{"report_id":"11b37993-a917-4caf-b80d-a52c5740f660","version":6,"status":"done","tags":[],"date":"2026-04-04T12:25:04Z","url":{"schema":"http","addr":"estadao-finance.sbs","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"104.21.83.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"estadao-finance.sbs/","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"title":"Início | Estadão Finance SBS","dom":{"size":19064,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b5270adb9cc301ee7fab93a1e3526b2","sha1":"2e510f65292f007734b2e359b74a269b85d699c9","sha256":"55fdff3649e7a3c9c0c1311cdc4fdc4c478f80c644977626c9f5f0bf331cb852","sha512":"12f059caea850eedbbbdb66361fac600586b0150618acf1ef8f614035505f91a2231047a8b982b5e8f3da306352739fd5806d6017d8f419c706c9e45fde7f8ef","ssdeep":"384:jrZqEQ/pOM/vtxWfK9oPPzWqXZVRmDGoPXVA/LisNFX:COM/gzz3XZS3v6/LhNFX","tlshash":"f682b432a9f1242701a383c57791af1ba9d1c647c72b4b1572fe8bc98fc2d92c96351e","dom_hash":"domhashd4ce5c3c4d3ff952f71d0313fd92ed30","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"estadao-finance.sbs","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"104.21.83.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:25:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"estadao-finance.sbs","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":9,"received_data":37795,"sent_data":4060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":3,"received_data":397597,"sent_data":1491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"estadao-finance.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/js/main.js","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ae2db813a917599300cc59ac187ca52","sha1":"e989499c3f0d840406ba101d56457dc095a8dbf8","sha256":"fe4ef71a6fd93f7d4cce6c217c6283a01ee20e7e2053f7c6f23370ea2f49cc27","sha512":"89e43a850a56b6ee07fd805839167d3c161ddb161ba51f1f8c047deaa8ea6468e5448b69be2ef56d37a14583e6ff2bfc8ed0064e04675e59f1e3905c38e001ae","ssdeep":"96:7e/4QWuCVOtE6XWiwpOIOIcrwJ+DAnUUMX7XnHgZpSH:MW9O6oWixbUJA4SHgTY","tlshash":"a5a1003b699600757db3e0bea7df9185b5a130033c44ca11b85cb4061fdce811a79bf9","size":5038,"data":"","first_seen":"2026-04-04T12:25:08.884699Z","last_seen":"2026-04-04T12:25:08.884699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"estadao-finance.sbs/img/service-2.svg","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /img/service-2.svg HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BALz1co%2BunQml%2BMdOxuJh%2FHvH%2F1mlgwJLZb9V3rvaFuC9ALWbPMSMHtzZ2zDwLD7TuHdE8VyUMmeLao13uMw1ck8jsiMKWPV4qHc9N5c5uRRKDWWT2nLr9gM3VPWj84tTSjL6IaY\"}]}\r\netag: W/\"69cd0219-260\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa5a9b75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4d0587ff9ef48c740400da6c75f0b40","sha1":"373ac56ec33e9611528d86e0925a48d36c20a773","sha256":"e5f300bfbb57e6bda4e7a83d5444c73294e8a6828a3123f43122e109fbd76b6c","sha512":"a417c00874213286af031a5f9aa464a765ba93b97f0af8f182b1cac0ced96b77e2970466487143aeca1c1e6f807b1d6bfe933643e98e5876006388ac6563b4a8","ssdeep":"","tlshash":"8df00ca1e3880028c3048e8d230a3b393347e8ca9a19c750f8410b2a99c5cc768c22ac","first_seen":"2026-04-04T12:25:08.873474Z","last_seen":"2026-04-04T12:25:08.873474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://estadao-finance.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2509375\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjWo49m1aFniakcuQQoNYZOInbQH0EBxaYeZ8ly1TzDB6dW0YLP7hSPAC%2BZpND%2B0SMjNRKf%2BXn%2BjO30W%2FIS5YqTP%2F%2B2dJBGbg093G6RFA4PwYswzZLslvYGJN92F0X0HBrQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704aa5bf55569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:05:33.986787Z","times_seen":21876,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":1,"connect":4,"send":0,"wait":6,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/img/sprite.svg","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /img/sprite.svg HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeR1lkp9bQvBfRxfbJk8zuTkybKmd%2BuKU0a%2FUsvX0vHeNJKpqyU9tEc6flwjxUTDSgmD8bTgaASY%2BUImawFFAn4oDylgOfRDnkPJG7KgS31yTB54ensw3pn%2F6pqVYiF7xMBWig2y\"}]}\r\netag: