{"report_id":"1dc5a879-89a1-409e-8531-7f3f97121b1a","version":6,"status":"done","tags":[],"date":"2025-11-02T18:10:29Z","url":{"schema":"http","addr":"mail.carlinicerimonial.com.br/","fqdn":"mail.carlinicerimonial.com.br","domain":"carlinicerimonial.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.152","port":0,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"webmail.task.com.br/","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"title":"Task Webmail :: Bem-vindo ao Task Webmail","dom":{"size":9265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1672)","md5":"bcdb4c6eeb54fe4333620b320d90c391","sha1":"c3e835e822aa6c0ea43eeb8c9c47d9bd93797af3","sha256":"435d7b4ccea5c093b3c0fbdd7324663967baa85c88bcfa1c64bb358753332e4a","sha512":"6a8d2bfd97a50822e56961fe6c866082d47a168843d65f1bf09ba9e1f83b5b812111da60b71b0ff3441567511eb0a8a8f1661b203a4193c35d9be802dc750a96","ssdeep":"192:sjvU6KJodCgYAtGcO6Emjx3uFZH22jNtCqdkO:2bEodCgnTOQ3uFJ22j2wkO","tlshash":"3d1206625c688f33122109ece49fa6c9a8ee8567e621bc58f0fc974d0fe4f9094f7610","dom_hash":"domhashc9a18650a187ddc1fde2c2a4060d8ad8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"mail.carlinicerimonial.com.br/","fqdn":"mail.carlinicerimonial.com.br","domain":"carlinicerimonial.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.152","port":0,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-07T18:10:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"mail.carlinicerimonial.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webmail.task.com.br","ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"domain_registered":"1996-06-13","domain_rank":2588313,"first_seen":"2014-01-09T23:12:39Z","last_seen":"2025-06-12T04:51:30.336252Z","alert_count":0,"request_count":26,"received_data":1448840,"sent_data":13760,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"mail.carlinicerimonial.com.br","ip":{"addr":"177.93.104.144","port":80,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"domain_registered":"2006-07-18","domain_rank":0,"first_seen":"2025-11-02T18:10:30.124576Z","last_seen":"2025-11-02T18:10:30.124576Z","alert_count":2,"request_count":2,"received_data":8826,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webmail.task.com.br/","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"acfabd839fd541376914f5dcbae50bdf","sha1":"aa94c19941e59b7704cf78cdf2d44f728c159518","sha256":"4436346c6085e51b82fb34035696bdbf09a4292baf18651fa3af0e93af261312","sha512":"b2615f5b21f923b903e02e503ec2a97cf071054eb504bb901b2a64995eea47a20b860c07fdd293d41b09ed67ef3a1bd923ef9e352be833557b8a0d3467cbafa2","ssdeep":"","tlshash":"3be0c2b498940033152713287d38cf583936901320a52ec4bead52e10f70d634005e90","size":350,"data":"","first_seen":"2025-11-02T18:10:35.674472Z","last_seen":"2025-12-31T18:18:55.934515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/custom.js?s=1696885122","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"600eef3b1888fcb5b81f90ef1be66a0c","sha1":"802edcf7028be8d1b8f9126051e7067031177c8e","sha256":"b7243fb8f6e147ee5da76080a72520527580f2a250e66d1e52341e1778348bd3","sha512":"c64a94404cb2e738165d62a136c7a23529092bc91feadedbfb42ddda0bb60c2e2ec202cbf020abb961532289b0eb139918fca5a182f2608f8f80ccca2c72fd07","ssdeep":"","tlshash":"fde02354a1ec362105740f7a7907540dfd714439032215d2349110802d5c35ca3e3cc2","size":299,"data":"","first_seen":"2025-11-02T18:10:35.658056Z","last_seen":"2025-12-31T18:18:55.932263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/app.min.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a470bdd0d971756b1507af9fc9bc367","sha1":"be45810e4fb345e642309af953b3783ddc5bc7ec","sha256":"4dcff48fc4abbddf5479b617713c157e0f03860a19f4e3dc42264c079b9781bf","sha512":"ffe15499f0fdc5e123e6cb0655bab8b6b850385b5cd37d26100578e4a5bd7d519020b95a8779a477b044075cf2f124f260d8cb48ea80665143dc8c5cb77f1230","ssdeep":"1536:LL5MtmX/Df5WOgLuUvSDQyW777BGBSBlZ1mn7CVuG33gD3YhsKO70cEc7vnEwFCh:pMeUOUy596/D0wlsdxxntzRHVXMvDFhf","tlshash":"3204d68a32a4fd2106e79763745f31026133a609e405980db56cd9eb4e78f4a3367f7e","size":174141,"data":"","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-05T17:49:46.418418Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/jqueryui/js/jquery-ui.min.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb752c6ba6b88ffa885f1d2a6492ef58","sha1":"e20616dd323e0313e75de00ac055b7d249cb9056","sha256":"59a4c9a75c48cf979e66c5641230bda0e15dfff292666e56ffb52a5a96d78834","sha512":"684a0b794ebbe5ec4f4edbbf7330bfdae7632d78c42657b540bd2b6d383406c34ca9b3c4400ac849059428b76e67824ae84c480c1ed338cb28781f3e98d9cbb5","ssdeep":"3072:amxBUnLO18G0qSLOZD5kn8Ks6BqMi/X+1ghPuQo1Q7SV7opX0MY:ALOnlfc8Kw4ghP70MY","tlshash":"3844084d72003a2295dfe2a5143b2a0fa237515da605845cb43dcede9ebce4431bbfb9","size":259776,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-05-07T12:09:29.988158Z","times_seen":1398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f18fcc3332b78ebc1c681fb9256de457","sha1":"51846c17eaa8fdc8c0e072460c2b9ab5d522f707