{"report_id":"2f2c7417-eda7-4e80-af9e-277f3eae7f1f","version":6,"status":"done","tags":[],"date":"2026-04-20T21:51:25Z","url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"title":"Get robux","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-08T19:41:50.214646Z","times_seen":1036350,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T21:51:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"pl29159990.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"pl29159990.profitablecpmratenetwork.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-04-20T21:51:25.487456Z","last_seen":"2026-04-20T21:51:25.487456Z","alert_count":1,"request_count":1,"received_data":48670,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"d39fkvblvwpxa1.cloudfront.net","ip":{"addr":"65.9.60.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-11-20T22:57:01.99551Z","last_seen":"2026-04-13T02:22:26.014078Z","alert_count":0,"request_count":1,"received_data":14308,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"51.102.231.236","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-15T20:56:11.843562Z","alert_count":0,"request_count":1,"received_data":695,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"consumeririssalary.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-03-13T09:30:31.324082Z","last_seen":"2026-04-19T21:28:39.600155Z","alert_count":9,"request_count":9,"received_data":25240,"sent_data":13768,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":126729,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d1qt1z4ccvak33.cloudfront.net","ip":{"addr":"54.192.209.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-02-26T04:40:50.812849Z","last_seen":"2026-04-16T15:19:47.881172Z","alert_count":0,"request_count":1,"received_data":27801,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"archive.org","ip":{"addr":"207.241.224.2","port":443,"asn":7941,"as":"INTERNET-ARCHIVE","country":"United States","country_code":"US"},"domain_registered":"1995-12-14","domain_rank":184,"first_seen":"2013-04-16T14:52:59Z","last_seen":"2026-04-14T05:46:55.090759Z","alert_count":0,"request_count":1,"received_data":17527,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maxsegnr.com.br","ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2015-01-08","domain_rank":0,"first_seen":"2026-01-19T21:08:59.402473Z","last_seen":"2026-01-19T21:08:59.402473Z","alert_count":45,"request_count":9,"received_data":40629,"sent_data":4054,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":2,"received_data":44430,"sent_data":1119,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-04-16T23:33:44.541218Z","alert_count":0,"request_count":2,"received_data":179175,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d5b3uz3fo8hn3.cloudfront.net","ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-02-26T04:40:50.805751Z","last_seen":"2026-04-18T09:33:25.685099Z","alert_count":0,"request_count":5,"received_data":23564,"sent_data":2322,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.46","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"dn711207.ca.archive.org","ip":{"addr":"204.62.248.181","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"1995-12-14","domain_rank":0,"first_seen":"2026-02-15T15:54:14.047916Z","last_seen":"2026-04-13T02:22:27.2656Z","alert_count":0,"request_count":1,"received_data":15878,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/public/external/check.php?it=4596755\u0026time=1776721867056","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-08T14:38:56.849271Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/public/external/check.php?it=4596755\u0026time=1776721882413","