{"report_id":"2588185d-ab5b-4c3e-9c10-3a5c32d83f75","version":6,"status":"done","tags":[],"date":"2025-08-12T05:25:51Z","url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"title":"Laura - Ajude ❤"},"submit":{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-16T05:25:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-12T05:25:30Z","timestamp":1754976330,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.6","port":52908,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-12T05:25:30.449501+0000\",\"flow_id\":560415122311401,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":52908,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-08-12T05:25:30.444649+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajudeurgente.site","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-02-11","domain_rank":0,"first_seen":"2025-08-12T05:25:52.697686Z","last_seen":"2025-08-12T05:25:52.697686Z","alert_count":7,"request_count":7,"received_data":0,"sent_data":3621,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":2,"received_data":17368,"sent_data":1086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api6.ipify.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":226847,"first_seen":"2019-05-13T11:53:14Z","last_seen":"2025-08-06T05:06:59.435622Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.utmify.com.br","ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1350186,"first_seen":"2024-02-12T18:06:21Z","last_seen":"2025-08-07T10:28:52.29803Z","alert_count":0,"request_count":1,"received_data":37876,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":5478,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-08-06T23:18:19.038331Z","alert_count":0,"request_count":1,"received_data":481,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tracking.utmify.com.br","ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1674326,"first_seen":"2024-08-31T10:04:06Z","last_seen":"2025-08-10T15:23:10.363301Z","alert_count":0,"request_count":4,"received_data":3830,"sent_data":2162,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cestabasicabrasil.com","ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":58,"received_data":1730669,"sent_data":26888,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.27.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-12T05:25:30Z","timestamp":1754976330,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.6","port":52908,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-12T05:25:30.449501+0000\",\"flow_id\":560415122311401,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":52908,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-08-12T05:25:30.444649+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/frontend.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"59ab277efa930785720a63e9007677aa","sha1":"144750f1e4d88d5d0bf93704ffebd349dd02e653","sha256":"c7267d9f9b72944e2b3772a521fd1b8882ca17b124de63549fbf591167efbd25","sha512":"153577744897d8e897e0321d562ab727fa71b8be776da89a6e3443618ee58c952e50d23b90b7f0e275bb3626452947b20df4dbbadd82c1fad1c5e23355b90169","ssdeep":"768:gTLX+EV2m6SbdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEbzGv:gtV2m6Sb94Q9HuG2iiwkOsN7KOljuOzS","tlshash":"71b2d8063163a87a50cfc157e067420e7b374895740570ed7abc6ceba5b8d9a32eb335","size":24674,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-08-11T06:04:40.606492Z","times_seen":2287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/js/latest_1.js","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"12bbaf3b433941859ea85e578e5277e3","sha1":"7331a8f2f79dc27af04895a590c3023750be36a0","sha256":"c0e74f8a56bd49c02fab2aebe46245b6513c7fea860b8cc16bec7e9e49cacb22","sha512":"a058189d4fc3d79d2e4161c1c88e8ab740b1d73e322f9f67ce377231039409058f5750c3925b08146b38fadd246f5bf1ff26c700c42f2479df20824eafec9502","ssdeep":"384:4iyEEbMdTFo1vTCbJeY9pR+dYDJODPq6mQ9JwQRQa+ssRN+7zkg:5yEEbMdTFo1vTCbJeY9pR+dYDJODPftr","tlshash":"e65285a4f179e4e412b24dba90b79172f23db7397404c192a10e9d45742dfeb22d3e3a","size":13549,"data":"","first_seen":"2025-07-25T02:20:06.503169Z","last_seen":"2025-11-26T11:29:18.724393Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/jquery-migrate.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T12:57:41.868528Z","times_seen":929235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6d11926e4eeb6a3d0ace7c54514689c","sha1":"d2d48360d8f2082570f7816c97609ed4c43912cd","sha256":"3df9011bc7d74276456abe2a6a1b701a5ff6108a0173a6eb16ca9dda2156b11c","sha512":"b09344650c13f3a4c46d9a11c12257cc77fca0825873cb27a2e84656ef36c5af82125b999379a82a35209d381ee035066e1e9297d1e206d5fde5ee5c913bba59","ssdeep":"","tlshash":"52d02e7e18687333e932208aa47a7b883c81603d1082c452028ece8a2c0cd420dfc000","size":263,"data":"","first_seen":"2025-08-12T05:25:57.576849Z","last_seen":"2025-08-12T05:25:57.576849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"e60e2659740afcf8185104afe86c3a74","sha1":"1c1c4a783344ee32c5d4b60ff289c532c8245dcc","sha256":"5e923e5bfbe9bc80dc4eb8e0643459d7ae5b06222272786c6a77bb62283e11cf","sha512":"2403e01b0836b0926fb9e2b9589fdaabdfe7127d3c5e8e02eab3c689954f3af203f754af3b5101e424308d1e80e931e58d50957d1c9cfe295ac195629ca0c75e","ssdeep":"","tlshash":"41e06144e77c149ea6a3242044b670c481fe12b6551b9d47fc3dea914064f3c325fe72","size":388,"data":"","first_seen":"2025-08-12T05:25:57.578898Z","last_seen":"2025-08-12T05:25:57.578898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/jquery.sticky.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-08-11T12:32:35.979228Z","times_seen":70230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecd1ecc00ac66260b7b0679555b48120","sha1":"c19d8bcab03406a30a472fcc69562715e5a67004","sha256":"fef3928d3801efe034730c508b7427b0c2f487a8309a4e597bd98be7fc7e87da","sha512":"675aec6597bad74a04705cc4a048593d423e56d5bad13f9d3d12d77d91f58ed6e1a59f0861d95b3f1e2c718483dd4ab8c0f36d7498c556bacb80f533cb7fe91c","ssdeep":"","tlshash":"ff01d6e2f7add06ffaae8e660638128e1a2da073ac100e5fbdac3526ccc55197461951","size":841,"data":"","first_seen":"2025-08-12T05:25:57.580643Z","last_seen":"2025-08-12T05:25:57.580643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/imagesloaded.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-08-11T12:53:32.1463Z","times_seen":203543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"a26086f58f0a41dcef8403f61bac65fd","sha1":"08c5bf22ecd58df2d0606fd3e52f47da4f6bc9bd","sha256":"f35107604fbe575d6e9e1df87a52c6012ba8cab75631d9b4fa8f8c0159cda979","sha512":"08b9aacd9957e68bd7a70d4b4bfb4a37bca11634a61f094711f76cee8cd9cbd20f0920c4efa3a077771c016def6853971d14046481dcb038dc2e4de2c1578925","ssdeep":"","tlshash":"d7514489ff2c758b8262701e491fa1cab07c6533951940f6b968f7896c74a9fc39bc1c","size":2687,"data":"","first_seen":"2025-08-12T05:25:57.582688Z","last_seen":"2025-08-12T05:25:57.582688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb1bab4d06cd3d16e5ccfc5b5ec2f2a3","sha1":"c34eaba60e47d073b61c1c1fe8df8fbcae75ffed","sha256":"cf0db1315f5758356932a434882d6e4ac046b39b95386b9bce1b56cdfbcce607","sha512":"3a2417f2ed29807b468b874aaa36e14f7babcdcf8d8c7d7839ff936b77c705b78be37de05949513cbb00ade7f912157e13650d2946237201100a6dcc42d69720","ssdeep":"","tlshash":"d6f059d3b68e0862400481f97f24a9bbab9dad09a40bc996911981e6e045eb4a1be431","size":517,"data":"","first_seen":"2025-08-12T05:25:57.585055Z","last_seen":"2025-08-12T05:25:57.585055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/jquery.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T12:57:41.822203Z","times_seen":1014348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/frontend-modules.