","sha256":"d2404ef5a5741fb236c7fcf85904e7a7c86dfe7ffbbd9f0732ed312125d2500f","sha512":"0bb6ee150d08b230430128336fc09f1ccde75654fb99d10fd3b54839b70277e52ddbbfe1a13be608959d5711f9d5ef8e2be1e29f5fad8e0e77623eb6d8ff4802","ssdeep":"","tlshash":"c6b01108bbbe0a288832002a0b0b000c008020032208c8a03a0c0a800f8830ca0822c8","size":94,"data":"","first_seen":"2025-11-02T18:10:35.675656Z","last_seen":"2025-12-31T18:18:55.935428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/jstz.min.js?s=1695024816","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5ee3ce2023c717fff34cfe5d3b82599","sha1":"36f532887c2bf6bc7bdd06e68e96eafe2051a5f7","sha256":"716ece8deb8412f7ec95ab395c92f6515bb8d8b792fd7480c014cdc6f063452a","sha512":"71a59366516e9d2142bdfaaf6ea3de1b8cec832f15cd8cbb7a3cd22870715544dea0df6f8a5211a73682f856a0d0089163708b0306c27c787a058c4a3e3587d7","ssdeep":"384:r+PkZoDTmE6BZTvHWKGVa3v1NH9kaIvrHgrz:r+8ZoQ+RV4fkRDm","tlshash":"0c52a3df152c90bb06a556f93c09fb85ac1ed418ac8adfc12ab5f1a924d0cd7bfe0548","size":13835,"data":"","first_seen":"2023-03-07T12:02:32Z","last_seen":"2026-05-07T13:25:03.823367Z","times_seen":3090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/libcalendaring/libcalendaring.js?s=1631815802","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"499581816fac28a386397e469b440a43","sha1":"c6191dcf3517a63d65d36153a6ccfbd11a9df949","sha256":"6882fed63ae6b6bf1c7339c50836d21c6eda6ea08559d0b2bfeb86d4b7a17283","sha512":"91c58b59f23fba80bfd0c39e1f6b88dc487e4db06bba491238fe714161d1bf799540d016b86b494cf4c7a4f8cc04ac9810dbd4c9d9991d4040a6d794bd6eb4c5","ssdeep":"1536:odMRGmUBo2EHZOODJ/12o/pT62Ll+4rlf4:AMRGmSEggJN2o/pTfl+sA","tlshash":"9743934aa4b720229637313d5bef514a7735c10b5809ed04bd5c67942f84e38a2baffa","size":56087,"data":"","first_seen":"2023-03-11T12:40:49Z","last_seen":"2026-02-16T14:00:46.11653Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/deps/bootstrap.bundle.min.js?s=1695024828","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fb9784331ba8d606ca6e0877b9466a3","sha1":"2c8dde7ea3cee76f061c06bb64f9f00497f893f3","sha256":"19b51730c10082760e6d9b82c1342e60855f98d2666c64e4eb758d26b1a0c840","sha512":"a34c44d07455be21ca911be580524a6dc5c4d4cb91f46030c26c4d258ae9a46334e65a27a57aeb987c1801238919e6ffac280bbb5542899a8956c5577e7f0c40","ssdeep":"768:du/iPy7+zZHVPVBNpwV7BTUB6/YLF/fB+4ed4MMAja+t+QnXLb1+uaR+orWieOJ9:deiayUYLZ83dPD3GAP6f2jX+i/QB","tlshash":"8a83834972a0b472069f61a6807b4a0bf2372c5da107b01cbad9d4ed1f7cd893167f7a","size":84104,"data":"","first_seen":"2023-03-07T12:08:25Z","last_seen":"2026-05-07T14:12:35.333256Z","times_seen":2540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/ui.min.js?s=1695024810","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"883dc655419dc4ffaa8aaa466544b35a","sha1":"dd65c3126e8194457d6fdb75a06351bac569a8df","sha256":"5a6a4d9f6477096170f94cd9a9ed3047c840b537a55a7942f3aed2a34dbbe426","sha512":"2ff182a07f1854d482c68c44b6f177a4473fe2d2cc88bc30ae37957c471a651c4989619e6517a4ea368c2cdbf651640c9ac60a660ad731018a974b70bb0a3e51","ssdeep":"768:aOyiEHYQBcCP7uaHxHRb3a01UTdFdRSitp0S1gVYYQHkfW7hCZ+gcv5kLpQpsr:LiSORHR1AdFhyV+7YZ+gceJ","tlshash":"8853b5ec726135b612bf226720afe10661334529cd119841b26d94ea1efcf8532b7f6f","size":60715,"data":"","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-05T17:49:46.407334Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f504bfe33e0e5ae48df17e6245190c6","sha1":"c09c5794a930a2c2d92203c4130c73a0ab367ada","sha256":"f183c8378b04b303aaaa7e06b0fb4b290459fd48118af56ee9a565b591cadccd","sha512":"1bba641bab02318b0dd5a810666b3ce821ed7f96b3eae782199162e74dfd44645131640e7f23e5cf05154f76b17f63ec051cb98f1de1552d79ca8080944def00","ssdeep":"","tlshash":"72717475595089336b6c15d974cf07ca2b8c565732733d0af57dfb0d0ba8b25e0da460","size":3714,"data":"","first_seen":"2025-11-02T18:10:35.676692Z","last_seen":"2025-11-02T18:10:35.676692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/jqueryui/js/i18n/jquery.ui.datepicker-pt-BR.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bc30f856ecd69439c1c3fa74bd576a8","sha1":"9b7346d2b9fa282a5b89b522fa06bde975df8954","sha256":"c4397a28fe891dbd2552c74bf2e44ef34e1f1b3d0f972824138d6d64c7ec1259","sha512":"daa226141acdf63f9709c5dddbde48c153c8a55f65bc3d4e24eb911f6bd0eedfceb478d1be81940802a8406479dab0707b7a96892a855aa88fdcba1807091543","ssdeep":"","tlshash":"e411f0da55a44bdf4b3066a3781c4d1b0ce2898219bd8406fe1f1ad632d8c4608b5c92","size":1065,"data":"","first_seen":"2023-03-07T12:05:17Z","last_seen":"2025-12-31T18:18:55.922655Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/jquery.min.js?s=1695024816","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"82229fca667f868f77759d78edaaecaf","sha1":"12f2612174d39a99b21379af57b5374ab4efdb55","sha256":"5641ed21773230a8110279658abac57bb5b4abc7bf4091946c5e61e8f0021f55","sha512":"c5f584e0aef951de09031dc54d381b534a32ffc6480420a4af369a6f0c50bad2cfd6d5743982cc498030abdfdb78ff772b710bce8b843305e4bf6e533c936594","ssdeep":"1536:jZAjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvz:iYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"209308ddb2c6702257a721ba007f510bf236199d6c4d8450f129e8e9bc78a4e827bf7d","size":90926,"data":"","first_seen":"2023-03-07T12:08:25Z","last_seen":"2026-05-07T13:25:03.817475Z","times_seen":2407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/common.min.