W/\"69cd0219-984\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa5a9c75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c108322b101a1a8653514c62a83b6415","sha1":"8e236be1e96100276de6ec099f4809c5dcb3c73c","sha256":"8d8b700ad5cf1523ecff996fe1538e2c2efd0191cee9f733a938535cf57e8fc4","sha512":"c29016103c96585618e25ab9d739db8835a28d7e808aea2c8ca3e680689aca53a1ec9256cba3bb3146af8d7aecd8eb25b69099a271a4655e2780b888d2631a21","ssdeep":"","tlshash":"1a41922061fc582cdb0101269b2e71b6665f5acf5bcd6b6430601cb15f652af39bf2ec","first_seen":"2026-04-04T12:25:08.876743Z","last_seen":"2026-04-04T12:25:08.876743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/img/service-1.svg","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /img/service-1.svg HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9L3gBcS139SPoX4rJZhosMeIDCboP%2FRKEA1Jxyszu96pDRdql0ACl2JihIcOi7GzV8fd2%2FbR1Ejo1JdutbxwnuW9ZuVeY5rLlSnibiEIlWX7BxWFvqrzFw7NeVaQOSEZkZ19CfV%2B\"}]}\r\netag: W/\"69cd0219-261\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa5a9b55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40d4b67ab626fbe5a0fc9d9b1c29b859","sha1":"3c16e63b150eaa1eeaa0cbd09f50e6de6696a39d","sha256":"4886d077eadd97b39ddca6cfbf130a40cda4f6b6447c8af27adf6f848b583fd2","sha512":"71881cba24b52d99395cdacc7b1dab46832209e6bc6e11031670cae9f7a84c1ebea4535400ca8754192582f6e01ca8cd586561bde4641ba0cc89e16a4f5c8d36","ssdeep":"","tlshash":"39f0aca5e3880429c7048e8d670a7b79334be8ca5a19c754f8511a6a99c5cd7a9c22ac","first_seen":"2026-04-04T12:25:08.878829Z","last_seen":"2026-04-04T12:25:08.878829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 04 Apr 2026 13:12:43 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boNwNSV2Zc20b1LArFrbT0NeHCzAEjGE3BvcdVCuV2eUwLKb6Yk9wm7Jd2fgtZ0KPFdwG%2FTEbZWQsTVbDNuFOo%2Bdhw8cT2E3AchNe3C%2BHTNwU0z1C%2BF7iXqY4%2BKOt4ebSp8EZRzy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e704aa5a9bc5ebd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/img/service-3.svg","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /img/service-3.svg HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cErHZOjrdkTh9OGJWH84dPmQVrH8C70OriRtj4CHtKprGFJQYepKpIKZtheOPVlBQmxDK%2BDWgpLjjdnRgOVa3cT1%2B0E%2Fu%2FOB%2FCLh27U0OUrHnzANWc76qR7x65rqGve9DKqQlypE\"}]}\r\netag: W/\"69cd0219-25f\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa5a9b95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb03fa77a88225746dc1ca654bf1fc1a","sha1":"0765a60482aff3515d888dad1a00d0866bf800da","sha256":"8387de21e79a6a80c2d094d195bb32b47d8fffe4ef0212999d49fa2ad176f2bd","sha512":"c9874621b800fe892f37260ccdebff7daf212099df4d7a07780c2f700f0ac07f324f2e06a20fa62540a9d04470167cde535f34ad40a3459ba1fe7ad8c96ca7e7","ssdeep":"","tlshash":"5df00ca5e3880028c7048e8d230b3b39334be8ca9a19c740f8410a2a89c5cd778c22ac","first_seen":"2026-04-04T12:25:08.88163Z","last_seen":"2026-04-04T12:25:08.88163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/js/main.js","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BF%2Bpw018DPx8J91aC0YnG%2FLfgqh8P6nac4ahTpQ419%2BytZ09mATeXbk2tYNq4xFkk%2F2gNPgMIu%2FfZgoMEfWsf0U8SyOf1bk4aNgXgTcdBOEFgh0kaaXx7j8DNtnlESW95hyfsPZr\"}]}\r\netag: W/\"69cd0219-13ae\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa5a9c35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2ae2db813a917599300cc59ac187ca52","sha1":"e989499c3f0d840406ba101d56457dc095a8dbf8","sha256":"fe4ef71a6fd93f7d4cce6c217c6283a01ee20e7e2053f7c6f23370ea2f49cc27","sha512":"89e43a850a56b6ee07fd805839167d3c161ddb161ba51f1f8c047deaa8ea6468e5448b69be2ef56d37a14583e6ff2bfc8ed0064e04675e59f1e3905c38e001ae","ssdeep":"96:7e/4QWuCVOtE6XWiwpOIOIcrwJ+DAnUUMX7XnHgZpSH:MW9O6oWixbUJA4SHgTY","tlshash":"a5a1003b699600757db3e0bea7df9185b5a130033c44ca11b85cb4061fdce811a79bf9","first_seen":"2026-04-04T12:25:08.884699Z","last_seen":"2026-04-04T12:25:08.884699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://estadao-finance.