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-08T14:38:56.849271Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e008ea388bb8121d306f185b9257d74b","sha1":"ccf284729c8d5c97044d6f9ef405b5faddee3b0e","sha256":"4a31370bee9832a060471c339f482f9363db0c34f6715d544c4a506bd4361787","sha512":"a9d93f350f8218a8a93d29e997b7db5747845cd828c40d164871bba9e8efa2f6ed13a88ded73ccf1b95bbc0e6bee9983427db96d8eb2c1555711a09bd4d8af1f","ssdeep":"","tlshash":"8a900234697940b6e485130689a968130b4961524f50dc492591a9644294681469a0d7","size":56,"data":"","first_seen":"2026-04-20T21:51:28.573986Z","last_seen":"2026-04-20T21:51:28.573986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"035b9fff49848e9ba06f0cf30467412f","sha1":"1a933e44a16c5a25c6f18d96e305a55320d091f4","sha256":"83d707f844646eda4d2fb7817315815aaea0add8f294403f8293092a1471994d","sha512":"c6b535be4ebf6c00c19d5be26b8cad17bfb0f7781cecf79d0b1e8d84e52b063e24b24a86e64cc10ac354b4c2ebf5b8102ae5aaa7aab41a51441ae17d5c1a1114","ssdeep":"","tlshash":"7471e354e6b60c249223c07e17d76609283c212b7c85ba493f3c425c2f9ef5f55f94ad","size":3577,"data":"","first_seen":"2025-07-02T09:29:01.200017Z","last_seen":"2026-06-04T15:05:04.207711Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1qt1z4ccvak33.cloudfront.net/4cb4d3f.js","fqdn":"d1qt1z4ccvak33.cloudfront.net","domain":"d1qt1z4ccvak33.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbe451db27ded8a6693127c5f75fbf6a","sha1":"cfa488e05bd335acd3a552390b34076dc3de1dbb","sha256":"33b51d9dc698ae440ce10cdb24dd0ef9c0f9536e6f58e25c003252094f8172d7","sha512":"13f5dc59d1a4dc5726a8ee8c02a749593e61e8a1f4ea6ce5a830016c696e0994a8e141dee341d00b500b8ca9cea72bd20038ad66379eacccb433f993c47dedb7","ssdeep":"768:n5f2v236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:T3Z7OZ1h2ayQgM","tlshash":"04c2545aab6a1849867763b9df1f5208f675032f1512c119bc7c88d85fb0d3442aaffc","size":27325,"data":"","first_seen":"2026-02-24T15:07:21.466786Z","last_seen":"2026-06-16T10:39:53.358418Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3db0933c392d99fc67b7ef66928ecc18","sha1":"28613fc43d2c237dda5edce1d352118d6a045fd5","sha256":"145543a5e5c01c755f14a37f93caad2ea8498a7bc40179b711bd676cb9b70a86","sha512":"1455c1905162b119feda47dc40712d3fe7a32f06240bcda59dd4000f69dbd3ed49033d1ff91aeb3ab306e0ebd9c1a03b9ee2b475518c734c5d3340bfbe024ffa","ssdeep":"","tlshash":"c3e0721a34c2203a02b385aa23f7810a2522370fc48ecb22be5fc4961f28ca1050650c","size":309,"data":"","first_seen":"2025-05-09T21:49:28.102762Z","last_seen":"2026-06-04T15:05:04.208253Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl29159990.profitablecpmratenetwork.com/aa15b2486eb20753c2b57b571123218e/invoke.js","fqdn":"pl29159990.profitablecpmratenetwork.com","domain":"profitablecpmratenetwork.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ba16a2cf89046ec6cd3c7eeab5075a","sha1":"c733143b7900ba9cb4d9cec38b4dceec50f5879b","sha256":"e5a33aec61151c9bc20bcf4ceb37438195c18fa96de3e62cec561bbb381a9e8b","sha512":"28d564b423561a00364cc2ac1600802612bb5b9fa74cae14d9e4662c1be0e0b4913fce31553953f299e6c465a7a5c16a67b20880f5405bf64a0ae0cbcf35d9e5","ssdeep":"768:3JEOlhPyuK4VtK9OoQjPKpDHuiN1JyKxYNo0E6bO8xcvHVk4e:+tg+pDBWucE7AGk/","tlshash":"9a23c5d87e41f23c16676036623fc50fe22a5f01978cfa98e167d5a82b6cf09993a705","size":47805,"data":"","first_seen":"2026-04-20T21:51:28.56883Z","last_seen":"2026-04-20T21:51:28.56883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/hqho0SN4uAIb6J.4596755.ab8a5.0.js","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23cbbe97b60430e81d0be3bc97f57fcf","sha1":"ca6e8d9d5e246e0e60419ecef55d637f674a14d1","sha256":"27d91e7ce91a4c57ab753adb0c0a6412562b3fdd5c22f47c70f584251c32e7ac","sha512":"927aeebd46807d0db39bee2952f6acc0b5327c18cc208d2c58cb422ba5fe62e52d917d5807536836d1b2580e8a3a08ff5a672c46d94e254cd425e097fce7373b","ssdeep":"384:MFwWVxd7FNMElWE9WzK6gB+0kGNd1C8u04vcswaw3wmhwewXwu:MjVxdhem6gB+Ou04vcDxgmylAu","tlshash":"4752e9e17941d429f3d38c1d72ff5e796849342481c2f6b4fa8de62c87ce0b849e2694","size":13327,"data":"","first_seen":"2026-04-20T21:51:28.564195Z","last_seen":"2026-04-20T21:51:28.564195Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"maxsegnr.com.br/","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T21:51:02.