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"93b641568b923a23e7493d5f1e8462fd","sha1":"5c2c2074d42db25fc2da651656e59033da7579c7","sha256":"08bf7a712ce3944d218f618ee6fa4131bd97bcc1891d1f9b7bd2ba116baf27fa","sha512":"cb6f3386dda69bf45590cf43ce33dd1f09f76eb1b1fb6e9cbc0aa6ac0dc01f6f6b87daa36e937e6b9fff3bcaee893bb577c786c5ec05a951e091e13fe3c6c3d7","ssdeep":"192:KB5Inw2doswR6NATbL+Ifs8VkCL/3hsiMeJ1+1tjUKLd+g1FyT6kx4B:KBenw2doswRoA/6IfVV1LJ16t51qnKB","tlshash":"6e4229cf3295647102696aa7267b028fb13685b86c7710bcf664cce4bc28c59552fff8","size":12789,"data":"","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-05T17:49:46.41761Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c5b963f8165f56493874746adedf97","sha1":"e09c78d91814eebbd23a7080b6e90e06f4c84de1","sha256":"1a1f1580c0b8e2a2101cf9e01c596bcee15c2e38657b69ec8bd9ee4a526fd168","sha512":"eef06f1b999cf008c8ef5957c5b2961d9e664deca82f96e0a2a4438772046ce2f181af3cc0a2764a4fc3a74f2ee50052b3dcc2c5137d92dd447ef9ef2858e56f","ssdeep":"","tlshash":"9580008cb88f38320032302c22fb808cbc3b20803e3a300002cc00c30f22bbc322282e","size":35,"data":"","first_seen":"2023-03-07T12:03:00Z","last_seen":"2026-05-07T13:25:03.826121Z","times_seen":2075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/tsk_forgotpwd/tsk_forgotpwd.js?s=1644024857","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba61beef7675c3628855b011da0b92a","sha1":"1eaf880f526de82e18e457893dd6f2b676c31d38","sha256":"1e15790dfdfb94ee99ce82d0bd12e1c6bda64f835455d935202cf4ce2c75d94a","sha512":"164115eebbb9b6b63cf85d8e1cccd76af5751555661dc696162c582f77b19c24a435e3293580db0fa4dd3d2de27c29f29e560f049b1ae8cd44b8e41086977802","ssdeep":"","tlshash":"78f0e169fffc4056d030300ea9aeadece53e40f36d08ec59adda2a742d54a5a2941c97","size":600,"data":"","first_seen":"2025-11-02T18:10:35.662776Z","last_seen":"2025-12-31T18:18:55.923776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/fonts/fa-solid-900.woff2","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:10.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/skins/elastic/styles/styles.min.css?s=1701705686\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 75440\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:10 GMT\r\netag: \"126b0-650806aa-1a6ebf;;;\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:30 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-05-07T15:53:00.111722Z","times_seen":20801,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":688,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/jstz.min.js?s=1695024816","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /program/js/jstz.min.js?s=1695024816 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4925\r\netag: \"360b-650806b0-1a6c13;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13835,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12309)","md5":"b5ee3ce2023c717fff34cfe5d3b82599","sha1":"36f532887c2bf6bc7bdd06e68e96eafe2051a5f7","sha256":"716ece8deb8412f7ec95ab395c92f6515bb8d8b792fd7480c014cdc6f063452a","sha512":"71a59366516e9d2142bdfaaf6ea3de1b8cec832f15cd8cbb7a3cd22870715544dea0df6f8a5211a73682f856a0d0089163708b0306c27c787a058c4a3e3587d7","ssdeep":"384:r+PkZoDTmE6BZTvHWKGVa3v1NH9kaIvrHgrz:r+8ZoQ+RV4fkRDm","tlshash":"0c52a3df152c90bb06a556f93c09fb85ac1ed418ac8adfc12ab5f1a924d0cd7bfe0548","first_seen":"2023-03-07T12:02:32Z","last_seen":"2026-05-07T13:25:03.823367Z","times_seen":3090,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/images/banner_desktop.webp","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/images/banner_desktop.webp HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15188\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"3b54-657895e4-1a4286;;;\"\r\nlast-modified: Tue, 12 Dec 2023 17:18:28 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6e62ba38c0265d101cb96ce1c4e6d98","sha1":"4ac8e70bcc7c2f94f73005a4144c19b5a6aa1ed8","sha256":"afd79c3ed7ac72ba381f68d04d543c39c00e3a6f2a2a5772905a6fa892ea8f3b","sha512":"f21177c1e44cec8b39821b7654616e0447ce870cca65f5c89fadf197f233c892e706b76b5036c75e1b007b6f813f525de383711c72583cb1de9c736a37878a5d","ssdeep":"192:GN8knT3ftQnlbw+qBjAmrea0mS6oyfgue5ZRQs1C7EEL7USfGLOnDmSpOM51m8dS:GtnDVQnlbWcEvEZRkAIX+8dxw4GXQxS","tlshash":"4a62c0433912e0bdcf40ce87baf47d6744176b6428c5e017f921e4697e20296eee9a63","first_seen":"2025-11-02T18:10:35.64841Z","last_seen":"2025-12-31T18:18:55.931364Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/styles/custom.css?s=1702403680","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/styles/custom.css?s=1702403680 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 