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2509375\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtNWvGUhKg9ftSPDMDnZzbrL3r7ekCA26XOVJ7NEYbHYThV%2BMiUbGN9nFO1%2BybK%2Bz1une5boSYgL9KzNGrVTYBwFDyIm%2BmPVJQ920a%2BAfvK7NUFhrdHXEOhAmJcule9Mm3s%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704aa68ff7569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:05:33.986787Z","times_seen":21876,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/favicon.svg","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIcpo1NWm%2FhSvvzJzx%2Fbn%2BdnJZgIpwY4qtqdbrBe86ltCxQ8725%2FwmmsP7C5m3ADIoURb5IetKRdXjnhd8ATxC2o0O60BjDzsuKwpa48KU%2BXg2X%2Bvlb9yNi%2BdJCYUaxTNKzToBRX\"}]}\r\netag: W/\"69cd0219-100\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa70d205ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8891116e6b827c990f7e43a24c31b69","sha1":"d074bd85f96a51ea6ef69ab37dac3038f6ef2f1e","sha256":"fad18483e5c6f7747af15e4d7fa074f6b9f1f70ceb3eef4debc9dfb5d007d245","sha512":"15802fbef67ae2693b8879aff0fd8da184cd144dea7c72059a380649076aa6d24bcf46262a9dc72bf34e49fbedb1c8eb08f0593be2118378d02ad9116047a074","ssdeep":"","tlshash":"c0d02e15e0989604cb088d03b72a3929224ea8c9aac18a28f1e0211658c98a3298930d","first_seen":"2026-04-04T12:25:08.886889Z","last_seen":"2026-04-04T12:25:08.886889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:24:42.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZWUvk7A%2BGTi7%2FnvSaLG02qnbkaqJQQAZSqH6SfiLl8jKTnaTKvCrnISplo3heJuBDTcvrWG5444Wvm9KTKk1poxN1El0vOJ66bQTcHFGp1xtgFHVuFKtQSfk0QIZAXh6L%2F90oYK\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e704aa36bd556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19330,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316)","md5":"a017ec4519017db40ebb17cc4c08ee7d","sha1":"c8039495a0b9056f60a9004d5b4f57f1e34d0469","sha256":"9cbd37e372e6be4e7e4e7cbce2f46ce54901584426e68eb7f7872b995bc0c09c","sha512":"56c38603cb69670a45d5f3696b73d1a03b074892e39a977913f79c62d8f79cfc0a3303505a01922b6c5e8f28138daac556d31df9e0269b36f1fd1bd65f1514e8","ssdeep":"384:RrZqEQ/pOM/ttxWfK9oPPzxckZVRmDGoPXVA/LisUcgVFF:cOM/Gzz2kZS3v6/LhYFF","tlshash":"6682a432a9f1242701a383c57791af1ba9d18647c62b4a1573fe8bc98fc2d92c96351e","first_seen":"2026-04-04T12:25:08.888972Z","last_seen":"2026-04-04T12:25:08.888972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":54,"dns":38,"connect":1,"send":0,"wait":103,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://estadao-finance.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3496994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzXVMinI9UBPDDJFOzEbrQbgEkE3yUfWeRACQ2Yayz9lRHMabEO2M2FO%2FGQ%2FY3e0qkrk5Bq58QIIJ71ocx8BGPJZqTW97JZIBZ1D4cJ1Z8PMTXGs9m2%2BjwzQuAtkamLEV0U%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704aa5bf4f569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:28:08.672412Z","times_seen":18004,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":8,"dns":0,"connect":2,"send":0,"wait":6,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"estadao-finance.sbs/img/hero.svg","fqdn":"estadao-finance.sbs","domain":"estadao-finance.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://estadao-finance.sbs/","date":"2026-04-04T12:24:43.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"estadao-finance.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:02 GMT","end":"Mon, 29 Jun 2026 14:55:01 GMT"},"fingerprint":{"sha1":"F4:E4:ED:2C:F2:1A:A5:98:F9:09:16:17:2B:CF:73:C4:F3:11:3A:A0","sha256":"AB:4E:E9:9B:C8:18:99:0F:47:9E:E3:5F:D6:C5:58:08:FA:45:E2:B9:7B:B0:37:2E:41:BF:9A:33:DF:FA:1B:4F"}}},"request":{"raw":"GET /img/hero.svg HTTP/1.1\r\nHost: estadao-finance.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://estadao-finance.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtVFuHbFKvO6fb0JlzE%2FRQ%2FPoAFZbF%2Feb0g24ABD1LvQKpkkdWpHJswXmtAsnHADyRxmFBuwBHGc%2FN%2FD%2BQ0xnFSnnzRMsm25XQBVQnBH6jAAYF%2FM3xaQowQij2qgsEajrU7Z5%2BCJ\"}]}\r\netag: W/\"69cd0219-65a\"\r\ncontent-encoding: br\r\ncf-ray: 9e704aa5999d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02d036ef735d19a19405857e83c21b2c","sha1":"8af0c6e5b19771efdf478864d449dd9a1d5796a4","sha256":"5e967adb23f8b689e9d881899831ac93f55c0873aa30a61cd98e4e186a336ceb","sha512":"81b6189a87b6786fd96a66ed21d3bf7d82b8a0732e55c76e30f7f5b5ccdea8b120931d3b9b83241087efe061fe808a077dd53aeffaf4b5788da49105f504d58d","ssdeep":"","tlshash":"4431c0b0d38c5416d7048b0c6309bb527787f4c2ab59ca10f5582b5e66c48eb9cda3dc","first_seen":"2026-04-04T12:25:08.89241Z","last_seen":"2026-04-04T12:25:08.89241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"estadao-finance.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}