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"120d8ab8e0d07a0ca8c76ccbdccf6b00","sha1":"817fa6e1ec814f2e37f8737177e761a7823205ae","sha256":"6f7b29d71370d557c6735320304d96ca4b70e4bc7a3ebcbe8fb6ea2340f1c9a1","sha512":"f4975356c2160aa38ca9a2d6e026fcf322c4330f34fd91f57d30b706b698a3f7e73e046b12269bf1e9529dc5b34d83ff621d0141c53a2552ab30e002fa90e622","ssdeep":"1536:lUeAjA679C+QKqYNQAzeLHeBHmjkOzRNJ4cR8+BeA8cEDfQ87F5OQ5RSSn0tQukx:bAKbyvCWKNgwW","tlshash":"7a43fb463252b4f70beb40d7a02f550af22319a4740ef594bea8dcf1e471d9a237ab74","size":59749,"data":"","first_seen":"2025-02-18T18:53:45.60833Z","last_seen":"2026-08-10T07:29:21.907453Z","times_seen":3892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dbf4a5692b4833e577ccd806f8c9ad6","sha1":"7bc9e45ab42df2bc0c92435c8edf7998f24ba854","sha256":"b9261154ce6eaa4cc44c5dc2083a412d0cd7613202a5e762ce8a29799b9e1792","sha512":"b6e7475cc28e67a89e1fd79992bb42fb605d958846c74cfa659bd66cd994b39011ac4adb0ba45d95a2865b9c8339e1524a8a95c0d65e9beb253410c0c8cf5f26","ssdeep":"768:Kcs8TAlfI1b8tWHv7fCqH5TtalmZZAqukM5Ub9zKqDvrWpFcZkHWpe2wCz6RIQFp:1tcIfX40NnmosWN1z6OiltII0A4+D","tlshash":"e9f28785fa97d4540be384e5c8772132f32c3a3e616a8450e23badd6bc187da7263d35","size":36756,"data":"","first_seen":"2025-08-08T17:22:57.983903Z","last_seen":"2026-05-27T14:40:34.098417Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed25cb0f7963a7311af50d7cda84bb4e","sha1":"af061ae5840b5f3b2e6922889a2195bec83f8614","sha256":"31163ac27837c5832db265f00a810df79f4460329763fb7987edbf1f9dda0aaf","sha512":"ba5d79382e40073927d1b95e25c4c2ae2fe097d732039ee557b45676f022e5d999627a4d3104fbdbd86872343241b885fef1a322f589d1a719197a350db4de48","ssdeep":"96:V93I08BKS2RizwtgznsRm4gp6lZF2bxd3HUoC:nYhKrRistk4gUlG33HU5","tlshash":"5b9173d1e38d2d3b8801512a4c2e92cca43c5a7a98a4807f3c3ce8d85864e3d537ad3e","size":4580,"data":"","first_seen":"2025-08-12T05:25:57.58739Z","last_seen":"2025-08-12T05:25:57.58739Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/hello-frontend.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","size":2937,"data":"","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-08-11T08:29:22.309192Z","times_seen":5056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9949761e0700c0469ce0fa819ec7151","sha1":"24a22bf3ff47dfb6e4e199dc680d9d439c40c30d","sha256":"c07515b8fa5eff22f661c4e52b0e7dbd6a237df8b53cd50e75a444ca8292fa82","sha512":"8a91f5e6549187a307b67a3c95a3b399524f1caaf1db23ae7ea6fb9a3cc2ed836984c7530837633d166a3a98abe0a0a17c646dc398f5e56b6354e3e1cce58ab6","ssdeep":"","tlshash":"cda02440704f0c01cc104074043dfcc144101447004f4d1014d1dd3057014c43c43f3f","size":72,"data":"","first_seen":"2023-07-14T19:25:53Z","last_seen":"2026-04-18T05:21:41.100505Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"41f8700644b250d8e00e79ce74389aad","sha1":"6bcc4634dcc5a9721ea3e1a26dcf8b990051557f","sha256":"48c1e3fe87ba92460576552c01219c171b07f8e19d4a134391b9e7223f7acfeb","sha512":"7abf179cc0427ee768fd820d4d362545117ba6c87c9ef7d114cb5695311fb5483d2dff0cefcc3ba0ec2e5a705f8249d4cf16a9c261baf8ed3b3a9a376d2eaf8f","ssdeep":"","tlshash":"d831059bdb1d402b8374688c64ad39dec8ac57319d6159fff252a0e101cdda290753f2","size":1638,"data":"","first_seen":"2025-08-12T05:25:57.590913Z","last_seen":"2025-08-12T05:25:57.590913Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/lazyload.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00219cb958052cb557115d55f0c8d48","sha1":"3c55bbf5a8082db61decff924aaf787f4337df86","sha256":"8ceb3992861ed1fda25855c2e500e76842ae0d788405e50e3a9f45df36499cf6","sha512":"8551b616ff3abb64a5a63e68f07c82d72bf89cff6602339f900e282d3d0f8e9781a6361da024f289105f971f4c56c6a3c4c9dd33627525462fac6319f6f0435f","ssdeep":"192:pDvu5/lEKbR9plcliHYecexZno2fa65gIe2vVYAtW1eiIvO1SF:pTw/u6ZjyOeOe4F","tlshash":"6e0221487d41742f2933f0f2515f12ca753b28426ced6954a6e1f5e82d7848d28a3fbd","size":8291,"data":"","first_seen":"2023-03-07T01:07:43Z","last_seen":"2026-08-11T11:11:33.212391Z","times_seen":6181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"55694001bdff09da011127ad5fa0767e","sha1":"d320b337ba818791704f84cbe4439a02591b3b22","sha256":"69e6d1496d5699bd2e3836098f3d5f1dba8ec89be49da78c7985df239afeb26a","sha512":"e6c7001a1a9bb9681f9e6536d4d4a38b7d889827ece4bce693da426bfbcd71bc9624a3b9e53229339dbc2ebdf56029d397a956efa510baccb4f8fee39e768206","ssdeep":"","tlshash":"d671cab7e61e15fb02b09a2d7c6ef1d2993c443a485178fff0a550740199e3111bbbe6","size":3757,"data":"","first_seen":"2025-08-12T05:25:57.592589Z","last_seen":"2025-08-12T05:25:57.592589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/core.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-08-11T13:00:04.301532Z","times_seen":42021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/js/latest.js","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ef4504486f2bd486e68510d6300ff0e","sha1":"2045b152496ebbb538f2beacf1d7720a354f00b6","sha256":"f7e929099b5da0133ed7b0390131720fd0e8f8aa20251a220229ad6f9caa510d","sha512":"7962dd7f6699449f8625a7da3081d87292adc3bc836ac1aa5740fd3945a72c76f1e389bc8bb6bebafd0e7f329e754670d37fc06e95ed111c096406cf91260d54","ssdeep":"384:4IFkFzAdvF4ZdO9Eve49NYdsO3BGmrC/g+fEjmcbnaVaT/boMH:PFkFzAdvF4ZdO9Eve49Kdl3MmrC4+fEL","tlshash":"0842b6a5f179e4e413a20ca690b79271f23db735b005c1c1a14ead86341eeeb62d3d7e","size":12347,"data":"","first_seen":"2025-03-19T02:23:34.934991Z","last_seen":"2026-04-05T06:26:16.865483Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/hooks.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-08-11T12:32:36.031419Z","times_seen":230758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/preloaded-elements-handlers.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d03734f69eebf5358afd6f626ead1a43","sha1":"8b4876afec7e3a09167b10e99f38aaf1f21728be","sha256":"f54040cbb6cdbfe0893789398f2ba5ec6ab781e1d82a94a1c7a7d11166312054","sha512":"b6ca528464b61df73bd03d8a88766b2f573d15bfc3a9ff92c26b20d73472ddd7a795a5b2ecd8dd103626f6c5c96029b3cb7ca32b46e7088ee3b073b2ee77b3bd","ssdeep":"1536:nsA2SOaWbzhUfIJGSeuHhEhwH3oeTYPDMDEdZBywLIK86YP6T+Xj6/EUM8uqaij1:Tx/X8fmdwxvrlC7hTCa7e8luv3a","tlshash":"58240b923052987646cf40afb427020df72219adb406b4aeb9fc8cdb55b1ec63376776","size":212084,"data":"","first_seen":"2023-11-02T11:49:03Z","last_seen":"2026-08-07T20:25:07.583564Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"f47ad05ac9447646b39c9c14c4d11649","sha1":"9c4f6ff93d6d36e0433d5730724aff31df44c86d","sha256":"acbcef8c6a8720890e53db1bd0899805b72d0efd1e8e141f5207b03401b4cc60","sha512":"a0ecfe6293279a2d983fe193dda586bd5613d0e7e8d2d17ba552247db24256f103d865fe51a6ea5cda5fbb2a6d69832c9eff95cb6a7f57eb8f5ba9497ede8b99","ssdeep":"","tlshash":"ef419cda776e800bb8773003667f12ce382ca5bb6e0065a7fde8d89640f496f2256558","size":2355,"data":"","first_seen":"2025-08-12T05:25:57.594745Z","last_seen":"2025-08-12T05:25:57.594745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"d122f8a65493b309e11f8cf0ae47ff8d","sha1":"5f1fa5421d04939f2a40a17d8b6dcb7b5e8cffe5","sha256":"85af9d1bb4cac4c8bd4d68c8ea9655ab8102ae127e2a693b1fb551bcc865b9c5","sha512":"6bd238a56018e9ede45e9c8a6d2d5584160e6d480ce15741e8f9e716d8c3b56ea3c342cb714303ed277fa944ae7b1e19a2653198ff56c6215f31b13f1efb5bcb","ssdeep":"","tlshash":"162111b6778c4e33de1514c6597ca8d8a638331e9a42d8787c4c8cc5146cc6129b9c69","size":1353,"data":"","first_seen":"2025-08-12T05:25:57.596423Z","last_seen":"2025-08-12T05:25:57.596423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/webpack.runtime.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"85000f8fc8f17ac7bfbf5bb6c774bb6e","sha1":"93756297a1d306eac3d5bcedce0fb3f98eb8fab3","sha256":"ac4c254fda1f489c8a150a0cac9b909a5527b5517e0e312cef2be51b96dc10f7","sha512":"674cba63dba714aa0f6f9cde226a9128daf11403fd91cce192764d195d8cfe56856f56d4cf0f11e7b4e3b34a389e541995d2c9b2a8ff0105491cf8c83cd0c43c","ssdeep":"96:BnisNt0jqf9fzDeWKF5xl8O7AULQF15lejNVobVDjgqKokxwvT8i2:lisNCjw9f/eWKFdPQUN4FjgvCgi2","tlshash":"f5b130941a94fc2b31e135c8a11ba730662fc1377c1bb8c1fa21dce955e8ed187a9532","size":5350,"data":"","first_seen":"2025-02-18T18:53:45.607488Z","last_seen":"2026-08-10T07:29:21.885675Z","times_seen":3883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"add87f9be9fdd556cb1b7c6305d4c4b8","sha1":"8023f95b09d531a0331f5f24780d3ac8befb1bfe","sha256":"f54536d31b485cad56cc8ac4252230999a7fc4708bd0be3f652bf5ef41c24e4e","sha512":"9c33e12b27c759557e968884eaa66438bf85f571a3f7321aa35353663c058d2cbf3c8df01a03d0eed4f99a84ef4855d3f02b3b752e465a7422ba73bf5b85f4da","ssdeep":"","tlshash":"8441cce2fb3d143b4baf117f983d86c8353c20b269a4047f397d50881018e92d3a6971","size":2046,"data":"","first_seen":"2025-08-12T05:25:57.59804Z","last_seen":"2025-08-12T05:25:57.59804Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2570c72b83247f25656b304799a31d4","sha1":"15ccdae9427628bf714cd62bf57f9d3f98b46505","sha256":"c2ab904cd5599380ca3227141080bd6cbf799f484aa3e7c36e75742fbde97a9c","sha512":"764d80579d0b781716b5c5c4aeb21d361719a365623f611572b8b792ec2e41786657479aeee31ff3b2b51f2fbd41f188d60803640338e4dc0c5551aba1b71669","ssdeep":"","tlshash":"55218c67236200003dcbb0e58a23621831a1015ffe87dec2ba4dd25c5f585eb72ebadd","size":1199,"data":"","first_seen":"2025-08-12T05:25:57.599639Z","last_seen":"2025-08-12T05:25:57.599639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/i18n.