1606\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"2245-65789e60-1a45ad;br\"\r\nlast-modified: Tue, 12 Dec 2023 17:54:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8773,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8716433c81d97f6b34ad3fb24e4c5d86","sha1":"8a5f4f65eb975223f511cf8217932c3482e08663","sha256":"e4097f664ba5fd35c50b491335691b8e638ba256d9421b4cc40a3efd179d2069","sha512":"7ed90172ff287a154b2b4b5e7e10f1a14324627c26321a8360112b96ecfd7bdc0d9927e4786b87ccc66a999e5804ca68670370eaac9b6b1788b668e7cef59463","ssdeep":"96:Gi8cvdqiv05+HG+1ujusB9Orj4HVuAcUJcPCpjfFu3W5lL3lLuMjT:G9Kp8+m+wiACuVriCRfFkW5ljB","tlshash":"050230b55e0629442af2eb3d7f132e5aeb635013e74559287ee46108dff8b242489fcc","first_seen":"2025-11-02T18:10:35.649709Z","last_seen":"2025-12-31T18:18:55.919873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/tsk_forgotpwd/tsk_forgotpwd.css?s=1645822511","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/tsk_forgotpwd/tsk_forgotpwd.css?s=1645822511 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: W/\"a4-6219422f-1a6a7d;;;\"\r\nlast-modified: Fri, 25 Feb 2022 20:55:11 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"393c57149fc3d51b512ff4c52e7e3ca0","sha1":"22d4153d482cad6d35685b40d3136ad9b8c34db0","sha256":"0f5e73a22f55081c1e38eed5b1af3d0f1e438b1eb31900e5674a3d4d99dc3cfd","sha512":"51a6238a57ae8a513a8eb6ac023201fe05ed0635bdf70813036e2645188d0d3e8c1a8453be82f1cadf3254ac49ecaecadd8f876d485599cacf22596a3e12e3b0","ssdeep":"","tlshash":"17c08c117b6218a8e00cb05dbb62f8219f8b9823dd9fec30a8c5aa28c2a03a0529001c","first_seen":"2025-11-02T18:10:35.651009Z","last_seen":"2025-12-31T18:18:55.927609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/images/banner_tablet.webp","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/images/banner_tablet.webp HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16480\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"4060-657895e4-1a524b;;;\"\r\nlast-modified: Tue, 12 Dec 2023 17:18:28 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e83695c5c7afa95c6aa4e6dc01813","sha1":"74a41f31c03b2f0171e389c52427e5e6a0bee4f5","sha256":"8e9b0f8ed1408105ba89e4983ccba8965c014145e665073fe8a868a10c2aaf71","sha512":"486af9be74c05ac202c494a66c44f1412311d2c1756c13b052eb47def8338d8488bae70205c647dbf6cb80cc386c5930a46db87a5ea4eb748a5ae66fe450cfe1","ssdeep":"384:Uen+/qBcRklq5u0bp3VmZdSxRFakT2AefmNahy/4ul0keNfHTxEhnBbC:P+/ycJ5FdVmZoxDrT2AegX/4W0ke5zOy","tlshash":"8972c0ffa722507083965fb6fdd6b637063c05696f8b953c059d8c3301680abbe15b81","first_seen":"2025-11-02T18:10:35.652002Z","last_seen":"2025-12-31T18:18:55.924935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/deps/bootstrap.bundle.min.js?s=1695024828","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/deps/bootstrap.bundle.min.js?s=1695024828 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 22478\r\netag: \"14888-650806bc-1a6eb9;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84104,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"3fb9784331ba8d606ca6e0877b9466a3","sha1":"2c8dde7ea3cee76f061c06bb64f9f00497f893f3","sha256":"19b51730c10082760e6d9b82c1342e60855f98d2666c64e4eb758d26b1a0c840","sha512":"a34c44d07455be21ca911be580524a6dc5c4d4cb91f46030c26c4d258ae9a46334e65a27a57aeb987c1801238919e6ffac280bbb5542899a8956c5577e7f0c40","ssdeep":"768:du/iPy7+zZHVPVBNpwV7BTUB6/YLF/fB+4ed4MMAja+t+QnXLb1+uaR+orWieOJ9:deiayUYLZ83dPD3GAP6f2jX+i/QB","tlshash":"8a83834972a0b472069f61a6807b4a0bf2372c5da107b01cbad9d4ed1f7cd893167f7a","first_seen":"2023-03-07T12:08:25Z","last_seen":"2026-05-07T14:12:35.333256Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/images/favicon.ico?s=1700502318","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:11.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/images/favicon.ico?s=1700502318 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:11 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1682\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:11 GMT\r\netag: \"887-655b9b2e-1a51ec;br\"\r\nlast-modified: Mon, 20 Nov 2023 17:45:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2183,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"8fb77fe97c5e17a376636fed3b7a2498","sha1":"10a4dfed15f0742f8cfb752a4677db75b307e4d6","sha256":"5202aa11966455f7790157ade9974c4e174397db8286ded5e740b4bbf6bf38e3","sha512":"46f10dd2fa80749d1ff09f6a914f50cf01aa786b1d82b7e027ae8daa87ea2eb6c49fe3f8466a53d401b9493c69a192fc2471ddf61d8a3c74b0a12b3a23741e2a","ssdeep":"","tlshash":"1641d7c37a1820fa462740fa286acdfc8557090b7b71d58357f39c43b69690ccad003e","first_seen":"2025-11-02T18:10:35.653986Z","last_seen":"2025-12-31T18:18:55.926134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.carlinicerimonial.com.br/","fqdn":"mail.carlinicerimonial.com.br","domain":"carlinicerimonial.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.144","port":80,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-02T18:10:08.256Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.carlinicerimonial.