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 21:29:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5150\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19425,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d02c7c7d14d4dd031878c50182fa127e","sha1":"f8e8d837ab7695a4f3a34a5841eb57655c9dfb7e","sha256":"e4413572d73b0a633b4798905618a02573849147e266eea508cb0cf0bee84870","sha512":"dee7bfc7f2509fb336395c3f535baf1597f1c6cc34416a126e7e6f7c9808abded9875da45e6d5b82ac7a5d91de2e28a545426bc6d97e6636ad5d602cb1cd78b4","ssdeep":"384:nX2aT9hv5a64EXf0dxpdtVbilizciUiny6isiJiOiSz:nX2W9hv5a64E0xKUdJnOhQfSz","tlshash":"6092652794814407a233d2a89fb2170dfb559117d74241ae3afc238b5fb7e44d593a9c","first_seen":"2026-04-20T21:51:28.560675Z","last_seen":"2026-04-20T21:51:28.560675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2048,"timings":{"blocked":908,"dns":453,"connect":225,"send":0,"wait":229,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShNPVo0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShNPVo0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://maxsegnr.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29424\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 02:01:43 GMT\r\nexpires: Sun, 18 Apr 2027 02:01:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244161\r\nlast-modified: Mon, 15 Sep 2025 16:31:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29424,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29424, version 1.0","md5":"62fc60979b530feaf3c27c45fbfd9d57","sha1":"c384a32c7643e137d25b0a43175ab6ba0ba36e94","sha256":"d253244d475e8b0d5c521b1742f1ae3ec29280c113a6f29dad54bc4f320311d1","sha512":"ed0be079d2d163d9c4e251a68798f3f6b1f39d7cf19a8a50547f833f7bad35cd2a59f043fd00b7d8ea9f5bbe323d5172c07b9b2ec262e2e83bcd6370e86404d6","ssdeep":"384:K39gcKf3N9TvweI98vfZG5Y0JaJXNemXLxWL4nEbsq9mog90xNbSIO0VrQKL5RJl:069dwey8pH0ghVLxWL4nMx9Bb+IOudl","tlshash":"92d2f2c8f7f83c00868db63956dccf60110d387765a4de069ef46978a67163bdc8a9a4","first_seen":"2025-06-03T08:53:08.201346Z","last_seen":"2026-08-08T16:57:18.277483Z","times_seen":2815,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":78,"dns":0,"connect":20,"send":0,"wait":22,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/bi/0a/53/90/0a53908c9034476078b3f956b9663221/1595867552.jpeg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /bi/0a/53/90/0a53908c9034476078b3f956b9663221/1595867552.jpeg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26445\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 27 Jul 2020 16:32:35 GMT\r\netag: \"5f1f01a3-674d\"\r\nexpires: Wed, 22 Apr 2026 21:51:04 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"3e1892e0453f03d4ec6a0b45987918c5","sha1":"82fb49dde6bed053485f2614e8f2fef6c8296387","sha256":"3ffc29b8b73ec8921b9595e98665d1e2886fce31ffcc8fea2cd0ba5eb612cd89","sha512":"94505f2a2164a0d67d9979ea125dfac5a620f560248bb875710657a5f0716f52255f2dc1470c7c9b2dd0c8d3d94c7cd244fcaf68d088ff7b74c8e962d01cd36c","ssdeep":"768:YMlTLrs9OsWzsZ9UHQ4Uhq7iANj0XF+TRVR:Y0TLA9UC91hq7iYj01e","tlshash":"e2c2d14c830079ff5322963dc73b1dc55adca9d7ffa666d004d11a3fa26aa62834c5a1","first_seen":"2023-05-12T06:41:10Z","last_seen":"2026-06-29T19:00:45.578134Z","times_seen":211,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":110,"dns":52,"connect":24,"send":0,"wait":75,"receive":15,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/vivi.jpg","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /vivi.jpg HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/hqho0SN4uAIb6J.4596755.ab8a5.0.js","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /hqho0SN4uAIb6J.4596755.ab8a5.0.js HTTP/1.1\r\nHost: d5b3uz3fo8hn3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\nserver: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-powered-by: PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5a_S-P85Rt5Ciq5oQj4ziEEwsl3yqZP4iA7vk_q160zwaaXGBLEadA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.46","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12042), with CRLF line terminators","md5":"23cbbe97b60430e81d0be3bc97f57fcf","sha1":"ca6e8d9d5e246e0e60419ecef55d637f674a14d1","sha256":"27d91e7ce91a4c57ab753adb0c0a6412562b3fdd5c22f47c70f584251c32e7ac","sha512":"927aeebd46807d0db39bee2952f6acc0b5327c18cc208d2c58cb422ba5fe62e52d917d5807536836d1b2580e8a3a08ff5a672c46d94e254cd425e097fce7373b","ssdeep":"384:MFwWVxd7FNMElWE9WzK6gB+0kGNd1C8u04vcswaw3wmhwewXwu:MjVxdhem6gB+Ou04vcDxgmylAu","tlshash":"4752e9e17941d429f3d38c1d72ff5e796849342481c2f6b4fa8de62c87ce0b849e2694","first_seen":"2026-04-20T21:51:28.564195Z","last_seen":"2026-04-20T21:51:28.564195Z","times_seen":1,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/public/clockers/PrimeApps/cssXF.css","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:05.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/clockers/PrimeApps/cssXF.css HTTP/1.1\r\nHost: d5b3uz3fo8hn3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 1804\r\ndate: Mon, 20 Apr 2026 21:51:05 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:44 GMT\r\netag: \"70c-6031617dd95f4\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: EZDfIQvpYGhdndGlkXiVSGPuIsPlwKLxDonHHx6A5v8ULGUiKQ0nzA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9be74b455cf7e0b6fc1461ba3d9ad01c","sha1":"f1fa072d9874b423fd003efeffcd128e174d88ca","sha256":"e6959d5cfed508bcc278587c05b26b361bc678f8a7f0502ca6f8ce01f2838cd5","sha512":"6269145c9f99746b9135c994e118582b5219ff98a20ebe50e57d27a14f7859bc085c063002e86f718e301197d53a73275f3544915c1a1a3416adaf9669767182","ssdeep":"","tlshash":"51316a3eae72594f41b9861126f7d21ba5bc515f0a30af7d7a20360a1f261bd2073fd8","first_seen":"2023-08-26T19:01:26Z","last_seen":"2026-08-08T14:38:56.853013Z","times_seen":2243,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShMhVo0iPw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShMhVo0iPw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://maxsegnr.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13336\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 05:50:32 GMT\r\nexpires: Sun, 18 Apr 2027 05:50:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 230432\r\nlast-modified: Mon, 15 Sep 2025 16:31:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13336, version 1.0","md5":"0d8be37b5302f048939e778614ae257f","sha1":"ee418b76411412b8467564adb668b667caa4d0de","sha256":"9026a021afff0af0c99fbad3668cf0402b497cc580c46e94bd685a2e8065c9da","sha512":"cf4457a0759ddc75546bf3beb3fd86c68880a7359da39a134efc9a2383578e44ff9601627102953a194135c63872ff2a1271c845a329bd497a974920bbd70256","ssdeep":"384:Kk0D3rqH6q4XF/hhz6e+OjW1CyR+sOAwYkLkUpzoa:4bqH61/SOj5LkUpp","tlshash":"d952d0784cd4854ffe83e2f8ac1cd90d2d6aeeb9bc0841265d1a4e471f83e379b89590","first_seen":"2025-06-03T08:53:08.197786Z","last_seen":"2026-08-08T13:58:48.207713Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/ntv.json?key=aa15b2486eb20753c2b57b571123218e\u0026vstc=4\u0026rb=","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /ntv.json?key=aa15b2486eb20753c2b57b571123218e\u0026vstc=4\u0026rb= HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://maxsegnr.