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-08-11T13:00:04.168201Z","times_seen":261881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/webpack-pro.runtime.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8027f7d649c8b4b044a03ef82cc7ef68","sha1":"4ba490a1a2544a195e5fba915ac5eb09eaaec5b3","sha256":"d9755b7eff734eeb6267db6515f0267fc66622cd873cd37f65761b3fcc94cac2","sha512":"f372b4f4a838e59a57c7655acd7ac66b4880360d39edc865f4cea1643f5ad9bf47339a7520a2bc4c0e9a040098dd1236d55ee723673ca9daa04e5d2d4b638cd9","ssdeep":"96:BTifnGhUqdL5MGSPhRm0j0DEpre1bNUx4Gk4OlL8GVyeV9WmLttXSc/8k2:JifcUgL5MGSpM04CrI6CGTvG3rXnEk2","tlshash":"f4c145d90a949d5b26e139d9b0975b701e3dd0323c15aa81ea52eddc19f8fc083ea933","size":5801,"data":"","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-08-11T06:04:40.526132Z","times_seen":2284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/frontend.min_1.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f4178ab3a59c6620d2446c1726976eb","sha1":"b861b102f989bed593aaf661d37f90ac03548218","sha256":"75dd67187032c51f70fec4ff879b978202b184bfe6e5b8fff120ca6db4b2ee33","sha512":"32c4f5738025c5d643660902012b34c57fb45dfdaeee4dd16423412a896cd65a9541598c633fdc3e9d227e8eeb2c034c4db75edd1050b4c59ff6e21d86057186","ssdeep":"768:l3RP3yjt7ReRjDKvx1QEa/A3JSJGfVgNq1w9VKEAzBc5GPTSebsvTigAUMTSX5aB:l3RP36t7ReRjD8x1QEa3GfV3zEAzBc52","tlshash":"2313f71231d294aa55cf48b7b0330219b3765dddb402b59cb1bdace6a471e837372bb4","size":44252,"data":"","first_seen":"2025-02-18T18:53:45.609071Z","last_seen":"2026-08-10T07:29:21.917027Z","times_seen":3823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a8115e32d517c359cb1a5562812dc67","sha1":"0287184a4d195fec54836b16a1f310345478a459","sha256":"8ca0227af61c7ad1955af15a70da53c0fd03f123e543104a05e18345fc86b474","sha512":"bdab637e2f095357c845e8a9df5c6143f249a3d7abe45f24c22f50a85b58c550c4beab2d9304115a6bfecb7dc7a68ad1447be0bd9544bf7279bc9f20e39cc133","ssdeep":"","tlshash":"faf08285bfac215401df273f7b369fcc65345086290458561c7c89b450789ad056ad65","size":463,"data":"","first_seen":"2025-08-12T05:25:57.601352Z","last_seen":"2025-08-12T05:25:57.601352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/wp-emoji-release.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","size":18726,"data":"","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-08-11T13:00:04.296509Z","times_seen":103156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/jquery.sticky.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/jquery.sticky.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3721\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3721,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-08-11T12:32:35.979228Z","times_seen":70230,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/custom-pro-frontend.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/custom-pro-frontend.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40882\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":450333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"36be1946aefd16d88e7262d882533c6e","sha1":"e3900652dbd5f79f55dd06124c7c36f1cee93b38","sha256":"bba5af8967cca36396ba5de8d8c0996a02579404d414552f1ce60b114ed43e7b","sha512":"0bc41fe3636224c31ac16d31664e4785226be5f7641271b76cc43e5480644941ad3b3892e0c68760707da3abb58ab6ecb4efcbafcc722f3d7c471caa94ddc9cb","ssdeep":"6144:8XDtCqrSS1XJPY2YaPIbszGjYhREoK/Rq1no:8XDtCqrSpoK/Rqa","tlshash":"dda452a3bc23592532ef602f544365cc395095d8e6435ae8fca26a0f4afacf5333562d","first_seen":"2025-08-12T05:25:57.512195Z","last_seen":"2026-07-07T18:10:28.857176Z","times_seen":24,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/widget-divider.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/widget-divider.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 706\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4298,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258)","md5":"ac16afbedbc5ff75b2d66e8e58f0b4b5","sha1":"5a90f2087c0902e869863d3c2699be71666792db","sha256":"bc24468b9933c0fb46e4489c33ec587666dc8bcf77c24db0d09cdcb3acd7e15a","sha512":"5971fb44a4eb651088666a58175f3f0a5d267f24f30d4027db5798498d0195ba99e217be13c56791717eaedf1a084eb86c36ec83f167ed3d97d2e1edc3aeaab1","ssdeep":"96:Bn5oAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:l5oIOq5a75slUmor","tlshash":"e1917655b94f8218b79f141b9e173e4cf04457c9ea618a81d9f37152f0bed843f209e9","first_seen":"2025-02-19T11:13:50.34954Z","last_seen":"2026-08-10T07:29:21.881261Z","times_seen":1098,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/widget-testimonial.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/widget-testimonial.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 296\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1640)","md5":"5105ae85a8966b1ec79fb025f43ffa7d","sha1":"b52de0dbf4848753de197c960daa8d65de9257ce","sha256":"f8f465094d1478727d5332f0ab958549cf9c344c47998f5cffff8939f148a9c0","sha512":"924669897c966501cd20723ff541adf23e0fdbc15409abad80797464cc7f2af1e1b8bb876f90885c77544216a13729d8bc9f0394517502a847750663bc59d5ab","ssdeep":"","tlshash":"ff319c213e2b5009151b71bfa05be28e5f64fde8abd25b68f841e05bee698743f33104","first_seen":"2025-02-19T12:10:51.724842Z","last_seen":"2026-07-04T21:50:42.03377Z","times_seen":72,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/uploads/2023/12/OpenSans-Bold.woff2","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.812Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2023/12/OpenSans-Bold.woff2 HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/frontend-modules.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/frontend-modules.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/frontend-modules.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/frontend-modules.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59749\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59749,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ISO-8859 text, with very long lines (59708)","md5":"0b7c4f556d0903e6618d9610354b7332","sha1":"fbacf9147f0043effd8e42e853a3b72394c32eab","sha256":"f875364239fcd70109050bdb804d5c9f24cb9953e80e1674e0a9148988981b61","sha512":"8760c6ecc2e42a18a0573eea814ccc7ca11ae422449123f411bf97a6b242cb8e2d3c2cf5d2835367c7962f04c82685a3c51be0b220358c30ad467bf55e4e5ccd","ssdeep":"1536:lUeAjA679C+QKqYNQAzeLHeBHmjkOzRNJ4cR8+BeA8cEDfQ87F5OQ5RSSn0tQukj:bAKbyvCWKNg6W","tlshash":"a543fb463252b4f70beb40d7a02f550af22319a4740ef594bea8dcf1e471d9a237ab74","first_seen":"2025-05-23T08:41:48.806823Z","last_seen":"2026-05-09T23:52:27.903399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/widget-text-editor.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/widget-text-editor.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 197\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":704,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (664)","md5":"98f5409edd14f963e799c01313872ea5","sha1":"d87fdfdf2418d103747e39cfeb9c406390509c70","sha256":"daa1a54ec5ce36427a328ffecd061219a286f9afa9f4fe01b0d520fe7c7bf068","sha512":"9ba1445b24de4c7f146690389e4d2fcbac8069577f8c884241415f667fe3d3ededd7db2b32e6fbc6db5d5071d9cc7cc5eca8a8e24967ec10683bbb631bd6a162","ssdeep":"","tlshash":"3f016d2af983a001721f083f046725ce68ca90cbe622d751fae5741b307ac897722b34","first_seen":"2025-02-19T01:04:27.092314Z","last_seen":"2026-08-10T07:29:21.93804Z","times_seen":2490,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/latest.