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sun, 02 Nov 2025 18:10:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://webmail.task.com.br/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8630,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T15:57:26.609448Z","times_seen":14794715,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":216,"dns":1,"connect":216,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"mail.carlinicerimonial.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-02T18:10:08.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3478\r\nset-cookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk; path=/; secure; HttpOnly\r\nexpires: Sun, 02 Nov 2025 18:10:09 GMT\r\nlast-modified: Sun, 02 Nov 2025 18:10:09 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-language: pt\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8630,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1672)","md5":"fa63dadf9fe939da7a779e90c0a2c9b0","sha1":"7baf2b6303e066aeb8cb5ad7b5a4c067fccef457","sha256":"767874513c10165fb49be11b532493ed58735c92c7439bc505302f0d0fe937e8","sha512":"ff5f2e959eabdc505cc65d84487abc6b47dd443bf0c6a07919d1d6a7a9561db4e593e8a12f05183c80c671c4e7df52ea66540c78cc1d6cb9f51311b630df3788","ssdeep":"192:CGvU6KJodCgYAtGcO6Emjx3hh5B2TNtCqdkUz:5bEodCgnTOQ3hDB2T2wkM","tlshash":"1702d7629d598e33162105e8a49fa2cd59fe8566e221bc58f0fda70d0fe4f64d0e7610","first_seen":"2025-11-02T18:10:35.655783Z","last_seen":"2025-11-02T18:10:35.655783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1443,"timings":{"blocked":611,"dns":155,"connect":214,"send":0,"wait":221,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/common.min.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /program/js/common.min.js?s=1695024809 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4939\r\netag: \"31f5-650806a9-1a6c0d;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12789,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11653)","md5":"93b641568b923a23e7493d5f1e8462fd","sha1":"5c2c2074d42db25fc2da651656e59033da7579c7","sha256":"08bf7a712ce3944d218f618ee6fa4131bd97bcc1891d1f9b7bd2ba116baf27fa","sha512":"cb6f3386dda69bf45590cf43ce33dd1f09f76eb1b1fb6e9cbc0aa6ac0dc01f6f6b87daa36e937e6b9fff3bcaee893bb577c786c5ec05a951e091e13fe3c6c3d7","ssdeep":"192:KB5Inw2doswR6NATbL+Ifs8VkCL/3hsiMeJ1+1tjUKLd+g1FyT6kx4B:KBenw2doswRoA/6IfVV1LJ16t51qnKB","tlshash":"6e4229cf3295647102696aa7267b028fb13685b86c7710bcf664cce4bc28c59552fff8","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-05T17:49:46.41761Z","times_seen":24,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/custom.js?s=1696885122","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/custom.js?s=1696885122 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\netag: \"12b-65246982-1a6eb3;gz\"\r\nlast-modified: Mon, 09 Oct 2023 20:58:42 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":299,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"600eef3b1888fcb5b81f90ef1be66a0c","sha1":"802edcf7028be8d1b8f9126051e7067031177c8e","sha256":"b7243fb8f6e147ee5da76080a72520527580f2a250e66d1e52341e1778348bd3","sha512":"c64a94404cb2e738165d62a136c7a23529092bc91feadedbfb42ddda0bb60c2e2ec202cbf020abb961532289b0eb139918fca5a182f2608f8f80ccca2c72fd07","ssdeep":"","tlshash":"fde02354a1ec362105740f7a7907540dfd714439032215d2349110802d5c35ca3e3cc2","first_seen":"2025-11-02T18:10:35.658056Z","last_seen":"2025-12-31T18:18:55.932263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/fonts/roboto-v19-regular.woff2","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:10.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/fonts/roboto-v19-regular.woff2 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/skins/elastic/styles/styles.min.css?s=1701705686\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51116\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:11 GMT\r\netag: \"c7ac-650806aa-1a6ec7;;;\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:30 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51116, version 1.0","md5":"9549360090baf2eb8b25d3a9708fc19d","sha1":"3229ae839d33696d39c89dc0d3e193fe985f1da4","sha256":"a7bf1f115e60e0c8f3b335df66d4d77baaae4eb11d2cea2cf7c5b4693403a46f","sha512":"8f4b3ad035001539b9e5926454d7f9a704620c9cb532429db07ecbccd7bdbfafe0a23b3cfbbec154db98e1ddd167596265a31da2a2490bb61c931a7a66aa8e52","ssdeep":"768:e6d0/tqqCCys/iSuKvIhGeUQE4E5B9hJa8SnyI3npOhzX+qD7KRuwPxxRvIhvv:Q/Iql/huXhVUQE427NWpOh75KwIxRvI","tlshash":"cb3302d7596eb35f90f56b88337549286a37a670a78c84fb4d73e8ccc5824a8ecc414e","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-05-07T15:11:41.260651Z","times_seen":5398,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":690,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/fonts/roboto-v19-regular.woff2","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:10.