swp=as-drid-2617353989497713\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=8991759745272360\u0026num=0\u0026output=afd_ads\u0026domain_name=ww38.cursoscomdesconto.online\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759745272361\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=795\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww38.cursoscomdesconto.online%2F%3Fsubid1%3D20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:52.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 06 Oct 2025 10:07:52 GMT\r\nexpires: Mon, 06 Oct 2025 10:07:52 GMT\r\ncache-control: private, max-age=3600\r\netag: \"4607749269932262089\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159036,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"407068d03b42c8ce4e27a913656a562b","sha1":"2b7425f98aadec17300ed869de42e4ff36dfa091","sha256":"0b64f6b23a570769b713ea18ecc1cca56d4f27477fc13d4037f1968d7d165778","sha512":"c6d655e86ab6da0fb32520994af5c2212d4ef031732a80268215ae0a837915d5f402a5d41db14142ba4649ec52b50807701397802edb4d40aeff2b03880fb5d8","ssdeep":"1536:HdzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:p4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"90f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","first_seen":"2025-10-02T14:16:21.813324Z","last_seen":"2025-10-06T20:56:46.419146Z","times_seen":2105,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:53.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2602\r\nOrigin: http://ww38.cursoscomdesconto.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nCookie: cg_uuid=72e5e28e00f19ef3c2f250940a4caa67\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.cursoscomdesconto.online\r\ncontent-type: application/json\r\ndate: Mon, 06 Oct 2025 10:07:53 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=7734akoimgt4\u0026cd_fexp=72717108\u0026aqid=-JTjaPL3G6-viM0P4vK72AM\u0026psid=5837883959\u0026pbt=bs\u0026adbx=375\u0026adby=170\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=813237002\u0026csala=2%7C0%7C230%7C40%7C185\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.cursoscomdesconto.online/?subid1=20251006-2009-3482-9813-fb2a45ee13b3","date":"2025-10-06T10:07:54.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=7734akoimgt4\u0026cd_fexp=72717108\u0026aqid=-JTjaPL3G6-viM0P4vK72AM\u0026psid=5837883959\u0026pbt=bs\u0026adbx=375\u0026adby=170\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=813237002\u0026csala=2%7C0%7C230%7C40%7C185\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.cursoscomdesconto.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-e-SEGwb_hYr2pMaDGZOGkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 06 Oct 2025 10:07:54 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T06:33:57.473216Z","times_seen":16232170,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}