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/latest.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/hooks.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/hooks.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4776\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-08-11T12:32:36.031419Z","times_seen":230758,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/fonts/Montserrat-Regular.woff2","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/fonts/Montserrat-Regular.woff2 HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"28ffd0835a16994bc37d3d147c0f70c8","sha1":"fb3ecdfadf78b8d11952eafce5264e18dcc4f43e","sha256":"98068d5becf7e85cce8d5ed3a4b5e8c1bf3a33a7a7ac41aa2db12f0dc890ca18","sha512":"a885d1098fd24b5f9ec1df54e194282dd9999e3636ef7a66534a5105b33f1d4b8f66eac34d6a12e076445204047e300c94841cde346021100a59377ef825eb33","ssdeep":"","tlshash":"3fa002bab7a737105f9581ed91d5b218984304bfb975c405d88d0b9e39f46551c701cb","first_seen":"2025-08-12T05:25:57.527145Z","last_seen":"2025-08-12T05:25:57.527145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 10:06:17 GMT\r\nexpires: Fri, 07 Aug 2026 10:06:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 415153\r\nlast-modified: Wed, 23 Apr 2025 16:05:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-11T12:57:41.812663Z","times_seen":390376,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":88,"dns":1,"connect":7,"send":0,"wait":8,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.434Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/style.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/style.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1649\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5756,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5756), with no line terminators","md5":"5be56bc9e617084e1cbb84c994912fc3","sha1":"a3adca593d4ec4afb41e32d073405610ae37eef7","sha256":"3c3c0ebe37e4fd4187131a0a8d039064a9014215c4b83199d909e7e0b2d7f450","sha512":"091a8004a7773d77faebd736d6626e5bc68609a366dc8377163b5bb96a87a8ea7b5c25a8eff9cabb17664a1e313769393429b9e6cb7ad3e0e58a810b94b2ef7f","ssdeep":"96:vSpsvXYXqXXXNjSa1I4pIG3PCZBG9Hzkoe3wuFeQWe0O4HClZ6wB2t8lj:v4sfoyHNe66sKZBG9HO3wEXYodtj","tlshash":"39c16363971031497673c8393ad17e943a216211c8336af4f426d9fccbce4675a29bae","first_seen":"2023-10-26T02:25:18Z","last_seen":"2026-08-11T08:29:22.298581Z","times_seen":7753,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/uploads/2023/12/OpenSans-Medium.woff2","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.814Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2023/12/OpenSans-Medium.woff2 HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/frontend.min_1.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/frontend.min_1.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/plugins/elementor/assets/js/progress.3200f67fe8fb78924bea.bundle.min.js","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.746Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/progress.3200f67fe8fb78924bea.bundle.min.js HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/uploads/2024/03/heart-black-icon.svg","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.896Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/03/heart-black-icon.svg HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/widget-image.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/widget-image.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 119\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a8f9311b2b4d95ab634dd8f26870f91b","sha1":"b5f5d839190febacdd836d8b61788ff74e5453a2","sha256":"db58cc870800a965bd2b098f8d947a54b79477a59e6a1ab8bdcb38d5fb488b34","sha512":"d6b5e63154739da851fb055ac1862ed491cff552a40c5141d62ac40cb9f4bc08708e644de0e0d5091e3528946ffc5d84cef2226ce7524720e8f99881d0ed9cfd","ssdeep":"","tlshash":"15d05e4035678382301f596d26ab2a9e78c00dc8e246cb90aca1661267becc837b2520","first_seen":"2025-02-19T01:04:27.091028Z","last_seen":"2026-08-10T07:29:21.868754Z","times_seen":2583,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/widget-heading.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/widget-heading.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 154\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"da462e4a452f461ceb2e30468a2e08e9","sha1":"79dacc5921b46210e5aa89f0fe5f29775d5e4a79","sha256":"9eaeb4862dcb01edf059e6c043bd37e98c44112f716ad6b3949745c9be978121","sha512":"d4c6eecd288e3404b262ab40c29065434e6ff038e491932629c0e06e2e9a5304666ddf80efcd7fb8cb1f40af3ab810ecf19f7a36d058cd889843d4ac9a3f96ef","ssdeep":"","tlshash":"57f019237e4b9469783f195b1043337c74944ec893a0a8d8ecfa91436df4cb67370611","first_seen":"2025-02-19T01:04:27.093332Z","last_seen":"2026-08-10T07:29:21.928501Z","times_seen":2602,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/webpack.runtime.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/webpack.runtime.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/jquery.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/jquery.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/imagesloaded.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/imagesloaded.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5520\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-08-11T12:53:32.1463Z","times_seen":203543,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/frontend.min_1.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/frontend.min_1.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44252\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (44212)","md5":"2f4178ab3a59c6620d2446c1726976eb","sha1":"b861b102f989bed593aaf661d37f90ac03548218","sha256":"75dd67187032c51f70fec4ff879b978202b184bfe6e5b8fff120ca6db4b2ee33","sha512":"32c4f5738025c5d643660902012b34c57fb45dfdaeee4dd16423412a896cd65a9541598c633fdc3e9d227e8eeb2c034c4db75edd1050b4c59ff6e21d86057186","ssdeep":"768:l3RP3yjt7ReRjDKvx1QEa/A3JSJGfVgNq1w9VKEAzBc5GPTSebsvTigAUMTSX5aB:l3RP36t7ReRjD8x1QEa3GfV3zEAzBc52","tlshash":"2313f71231d294aa55cf48b7b0330219b3765dddb402b59cb1bdace6a471e837372bb4","first_seen":"2025-02-18T18:53:45.609071Z","last_seen":"2026-08-10T07:29:21.917027Z","times_seen":3823,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"GET /scripts/pixel/pixel.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nlast-modified: Fri, 08 Aug 2025 13:35:58 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"1dbf4a5692b4833e577ccd806f8c9ad6\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 9ahUfozYvu15o_Hwbzzry-2gKiimHqQjw6-wQzV-M3geQqlQSLarmA==\r\nage: 7133\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nx4BtfvKSm8zDBc3sVkVc8nO5f4Maqj4HWooPmkBAuscL8x%2FxlIHLrW7uMgBbOHjgoLsxtTiecpKnLVOvLojQQ0elrOsm2sC%2FtFKDSTjF1M2hEkJjBRZMlZtNVuJQm52ecnd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96dd8d6faa4f56be-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=547\u0026min_rtt=440\u0026rtt_var=213\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3275\u0026recv_bytes=1210\u0026delivery_rate=7325463\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=75d5688fb4ec557f\u0026ts=39\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36756,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36749), with no line terminators","md5":"1dbf4a5692b4833e577ccd806f8c9ad6","sha1":"7bc9e45ab42df2bc0c92435c8edf7998f24ba854","sha256":"b9261154ce6eaa4cc44c5dc2083a412d0cd7613202a5e762ce8a29799b9e1792","sha512":"b6e7475cc28e67a89e1fd79992bb42fb605d958846c74cfa659bd66cd994b39011ac4adb0ba45d95a2865b9c8339e1524a8a95c0d65e9beb253410c0c8cf5f26","ssdeep":"768:Kcs8TAlfI1b8tWHv7fCqH5TtalmZZAqukM5Ub9zKqDvrWpFcZkHWpe2wCz6RIQFp:1tcIfX40NnmosWN1z6OiltII0A4+D","tlshash":"e9f28785fa97d4540be384e5c8772132f32c3a3e616a8450e23badd6bc187da7263d35","first_seen":"2025-08-08T17:22:57.983903Z","last_seen":"2026-05-27T14:40:34.098417Z","times_seen":267,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":22,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 10:13:27 GMT\r\nexpires: Fri, 07 Aug 2026 10:13:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414723\r\nlast-modified: Wed, 23 Apr 2025 16:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T12:56:31.356457Z","times_seen":296152,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":158,"dns":1,"connect":23,"send":0,"wait":8,"receive":1,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/fonts/Montserrat-Regular.ttf","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/fonts/Montserrat-Regular.ttf HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:30 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67,"size_decoded":0,"mime_type":"font/ttf","magic":"ASCII text, with no line terminators","md5":"45be33db66aa3df9cbd4b2d0163eeb8f","sha1":"f9d6f32a67b137880fc771c628d675cdab19813f","sha256":"ae95f44d74a59b86925cfed8db4cfde95f2247aa63d9b6a3efbecf82c15ceb2e","sha512":"18917708dfa3762327e6aa9646d31857825bc91708a3589cad5d926bd7e304257861aaaddc7e8512f59e3c2ad7ae82c0ec84f5ce98d6012507b20d13403eafb3","ssdeep":"","tlshash":"97a002aaa7a617105fd181ed91d5b218984344afb975c419d8880b9d35e42151c701cb","first_seen":"2025-08-12T05:25:57.537119Z","last_seen":"2025-08-12T05:25:57.537119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 Aug 2025 05:25:30 GMT\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d6044b2435d928dcdadfc771c512e628","sha1":"f080eeacb7bdc06d1bdf2c2cf2782a343adb7696","sha256":"d4b0f12567698361ad53077547d77d05e83b5ed6e772423fb2817b6d1e785427","sha512":"95704a1cec070d62288c1dc11258eae0356b43bf5e46197f87674a0e199c543849464278499b4496f188c09996790e625a0b10b56497eb6eb2682fe285d299d3","ssdeep":"96:SOEaOOEarJc+ukOEalN3OXaaOXaiJc+ukOXalN3OxMa9OxMaNJc+ukOxMaQN3Opl:lpvQn+q3K4laY4uJQ","tlshash":"aaa18dd1087be5049b831cc123cf7d36ee1ea255b450e5786bfd0c98adabc694362b2d","first_seen":"2025-04-26T20:03:11.059126Z","last_seen":"2025-10-29T04:03:09.414424Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":294,"dns":19,"connect":15,"send":0,"wait":32,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/preloaded-elements-handlers.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/preloaded-elements-handlers.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 212084\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":212084,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65403)","md5":"d03734f69eebf5358afd6f626ead1a43","sha1":"8b4876afec7e3a09167b10e99f38aaf1f21728be","sha256":"f54040cbb6cdbfe0893789398f2ba5ec6ab781e1d82a94a1c7a7d11166312054","sha512":"b6ca528464b61df73bd03d8a88766b2f573d15bfc3a9ff92c26b20d73472ddd7a795a5b2ecd8dd103626f6c5c96029b3cb7ca32b46e7088ee3b073b2ee77b3bd","ssdeep":"1536:nsA2SOaWbzhUfIJGSeuHhEhwH3oeTYPDMDEdZBywLIK86YP6T+Xj6/EUM8uqaij1:Tx/X8fmdwxvrlC7hTCa7e8luv3a","tlshash":"58240b923052987646cf40afb427020df72219adb406b4aeb9fc8cdb55b1ec63376776","first_seen":"2023-11-02T11:49:03Z","last_seen":"2026-08-07T20:25:07.583564Z","times_seen":426,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/fonts/Montserrat-Bold.woff2","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/fonts/Montserrat-Bold.woff2 HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66,"size_decoded":0,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"f77f9c6ea749a763825645ee5ea0a049","sha1":"8c03a4f37a383af6779852dd43e0e01c14cf3bea","sha256":"a3c97003425a169fa62fb9b49096def5087fce1292c1a80a869be701c8b29350","sha512":"df30c138c511891df6f06d1222a7c23fc633aae139230601cf11571434ddbe42ae6a819751cf400e769683ab7e449eb791138efb1a6435c1bd4a29587c0681fd","ssdeep":"","tlshash":"fda002aa771323541f5185fd52957128844300abb9694405d8c90a9a39f43151c311cd","first_seen":"2025-08-12T05:25:57.542065Z","last_seen":"2025-08-12T05:25:57.542065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/js/latest.js","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/js/latest.js HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4031\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12367,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12324), with no line terminators","md5":"1ef4504486f2bd486e68510d6300ff0e","sha1":"2045b152496ebbb538f2beacf1d7720a354f00b6","sha256":"f7e929099b5da0133ed7b0390131720fd0e8f8aa20251a220229ad6f9caa510d","sha512":"7962dd7f6699449f8625a7da3081d87292adc3bc836ac1aa5740fd3945a72c76f1e389bc8bb6bebafd0e7f329e754670d37fc06e95ed111c096406cf91260d54","ssdeep":"384:4IFkFzAdvF4ZdO9Eve49NYdsO3BGmrC/g+fEjmcbnaVaT/boMH:PFkFzAdvF4ZdO9Eve49Kdl3MmrC4+fEL","tlshash":"0842b6a5f179e4e413a20ca690b79271f23db735b005c1c1a14ead86341eeeb62d3d7e","first_seen":"2025-03-19T02:23:34.934991Z","last_seen":"2026-04-05T06:26:16.865483Z","times_seen":12,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/custom-widget-progress.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/custom-widget-progress.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 313\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1189), with no line terminators","md5":"9fa0edb34a1b58f525a3047cb36458aa","sha1":"17a831f86d0f403ba362be4f5e7cf03c958a0ace","sha256":"52c2c74d10a4a60158cb8dc256c1511dc8f39e54c210986a6ad04fe6465910de","sha512":"8eb448a51c5a63ba351b39821cd6eb1e5f4851a16218fc8c02ef6eb7de79b946435fee37005c75d8838ed7c67bfb372bd5ea9b10c0f130a8daf213c4ce373b41","ssdeep":"","tlshash":"d021ac01fdab1019302f496a60d3324f23a440dc918fc7e9ed95a016dbf9a853f233c8","first_seen":"2025-03-03T08:02:20.151227Z","last_seen":"2026-08-11T12:53:32.14684Z","times_seen":1665,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/hello-frontend.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/hello-frontend.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/609596521869993.html","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/609596521869993.html HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 138\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"bc0703be001240bdd8a6e6ff16f19596","sha1":"7c799396b652deaf4fd4f48d01a332f11053388d","sha256":"af4a14c499b3b3e29c366984c00d84d24a78c69975055354cfa0f093f436c1bc","sha512":"f05fa334d0fa4afaee7f0b4688b895c409d25d69014088e876201824f3d60311b0f4df366aec96f260110936704205ff9f5a84e8470bd441dec4b62ad0575da5","ssdeep":"","tlshash":"38c02b0d74636148dd03115017c33240c488c33f685ac01008028483b0cf2bac4c23a5","first_seen":"2024-05-26T07:30:18Z","last_seen":"2026-08-11T12:41:40.343986Z","times_seen":21058,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/hooks.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/hooks.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/jquery-migrate.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/jquery-migrate.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/lazyload.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/lazyload.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8291\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8291,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (8290)","md5":"b00219cb958052cb557115d55f0c8d48","sha1":"3c55bbf5a8082db61decff924aaf787f4337df86","sha256":"8ceb3992861ed1fda25855c2e500e76842ae0d788405e50e3a9f45df36499cf6","sha512":"8551b616ff3abb64a5a63e68f07c82d72bf89cff6602339f900e282d3d0f8e9781a6361da024f289105f971f4c56c6a3c4c9dd33627525462fac6319f6f0435f","ssdeep":"192:pDvu5/lEKbR9plcliHYecexZno2fa65gIe2vVYAtW1eiIvO1SF:pTw/u6ZjyOeOe4F","tlshash":"6e0221487d41742f2933f0f2515f12ca753b28426ced6954a6e1f5e82d7848d28a3fbd","first_seen":"2023-03-07T01:07:43Z","last_seen":"2026-08-11T11:11:33.212391Z","times_seen":6181,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\ncf-ray: 96dd8d718f7756c7-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=479\u0026min_rtt=441\u0026rtt_var=89\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3268\u0026recv_bytes=1222\u0026delivery_rate=7855334\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=951e7b02dc79d4cc\u0026ts=153\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":54,"dns":21,"connect":1,"send":0,"wait":117,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/custom-frontend.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/custom-frontend.