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/fonts/roboto-v19-regular.woff2 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/skins/elastic/styles/styles.min.css?s=1701705686\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51116\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:10 GMT\r\netag: \"c7ac-650806aa-1a6ec7;;;\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:30 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51116, version 1.0","md5":"9549360090baf2eb8b25d3a9708fc19d","sha1":"3229ae839d33696d39c89dc0d3e193fe985f1da4","sha256":"a7bf1f115e60e0c8f3b335df66d4d77baaae4eb11d2cea2cf7c5b4693403a46f","sha512":"8f4b3ad035001539b9e5926454d7f9a704620c9cb532429db07ecbccd7bdbfafe0a23b3cfbbec154db98e1ddd167596265a31da2a2490bb61c931a7a66aa8e52","ssdeep":"768:e6d0/tqqCCys/iSuKvIhGeUQE4E5B9hJa8SnyI3npOhzX+qD7KRuwPxxRvIhvv:Q/Iql/huXhVUQE427NWpOh75KwIxRvI","tlshash":"cb3302d7596eb35f90f56b88337549286a37a670a78c84fb4d73e8ccc5824a8ecc414e","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-05-07T15:11:41.260651Z","times_seen":5398,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.carlinicerimonial.com.br/","fqdn":"mail.carlinicerimonial.com.br","domain":"carlinicerimonial.com.br","tld":"com.br"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-02T18:10:06.393Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.carlinicerimonial.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T15:57:26.609448Z","times_seen":14794715,"resource_available":true,"data":null}},"time_used":1415,"timings":{"blocked":1415,"dns":0,"connect":215,"send":0,"wait":0,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"mail.carlinicerimonial.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/libkolab/skins/elastic/libkolab.min.css?s=1696942274","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/libkolab/skins/elastic/libkolab.min.css?s=1696942274 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 20322\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"19c85-652548c2-1a4a9f;br\"\r\nlast-modified: Tue, 10 Oct 2023 12:51:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105605,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (989)","md5":"1e9533bb9c5f5a3c5152201878da4ed6","sha1":"e40ce9717bf15a7822a74b1dd3fdc924c32e4509","sha256":"def4a045f633c9eeff250b0a84f683a04b663d950328c99b686860bebf8e1ba6","sha512":"7d65dc305d859b96d1c6a8204e06eab797611a58bd745fe19fb61a9502bbe49be5992a8105bceeb22602a68e08335220626fa3f32a41f3bbd6aa923802109241","ssdeep":"1536:TCwjq57aj31r6M9jxuuLz3aO/5YOjV/YoSdU7bMHXuP9w4:TG57a2M1z","tlshash":"90a3c4dd5eaa09515613d1ea744132d4f72cc30a9e1fec2cd9e1394c9dc46e8a0eef8a","first_seen":"2025-11-02T18:10:35.660022Z","last_seen":"2025-12-31T18:18:55.921677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/libcalendaring/libcalendaring.js?s=1631815802","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/libcalendaring/libcalendaring.js?s=1631815802 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15424\r\netag: \"db17-6143887a-1a65d9;br\"\r\nlast-modified: Thu, 16 Sep 2021 18:10:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56087,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"499581816fac28a386397e469b440a43","sha1":"c6191dcf3517a63d65d36153a6ccfbd11a9df949","sha256":"6882fed63ae6b6bf1c7339c50836d21c6eda6ea08559d0b2bfeb86d4b7a17283","sha512":"91c58b59f23fba80bfd0c39e1f6b88dc487e4db06bba491238fe714161d1bf799540d016b86b494cf4c7a4f8cc04ac9810dbd4c9d9991d4040a6d794bd6eb4c5","ssdeep":"1536:odMRGmUBo2EHZOODJ/12o/pT62Ll+4rlf4:AMRGmSEggJN2o/pTfl+sA","tlshash":"9743934aa4b720229637313d5bef514a7735c10b5809ed04bd5c67942f84e38a2baffa","first_seen":"2023-03-11T12:40:49Z","last_seen":"2026-02-16T14:00:46.11653Z","times_seen":13,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/tsk_forgotpwd/tsk_forgotpwd.js?s=1644024857","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/tsk_forgotpwd/tsk_forgotpwd.js?s=1644024857 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 306\r\netag: \"258-61fdd419-1a6a7e;br\"\r\nlast-modified: Sat, 05 Feb 2022 01:34:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"eba61beef7675c3628855b011da0b92a","sha1":"1eaf880f526de82e18e457893dd6f2b676c31d38","sha256":"1e15790dfdfb94ee99ce82d0bd12e1c6bda64f835455d935202cf4ce2c75d94a","sha512":"164115eebbb9b6b63cf85d8e1cccd76af5751555661dc696162c582f77b19c24a435e3293580db0fa4dd3d2de27c29f29e560f049b1ae8cd44b8e41086977802","ssdeep":"","tlshash":"78f0e169fffc4056d030300ea9aeadece53e40f36d08ec59adda2a742d54a5a2941c97","first_seen":"2025-11-02T18:10:35.662776Z","last_seen":"2025-12-31T18:18:55.923776Z","times_seen":2,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/images/icone_logo.png?s=1702401508","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/images/icone_logo.png?s=1702401508 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 20189\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"4edd-657895e4-1a3695;;;\"\r\nlast-modified: Tue, 12 Dec 2023 17:18:28 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2457 x 1296, 2-bit