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6442\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53410), with no line terminators","md5":"8f397010b26e4217fd3fa004571ba618","sha1":"d6b032f391943a1207dcf512d71afd1e91da4ef1","sha256":"df996e194ebf62fb1885931f0e4f909d4372febd3f5a14ef8fe24179f86e95a1","sha512":"14922a31ca3eba2e3fe62e19b522bc195ceaea80dd7cc866bec9712361e1ce1e41f835541cdccf001bffaf0a1b15c662602222bc7bfca01a79a8fcce71e6a582","ssdeep":"384:LvrJt/vOyeUUEMoZ0qk0e/mmsm5Cz9TfikvmGkvmCLldlRab2ksYrB:7jR/L2t7mglNK7sm","tlshash":"8e33fb623d13b269226f482b82d7354c526495c1ee1376d9fa04c523dafece63b36c1b","first_seen":"2025-01-28T09:25:10.467936Z","last_seen":"2026-08-09T07:45:10.562984Z","times_seen":293,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/frontend.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/frontend.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/preloaded-elements-handlers.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/preloaded-elements-handlers.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/fonts/Montserrat-Regular.woff","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/fonts/Montserrat-Regular.woff HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:30 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68,"size_decoded":0,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"4d68ae0e60e4b21cca108e2fc531ab7f","sha1":"d21e9bf7a739bcebfe8e413237ab76cd213efc87","sha256":"8a07d564772995b5d5d9290dfa518a3496ef8cacae5ad181b3bc4e2aa7bec0f4","sha512":"2009c95dc39e89943ec8a6e8ea1ca5b1e2f2280667b9e9b3b26954dd2998772f22eb88b5501ef18fa794b7b74d0af759505917e5926f3f72db567e359d8a4072","ssdeep":"","tlshash":"13a002bab7a637105f9581ed91d5b218984304bfb975c405d88c0b9e39f46551c701cb","first_seen":"2025-08-12T05:25:57.549549Z","last_seen":"2025-08-12T05:25:57.549549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/widget-social-icons.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/widget-social-icons.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1069\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110)","md5":"4f4aa32dcc6d8df6e862019446b293d5","sha1":"3be147216136607bd99305cc35e22d17ecc238e3","sha256":"f4870afa2058c42b95fe915ec2f8134faf6cfe7d62c1d2486955da2d91030540","sha512":"f6012f9760f2784721375408623e39d0ff0a54838db661f1f6f488b1de3e89180c213e62a7077df96e17a45112ecfbf4e3b03b83dcb146db758d6933b950232c","ssdeep":"48:BJZiUDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:Bnfoz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"a3b17650be4f9586721f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-19T11:13:50.366977Z","last_seen":"2026-08-08T21:11:34.411611Z","times_seen":1517,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/i18n.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/i18n.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/webpack-pro.runtime.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/webpack-pro.runtime.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/images/8666ff28cfc3e06ca4470e2d53381b1918f346bc.png","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/images/8666ff28cfc3e06ca4470e2d53381b1918f346bc.png HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7869\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 886 x 238, 8-bit colormap, non-interlaced","md5":"d88fc489dbfdddf3347eb73e66ca8ce7","sha1":"a35727d7069171eb8aade2d111228bccb748cc9e","sha256":"29f2b83913032590a256a4cb2ba2749ed04ae032a7648fb001d4fac57cb7846a","sha512":"f8be607193c695a0953aa58337a5bd961f968037d88da09754e10cbd06df3c287942bb07485cdd41e666bd4401e036bb64ca7ac8b91707a86048cd09252ac7e4","ssdeep":"192:5iRvueLvEKkIhJqQ9cok6SIpfq1eg5JoJlIB5DripZR:QRjsK9hTcoHSUScgJlBNrgj","tlshash":"cef1bfc237465464d7a24f1b029010b11b09e24427df4f9f8956b66a4cd63f73ff16ea","first_seen":"2025-04-19T22:55:14.28104Z","last_seen":"2025-08-12T05:25:57.552822Z","times_seen":4,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/frontend.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/frontend.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24674\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24674,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (24630)","md5":"59ab277efa930785720a63e9007677aa","sha1":"144750f1e4d88d5d0bf93704ffebd349dd02e653","sha256":"c7267d9f9b72944e2b3772a521fd1b8882ca17b124de63549fbf591167efbd25","sha512":"153577744897d8e897e0321d562ab727fa71b8be776da89a6e3443618ee58c952e50d23b90b7f0e275bb3626452947b20df4dbbadd82c1fad1c5e23355b90169","ssdeep":"768:gTLX+EV2m6SbdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEbzGv:gtV2m6Sb94Q9HuG2iiwkOsN7KOljuOzS","tlshash":"71b2d8063163a87a50cfc157e067420e7b374895740570ed7abc6ceba5b8d9a32eb335","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-08-11T06:04:40.606492Z","times_seen":2287,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/fonts/Montserrat-Bold.woff","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/fonts/Montserrat-Bold.woff HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:30 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65,"size_decoded":0,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"d1f2b3c4cf25084c9df8c23b078aa3aa","sha1":"fe70d7dffbb83bd142ad35764e015797699c4405","sha256":"4111d0979d42dd12eb43909021cd9dd1e9a4b5b31c3b2fbcbc1f44cbe663f8a3","sha512":"13f9eeaa5cae90689858c170b36747a8aac5b845efd9fa0c36ad17d287e8ae7b286f0b3c6e437cced24072868f6e49c87d2d0987365b28fb1d98f13178f5fc1f","ssdeep":"","tlshash":"c1a002aa771323541f5185fd52957128844300abb9694405d8c80a9a39f43151c311cd","first_seen":"2025-08-12T05:25:57.554679Z","last_seen":"2025-08-12T05:25:57.554679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-12T05:25:29.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/ HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26444\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.27.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232536,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2a72f77b3f3b8b3adef1a405a2467ef8","sha1":"5ee0edcf3768bbbf741225502df725decffe768d","sha256":"fa9bcc24dbde0a16265a761e59ca61a5362f37d13637f6a16b75241cfa5a9020","sha512":"22087ddb71af2de03ef0b686def6b7b5994466ad4406cd7b59cc5854dca3ec4d82158f146d3fbea68dfb9749cf1d39a5ef133a89914648bf66de53c041d39bdc","ssdeep":"6144:ROej/DuzLAbAeLufPeLufzYLYuC6/49PMlek05kr:R/DCY16u","tlshash":"a1343f60bf0f1026711f119f502ba2cd256d9cfae9299de6fcb16123d4b8df433a1668","first_seen":"2025-08-12T05:25:57.556956Z","last_seen":"2025-08-12T05:25:57.556956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":169,"dns":88,"connect":38,"send":0,"wait":72,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/custom-widget-image-box.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/custom-widget-image-box.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 263\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1369), with no line terminators","md5":"f21a7d4332edc56e984d2a97f46bd751","sha1":"d9c93e238d7faacccd3dabe6af83b305bfd66543","sha256":"f1c02c66294aa2f086046275c5295b1ec6d31845b59970633df2f97e6716c46b","sha512":"86acd56d9cca1ff9d6870f4b3a4bd1ad119b52dcfe8666b9362ffc052c588630ccf6b8373d5098d970393bf456738f0744aab8832b8914dadf64dbd6f2a2a359","ssdeep":"","tlshash":"68213ec13c5b5447242f5b1b346f248d68a24cc8eb92e796e892a20706f9de53332c2e","first_seen":"2024-12-18T08:06:52.905101Z","last_seen":"2026-08-07T09:56:04.71577Z","times_seen":738,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/i18n.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/i18n.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9141\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-08-11T13:00:04.168201Z","times_seen":261881,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/core.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/core.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21464\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.581Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 12 Aug 2025 05:25:31 GMT\r\ncf-ray: 96dd8d72fa57b500-OSL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g0nbHOdWX5xK69uDYRO%2B5ksGz8kX3SlCZPQzavgEC8dEmC9bFGaf49%2BthGB3k1JuwKEJjzEi%2FPGqFG3yNtFisoh44c%2Fu1NX4o%2FFWHVGgSrqCmkGFBrDJPg4CtNvDmqHTyFiRE2JmVeQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=654\u0026min_rtt=513\u0026rtt_var=259\u0026sent=8\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3277\u0026recv_bytes=1309\u0026delivery_rate=8044444\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=880b2289af8d5fb0\u0026ts=528\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":35,"dns":22,"connect":1,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/theme.