colormap, non-interlaced","md5":"4f02767471309cb7f03dbd013e2e1021","sha1":"846a32483aebefced1ca88d46851217632c2ecb6","sha256":"fe36025785c166e9dfe6e9a2637863be329f5f1520496d49df0c5dc9c86143c2","sha512":"e00fd404dd5089de6f04c89292ffea570052fae89ae773b413def629be40fa4b2d528a1bb38b8b7116f7a8b823a9fdf7c3e00d8584f304a4db19aeeaed020832","ssdeep":"384:n+sMFv25yw9vx9rcTWgWU5icCJGdKF3+WFvJV8likD62Mo6oO+mh/Ycd3w:+sIv2599vx9oTW9cCh+DbMo6oydt3w","tlshash":"8b92e1e47e41cd2ad18a72736d868dc5408516aacd8ac3a3f4d116f5be1e2cf74db08a","first_seen":"2025-11-02T18:10:35.66397Z","last_seen":"2025-12-31T18:18:55.929543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/images/banner_mobile.webp","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/images/banner_mobile.webp HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18940\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"49fc-657895e4-1a3410;;;\"\r\nlast-modified: Tue, 12 Dec 2023 17:18:28 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f998bfba0cdefb8345ec7c5c51e09353","sha1":"1f8dff3ce5ba4a84d5f2f5782515b1368bcc5613","sha256":"2556dc13cf15d8db3cc5e77caa10c05829c6176bb048ae86713717dc0046f2f5","sha512":"d36accd51db116dc18769c2aca69511ed95ae5f7917bd1fd10e2b5d8d7c562109ea6733bcd523c131d4f3c4499d0bfe1aa64f8daf14a0d8e1c023b9caf1c545c","ssdeep":"384:Fgnv6oC5k3WH4U3/UUHaBVBTxA9nH1+nuTWkw0iWPSzcp3rdFUrtb:mvrsIo4UPqXFxHi6zcp3rgrtb","tlshash":"ae82e1cdbf4654817660ec9e3eda188c121102a0f990741975e6c6977839b983583eff","first_seen":"2025-11-02T18:10:35.665239Z","last_seen":"2025-12-31T18:18:55.930442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/styles/styles.min.css?s=1701705686","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/styles/styles.min.css?s=1701705686 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 23077\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"1d4e5-656df7d6-1a3768;br\"\r\nlast-modified: Mon, 04 Dec 2023 16:01:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120037,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b3dbba90d6108138f6acd50e6cc176d5","sha1":"c11f9b16431d2e55b955939887c429624dbc36a3","sha256":"98880f2aadcb2c76b09de3d325cca3ad7bdaa2737f40f633425fbb85759fe3f0","sha512":"e4a6b4e81fa87c39b0c39ea354adad94d3e147b183623916283a78c25ca20e9a9c91f0e47cb3d0d70fd265c5347536917af058bb3069bdbc1950356c161f277f","ssdeep":"1536:DTeZPW/E06R+umlf129gBLQzi3HA8SgWPad9kmCM:DTeBW/E06R+umf2GBLQzu9kmCM","tlshash":"5bc3c6b6e06839a93733c2177ac4bf98a25fd1a0c8917e7af52f728d45c62183172f15","first_seen":"2025-11-02T18:10:35.66649Z","last_seen":"2025-12-31T18:18:55.933601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/jqueryui/js/jquery-ui.min.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/jqueryui/js/jquery-ui.min.js?s=1695024809 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 71106\r\netag: \"3f6c0-650806a9-1a5dc9;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (33303)","md5":"fb752c6ba6b88ffa885f1d2a6492ef58","sha1":"e20616dd323e0313e75de00ac055b7d249cb9056","sha256":"59a4c9a75c48cf979e66c5641230bda0e15dfff292666e56ffb52a5a96d78834","sha512":"684a0b794ebbe5ec4f4edbbf7330bfdae7632d78c42657b540bd2b6d383406c34ca9b3c4400ac849059428b76e67824ae84c480c1ed338cb28781f3e98d9cbb5","ssdeep":"3072:amxBUnLO18G0qSLOZD5kn8Ks6BqMi/X+1ghPuQo1Q7SV7opX0MY:ALOnlfc8Kw4ghP70MY","tlshash":"3844084d72003a2295dfe2a5143b2a0fa237515da605845cb43dcede9ebce4431bbfb9","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-05-07T12:09:29.988158Z","times_seen":1398,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1695024809 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 7383\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"72ff-650806a9-1a5e57;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26501)","md5":"e8455cd7ddf7587a45187ae3cbd3ca6d","sha1":"393f1cacd0d1eeafc0d32c245c9728e5d35ca279","sha256":"b3805c77dc478fd0e6a66140c13cc9ab7d26832c136f48aa418490035d7cb095","sha512":"be609251bc46b089c769696dd9ae399dcbc3cd14c1f150d52b29748a27a29bbfc5fe1332347b8d0d652cc335a657578fb24f9a23381ae806b9232a4273ad257f","ssdeep":"384:pCwiEt7/rpcvCZ14/1eFUEzy9pDNkM7nfPBV5T:slEt5Z14WUEzQpDJBVB","tlshash":"e2d23130a5c2243dfe33d23061e15ef4523ac246dda61fbda09af65953ea8e4c47b871","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-07T12:09:29.979285Z","times_seen":223,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/jquery.min.js?s=1695024816","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /program/js/jquery.min.js?s=1695024816 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 32667\r\netag: \"1632e-650806b0-1a6c12;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90926,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64001)","md5":"82229fca667f868f77759d78edaaecaf","sha1":"12f2612174d39a99b21379af57b5374ab4efdb55","sha256":"5641ed21773230a8110279658abac57bb5b4abc7bf4091946c5e61e8f0021f55","sha512":"c5f584e0aef951de09031dc54d381b534a32ffc6480420a4af369a6f0c50bad2cfd6d5743982cc498030abdfdb78ff772b710bce8b843305e4bf6e533c936594","ssdeep":"1536:jZAjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvz:iYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"209308ddb2c6702257a721ba007f510bf236199d6c4d8450f129e8e9bc78a4e827bf7d","first_seen":"2023-03-07T12:08:25Z","last_seen":"2026-05-07T13:25:03.817475Z","times_seen":2407,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/program/js/app.min.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /program/js/app.min.js?s=1695024809 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 49785\r\netag: \"2a83d-650806a9-1a6c0b;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64152)","md5":"8a470bdd0d971756b1507af9fc9bc367","sha1":"be45810e4fb345e642309af953b3783ddc5bc7ec","sha256":"4dcff48fc4abbddf5479b617713c157e0f03860a19f4e3dc42264c079b9781bf","sha512":"ffe15499f0fdc5e123e6cb0655bab8b6b850385b5cd37d26100578e4a5bd7d519020b95a8779a477b044075cf2f124f260d8cb48ea80665143dc8c5cb77f1230","ssdeep":"1536:LL5MtmX/Df5WOgLuUvSDQyW777BGBSBlZ1mn7CVuG33gD3YhsKO70cEc7vnEwFCh:pMeUOUy596/D0wlsdxxntzRHVXMvDFhf","tlshash":"3204d68a32a4fd2106e79763745f31026133a609e405980db56cd9eb4e78f4a3367f7e","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-05T17:49:46.418418Z","times_seen":20,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/ui.min.js?s=1695024810","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/ui.min.js?s=1695024810 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 20025\r\netag: \"ed2b-650806aa-1a6eb7;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60715,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60228)","md5":"883dc655419dc4ffaa8aaa466544b35a","sha1":"dd65c3126e8194457d6fdb75a06351bac569a8df","sha256":"5a6a4d9f6477096170f94cd9a9ed3047c840b537a55a7942f3aed2a34dbbe426","sha512":"2ff182a07f1854d482c68c44b6f177a4473fe2d2cc88bc30ae37957c471a651c4989619e6517a4ea368c2cdbf651640c9ac60a660ad731018a974b70bb0a3e51","ssdeep":"768:aOyiEHYQBcCP7uaHxHRb3a01UTdFdRSitp0S1gVYYQHkfW7hCZ+gcv5kLpQpsr:LiSORHR1AdFhyV+7YZ+gceJ","tlshash":"8853b5ec726135b612bf226720afe10661334529cd119841b26d94ea1efcf8532b7f6f","first_seen":"2023-11-28T16:40:35Z","last_seen":"2026-05-05T17:49:46.407334Z","times_seen":21,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/skins/elastic/deps/bootstrap.min.css?s=1695024828","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /skins/elastic/deps/bootstrap.min.css?s=1695024828 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 24816\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 09 Nov 2025 18:10:09 GMT\r\netag: \"2725b-650806bc-1a6eba;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":160347,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"c19c75612682a6fa2491c27dee895acc","sha1":"7344d84f61735eb9653b729e71d81b3431ad803c","sha256":"3cb5b7ae5053d743996378c35733560214d3d896ade5c0de0d8b13a97f43039e","sha512":"5874fc8a3fc032eda3dec8e11b0468b33788349149facf00d67daa9e9cf4699304758fde421e29ea597fb01da228d8465f85a70462ca920325a0fab2d58a6943","ssdeep":"1536:kw7CIJ0T+r+ryEIA1pDEBi8yNcuSEIA1/uypq3SYiLENM6HN26s:H7VKGGq3SYiLENM6HN26s","tlshash":"97f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-06T22:58:11Z","last_seen":"2026-05-07T14:12:35.31922Z","times_seen":2731,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail.task.com.br/plugins/jqueryui/js/i18n/jquery.ui.datepicker-pt-BR.js?s=1695024809","fqdn":"webmail.task.com.br","domain":"task.com.br","tld":"com.br"},"ip":{"addr":"177.93.104.140","port":443,"asn":53107,"as":"EVEO S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail.task.com.br/","date":"2025-11-02T18:10:09.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.task.com.br","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 27 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:C0:2D:69:0A:45:34:F4:4D:36:71:97:6B:79:8A:CE:AA:95:66:EF","sha256":"DE:B8:CC:4E:7F:12:E0:D8:BB:67:85:C3:59:74:FB:C9:9E:DD:5E:59:9E:DB:10:B5:9B:B9:E3:C6:DB:23:5C:6C"}}},"request":{"raw":"GET /plugins/jqueryui/js/i18n/jquery.ui.datepicker-pt-BR.js?s=1695024809 HTTP/1.1\r\nHost: webmail.task.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webmail.task.com.br/\r\nCookie: roundcube_sessid=05nful00k7cau0c5h64pg768sk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 02 Nov 2025 18:10:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 607\r\netag: \"429-650806a9-1a5e21;br\"\r\nlast-modified: Mon, 18 Sep 2023 08:13:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3bc30f856ecd69439c1c3fa74bd576a8","sha1":"9b7346d2b9fa282a5b89b522fa06bde975df8954","sha256":"c4397a28fe891dbd2552c74bf2e44ef34e1f1b3d0f972824138d6d64c7ec1259","sha512":"daa226141acdf63f9709c5dddbde48c153c8a55f65bc3d4e24eb911f6bd0eedfceb478d1be81940802a8406479dab0707b7a96892a855aa88fdcba1807091543","ssdeep":"","tlshash":"e411f0da55a44bdf4b3066a3781c4d1b0ce2898219bd8406fe1f1ad632d8c4608b5c92","first_seen":"2023-03-07T12:05:17Z","last_seen":"2025-12-31T18:18:55.922655Z","times_seen":66,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}