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/theme.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1145\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5131,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5127), with no line terminators","md5":"08fae0e9f8ce7e1cc244d6957a0fc71c","sha1":"958fbf4f8b318e39612dd25eefae43c006769883","sha256":"30c2e510f9fac929eeab0ea915d80904a4e72b22eb8612dd8c83c7dfb71862e0","sha512":"e8f69bb51f6caf9ab132b1be8f6ee3248c80dd74e47823c17ce4c1a14b289bdb2c2ac19035309724e3f8f53a2647b3204f8dc83ae85081e9069275fcac7ae4e3","ssdeep":"96:5ElyBGxT+vAeTzwKbFudzJGW3tCgcMNl3MNM1MNIXMNd8MN7zMNbKD:5ZBGmTNbch8KCgR5A","tlshash":"76b1757ef8d1307c593f9b06fac65b8d2068871ad3530ae9eb99db1a819e710781334d","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-08-11T08:29:22.289333Z","times_seen":4953,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/imagesloaded.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/imagesloaded.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/jquery-migrate.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/jquery-migrate.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13577\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T12:57:41.868528Z","times_seen":929235,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:38.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"POST /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nContent-Type: application/json\r\nContent-Length: 412\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Tue, 12 Aug 2025 05:25:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\ncf-ray: 96dd8da5c92fb500-OSL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"39-d/xAmW6uFw360hLhV64n9Iy6Yns\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EgaYvhVfRhCXT4aGA%2BeVV2YjWk%2BKVv5TWyJLmSnp4Q8VIQJlAIIcHURbCs0W5lyJLHMhgBpvN1A2i3FiZc2UgMkFFhHjorFSAdXnQ25spz4sB8mi8NN1xFYqmuXOwJUFSdRQnyt6UzI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1485\u0026min_rtt=513\u0026rtt_var=1351\u0026sent=18\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=5040\u0026recv_bytes=2460\u0026delivery_rate=8044444\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=880b2289af8d5fb0\u0026ts=8336\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e8c796e16e5fb5d3ba9caf9eaeb0a1c","sha1":"77fc40996eae170dfad212e157ae27f48cba627b","sha256":"d080239f3e646284ca12f80894be34bdce97d96d161a6f241a12903071680173","sha512":"6de748bcc8872814e2d9a309738d723c1866358d3d291028c42167c9a6046019587d1646ba119f656b509ceabfd05171e004f16578e83db04eb126db3b4ed35f","ssdeep":"","tlshash":"3f90028978165a71475a8792710146511259394206197c91c08de61590544317e1e55a","first_seen":"2024-06-16T12:07:56Z","last_seen":"2026-07-25T00:24:18.516515Z","times_seen":485,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/images/laura.png","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/images/laura.png HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 356396\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":356396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 577 x 505, 8-bit/color RGBA, non-interlaced","md5":"7a08b6609ce5a00332caa60d87397f33","sha1":"116c193b3f4fd5daaeae72fa69b89cc9ea677546","sha256":"1e1c47d5e9497745d4ba8554378ec9137ce9bd83684fc848234e8bddd9ae874e","sha512":"157d1d7b8ddcc898f0e644070562e91533ed399946253bb3a41b83a99afa1c17f29072fe9fd3ef31b321dc099a147ee09439af35b526a8417be07eb585afff06","ssdeep":"6144:2h0dU6ANliHtttajIoBZ0bNlrfo+lfOsJF9sH0nZltaKdRD8sVxDMnGxQ6Q:TdoNuasoBZ0JlLtfLF9iiaaRD8Mx2","tlshash":"647423c1cdf85d8b871a6510c35a124265f4dbdfa68eb127ea767dd982c830803d7a8b","first_seen":"2025-08-01T02:54:52.705529Z","last_seen":"2025-08-12T05:25:57.563645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/webpack.runtime.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/webpack.runtime.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5350\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5350,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (5310)","md5":"85000f8fc8f17ac7bfbf5bb6c774bb6e","sha1":"93756297a1d306eac3d5bcedce0fb3f98eb8fab3","sha256":"ac4c254fda1f489c8a150a0cac9b909a5527b5517e0e312cef2be51b96dc10f7","sha512":"674cba63dba714aa0f6f9cde226a9128daf11403fd91cce192764d195d8cfe56856f56d4cf0f11e7b4e3b34a389e541995d2c9b2a8ff0105491cf8c83cd0c43c","ssdeep":"96:BnisNt0jqf9fzDeWKF5xl8O7AULQF15lejNVobVDjgqKokxwvT8i2:lisNCjw9f/eWKFdPQUN4FjgvCgi2","tlshash":"f5b130941a94fc2b31e135c8a11ba730662fc1377c1bb8c1fa21dce955e8ed187a9532","first_seen":"2025-02-18T18:53:45.607488Z","last_seen":"2026-08-10T07:29:21.885675Z","times_seen":3883,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/jquery.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/jquery.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87553\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T12:57:41.822203Z","times_seen":1014348,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/fonts/Montserrat-Bold.ttf","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/fonts/Montserrat-Bold.ttf HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:30 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64\r\ndate: Tue, 12 Aug 2025 05:25:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64,"size_decoded":0,"mime_type":"font/ttf","magic":"ASCII text, with no line terminators","md5":"d0259c4c5ce46169fbfddaeee1943282","sha1":"ef62a62a3bb2d8206d3e6abf983a7bc4afcf7310","sha256":"4d859c4418b13f27b9acf756607b2ee3f75a71724ffa8f3cfe0301dc7bedf5c1","sha512":"bfbd115b9a6fda00d51d78020d3ea1be918843b793ffbf9defe84dfa096e363759cc3e91e6d3fca33d0e1c285ddfb94f5e154c8f02b847ab2b6563dbedb3c99a","ssdeep":"","tlshash":"53a002aa671313101f5081fd1295b1188443009bb97d840ad8c40ada36e43291c311cd","first_seen":"2025-08-12T05:25:57.56808Z","last_seen":"2025-08-12T05:25:57.56808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/uploads/2024/03/heart-black-icon.svg","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:30.894Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/03/heart-black-icon.svg HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/custom-apple-webkit.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/custom-apple-webkit.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 472\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7025), with no line terminators","md5":"e9b1e2081a27f02916ca1f02303c6adf","sha1":"96a85e6703454bb25109acf38dc9756cbfc347f4","sha256":"02c3b1394964fd713f366fd878ba6c450f8e51618d7d98dcc3ba0b6e94ef3800","sha512":"b8ecb12d64c674463b669f5288a7c4a1906536177d9eb15764c7420fd71b2d43af88e3dd21a63ff67b29ac1517cfe74f4e38a6615298df3b4c1c727990d8d1ee","ssdeep":"192:lozzzlztzFTIeIUI8IxiEzWEznI1zk7mdz0zaz6zGsIXIBIhI6iJzLJzQIuz9dry:KnhBkXIuYY2+5hSTqmwsfBOd","tlshash":"efe194757f1b6a398c6b2c5b5397a06f768050e99182a382c04358039cf7fda7bb857c","first_seen":"2024-12-17T09:11:11.367183Z","last_seen":"2026-08-11T12:32:35.966411Z","times_seen":56676,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajudeurgente.site/wp-content/uploads/2023/12/OpenSans-Regular.woff2","fqdn":"ajudeurgente.site","domain":"ajudeurgente.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.815Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2023/12/OpenSans-Regular.woff2 HTTP/1.1\r\nHost: ajudeurgente.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"ajudeurgente.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/wp-emoji-release.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/wp-emoji-release.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18726\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18726,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (15752)","md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-08-11T13:00:04.296509Z","times_seen":103156,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/webpack-pro.runtime.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/webpack-pro.runtime.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5801\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5801,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (5757)","md5":"8027f7d649c8b4b044a03ef82cc7ef68","sha1":"4ba490a1a2544a195e5fba915ac5eb09eaaec5b3","sha256":"d9755b7eff734eeb6267db6515f0267fc66622cd873cd37f65761b3fcc94cac2","sha512":"f372b4f4a838e59a57c7655acd7ac66b4880360d39edc865f4cea1643f5ad9bf47339a7520a2bc4c0e9a040098dd1236d55ee723673ca9daa04e5d2d4b638cd9","ssdeep":"96:BTifnGhUqdL5MGSPhRm0j0DEpre1bNUx4Gk4OlL8GVyeV9WmLttXSc/8k2:JifcUgL5MGSpM04CrI6CGTvG3rXnEk2","tlshash":"f4c145d90a949d5b26e139d9b0975b701e3dd0323c15aa81ea52eddc19f8fc083ea933","first_seen":"2023-11-01T17:10:30Z","last_seen":"2026-08-11T06:04:40.526132Z","times_seen":2284,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:31.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"POST /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cestabasicabrasil.com/\r\nContent-Type: application/json\r\nContent-Length: 409\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Tue, 12 Aug 2025 05:25:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\ncf-ray: 96dd8d763dd6b500-OSL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"39-d/xAmW6uFw360hLhV64n9Iy6Yns\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HC764wLPNo2mzVGb%2BY3QYQM7i6yttPZgDNUw%2FfRRVejwQ7Nc7qC8goTcw5QjoYJGWi50ow1QXu9tyCvY2ArLR03R%2FglZrrl7f3IYt8IFuLKXiaAruoOnwZoxxe6m3ceNd9dBduA6nhk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1156\u0026min_rtt=513\u0026rtt_var=1198\u0026sent=11\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3984\u0026recv_bytes=1848\u0026delivery_rate=8044444\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=880b2289af8d5fb0\u0026ts=736\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e8c796e16e5fb5d3ba9caf9eaeb0a1c","sha1":"77fc40996eae170dfad212e157ae27f48cba627b","sha256":"d080239f3e646284ca12f80894be34bdce97d96d161a6f241a12903071680173","sha512":"6de748bcc8872814e2d9a309738d723c1866358d3d291028c42167c9a6046019587d1646ba119f656b509ceabfd05171e004f16578e83db04eb126db3b4ed35f","ssdeep":"","tlshash":"3f90028978165a71475a8792710146511259394206197c91c08de61590544317e1e55a","first_seen":"2024-06-16T12:07:56Z","last_seen":"2026-07-25T00:24:18.516515Z","times_seen":485,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/hello-frontend.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/hello-frontend.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2937\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2937,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-08-11T08:29:22.309192Z","times_seen":5056,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.10.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:38.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 02:08:55 GMT","end":"Thu, 09 Oct 2025 03:08:41 GMT"},"fingerprint":{"sha1":"1A:81:66:F3:28:17:80:AB:54:74:6A:03:C0:CA:AA:1E:F0:9F:ED:D0","sha256":"D6:62:61:9C:32:D6:1A:02:13:23:8C:E3:69:DB:16:B9:96:A5:C4:19:0C:DD:5B:5A:CD:73:0D:45:4F:94:EE:F7"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cestabasicabrasil.com/\r\nOrigin: https://cestabasicabrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 12 Aug 2025 05:25:38 GMT\r\ncf-ray: 96dd8da4afa7b500-OSL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BD924mujoNvyCJGJWjeis%2F838gmILAXbpE9xifsy3XjkS3CzFj03PYqGqKjzqiW2f6DuszZaAYjElS6U0wt8oenLMcW4pjrEzRJFFYtY%2FYlzvYuCJGVMCR7WzoNMMKCOORwnW%2FhtKyg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1151\u0026min_rtt=513\u0026rtt_var=909\u0026sent=15\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=4587\u0026recv_bytes=1931\u0026delivery_rate=8044444\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=880b2289af8d5fb0\u0026ts=8143\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/js/latest_1.js","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/js/latest_1.js HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4329\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13569,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13526), with no line terminators","md5":"12bbaf3b433941859ea85e578e5277e3","sha1":"7331a8f2f79dc27af04895a590c3023750be36a0","sha256":"c0e74f8a56bd49c02fab2aebe46245b6513c7fea860b8cc16bec7e9e49cacb22","sha512":"a058189d4fc3d79d2e4161c1c88e8ab740b1d73e322f9f67ce377231039409058f5750c3925b08146b38fadd246f5bf1ff26c700c42f2479df20824eafec9502","ssdeep":"384:4iyEEbMdTFo1vTCbJeY9pR+dYDJODPq6mQ9JwQRQa+ssRN+7zkg:5yEEbMdTFo1vTCbJeY9pR+dYDJODPftr","tlshash":"e65285a4f179e4e412b24dba90b79172f23db7397404c192a10e9d45742dfeb22d3e3a","first_seen":"2025-07-25T02:20:06.503169Z","last_seen":"2025-11-26T11:29:18.724393Z","times_seen":18,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/css/header-footer.min.css","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/css/header-footer.min.css HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1310\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7325,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7323), with no line terminators","md5":"4f6608672aae4899d264369dd0c580d9","sha1":"c4b0007b7f9377cd9d7c6b8106dffedaa03d1610","sha256":"97a09cb2af7d4406f6163874dad15c607d571749611d00890d47143495a0a617","sha512":"71269b46a4c18fb845dc411d6de352b8f3ed0bf320e05c4873209b18298beee451975d5108c55a1249f6e37e1227b0b3e4c1de4fcfe85d9dcabf608f5ae39a5f","ssdeep":"96:EfTvO5c2yhjFobxStP53m8yPoTZFo5jJxzy4vA3eCiwtzG/4vo3otubEm+B1Yz:3/otJtFo5jLLx+zI4vdud","tlshash":"fae1cf66f8f2357813338623a7e147ae50bac00dd90babf561eac31b05db44217a7f59","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-08-11T08:29:22.289895Z","times_seen":5698,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/core.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/core.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/index_files/jquery.sticky.min.js.download","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/index_files/jquery.sticky.min.js.download HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T12:43:04.106919Z","times_seen":148883,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cestabasicabrasil.com/ks/images/save.png","fqdn":"cestabasicabrasil.com","domain":"cestabasicabrasil.com","tld":"com"},"ip":{"addr":"185.208.156.66","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cestabasicabrasil.com/ks/","date":"2025-08-12T05:25:29.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cestabasicabrasil.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 06:56:38 GMT","end":"Wed, 22 Oct 2025 06:56:37 GMT"},"fingerprint":{"sha1":"A5:A4:E9:7B:01:55:17:D2:74:A5:77:27:0A:47:12:1A:3E:62:A5:77","sha256":"74:62:9F:54:04:40:96:5B:07:93:FD:B4:4F:D0:1B:EF:54:8E:0F:61:C9:AD:97:C8:33:43:5D:69:47:FD:74:C1"}}},"request":{"raw":"GET /ks/images/save.png HTTP/1.1\r\nHost: cestabasicabrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cestabasicabrasil.com/ks/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 Aug 2025 05:25:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Jul 2025 23:04:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2263\r\ndate: Tue, 12 Aug 2025 05:25:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 79 x 31, 8-bit/color RGB, non-interlaced","md5":"bf893298f1c5a61eb7a088655340edf4","sha1":"6b3764374201399a2f6a49ea77947ca5488f2c6e","sha256":"c537625fdae292b8f84ca77c1e01dcc5c6e51294c92402b9fab72ce6c24c7836","sha512":"a03715f4c080e9361fac483d2c87edd6d876a38384450c6975a0b25aaa92352213ff31df9ec706f66a15377ab44e3ca5d7530fdfd41b1c53013175cd82a5eac9","ssdeep":"","tlshash":"7d4139d474334124c621c1166838fc5220d6fcc8eb9cd3f4850cd92d32aa30e8aacd37","first_seen":"2025-08-12T05:25:57.574983Z","last_seen":"2025-08-12T05:25:57.574983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-12","alert":"Sinkholed","trigger":"cestabasicabrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}