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:04 GMT\r\nContent-Type: application/json\r\nContent-Length: 10565\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://maxsegnr.com.br\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Tue, 21 Apr 2026 21:51:04 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 21 Apr 2026 21:51:04 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Tue, 21 Apr 2026 21:51:04 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Tue, 21 Apr 2026 21:51:04 GMT; path=/; secure; SameSite=None\nu_pl29059491=1; expires=Tue, 21 Apr 2026 21:51:04 GMT; path=/; secure; SameSite=None\nnlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]; expires=Mon, 20 Apr 2026 21:51:09 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 47\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8816f86022c45233666abba5fe66de51\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"781d82fd2299734f22360d3195fa7e40","sha1":"a8abb7608ebf530c73ca16fab82b16ccd0e952a9","sha256":"561410b7982a34084fa65fe4f07f26821a07ee8c69f5c7779a49f96b43d86104","sha512":"b3343c3d707ae29ed73fe05fa23f9564e9684515c0f2ca4d9b2470a45cfe2b0c229a2d6563f82d9a918b7722a4cee598005db50e343a9305a87e095af3ff87a1","ssdeep":"192:iCGG03fgF3vvlDKgPxcIDgfwkAGaFGWt4S86mccdXe3+99IvTJQRiMJlajmA47JW:iChF33h8ID7ARccdR99kQUuaqA478","tlshash":"c3729d7342786f8c6f8953249dabbccc4e83a082649cad4fc45e899e2c2db060f4d650","first_seen":"2026-04-20T21:51:28.566864Z","last_seen":"2026-04-20T21:51:28.566864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":325,"dns":26,"connect":95,"send":0,"wait":145,"receive":1,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/impr.gif?sid=H4sIAAAAAAAC_1RSO4gkVRe-NX9nC_vjA9GsAkEFp-fWo19uICw-Ep1Rd2UCTe6r2utU162tW9Xd01GvK8a7YGBm9dc924Eia2yg9BiIA8JW1sFOoLCBkbCwsVRPw-CB-s45fAX3-845X82Kc9JEwdYfvG8mOo7ZXqtJ3VcPdSLNyLr7N12PNuk191An7fCaO64hG77hBWGTvua-q8SR2fOpR6lHPfcdnanIjPc2LHT6fc9r9mgz9JteK8Q4-29vCweWOZDDc_IstKz-_1f0CbRYIRk8eEvZo9ykr789KGKWmwxDufw4OUrMKMHgsowyB1Gy3P4NYytCvtmBSZZbBzDDRe0AXFdk54VH4MlyKxN8eHKhlMdQCbi8gtFwBRWvoNkKwtyBlg8JICT2D5AM7u-bbMSOL1hWsxVpPH0CPapI49HzSAY_XI_12L1h4iLXJrEYRyX0eAXdXyEtTpFPdqBHpxD5F9DyD7L39D0kg8WBjQ20LDfudbQCsw6K-tMOishBkToYyLUb0m4oPBa0o54UHRqyMJSK017Xp5T1RAeFuA0t70JkU6TZFEf6XkXIkz9hpQObV8T5cIqhLE9kbH1b3pexLbi3zf42B-Xc5P0ZOzF5XyUELLuLTJYLnd6ydyDy_80nkZVzUwPjeTlnXJZzLXOC7Nb6Zer1JBOK7vodJXc7YRTsslDI3RZrBz0qQxWq3iKyeVHO0nPyTD1G5yc9x5Fau4x5Le6H3bbiPu20AuHzVoe3Op7nB77XVbC6hLY7mwlNdEUOP_0Oqa7I7t9LcHYKG59CaAes8MBGJdhnJSbJg35WpEYYfpxa1hRmAGlKpHkD-bEzi8_Jc_OPbl7_ZbPRl36nUOKMbAMiK5FmJT7XvxL049s_HqS5HugJq1d8I2e5csD0w6tXIeobu-dtbu3K9BWIdAqbnr35ONoErCHgaQOxJojV5QuMl7Dq7Od_tj2_rGf2S_SzBnjcmPM4ayx4nMVfV0QsXqyVejX4F5qtXrtRoHxBabfT9oJupLwglCJqdcOebDMaBAq5rfTjb3_7NwAA___Vmszd-AMAAA==","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSO4gkVRe-NX9nC_vjA9GsAkEFp-fWo19uICw-Ep1Rd2UCTe6r2utU162tW9Xd01GvK8a7YGBm9dc924Eia2yg9BiIA8JW1sFOoLCBkbCwsVRPw-CB-s45fAX3-845X82Kc9JEwdYfvG8mOo7ZXqtJ3VcPdSLNyLr7N12PNuk191An7fCaO64hG77hBWGTvua-q8SR2fOpR6lHPfcdnanIjPc2LHT6fc9r9mgz9JteK8Q4-29vCweWOZDDc_IstKz-_1f0CbRYIRk8eEvZo9ykr789KGKWmwxDufw4OUrMKMHgsowyB1Gy3P4NYytCvtmBSZZbBzDDRe0AXFdk54VH4MlyKxN8eHKhlMdQCbi8gtFwBRWvoNkKwtyBlg8JICT2D5AM7u-bbMSOL1hWsxVpPH0CPapI49HzSAY_XI_12L1h4iLXJrEYRyX0eAXdXyEtTpFPdqBHpxD5F9DyD7L39D0kg8WBjQ20LDfudbQCsw6K-tMOishBkToYyLUb0m4oPBa0o54UHRqyMJSK017Xp5T1RAeFuA0t70JkU6TZFEf6XkXIkz9hpQObV8T5cIqhLE9kbH1b3pexLbi3zf42B-Xc5P0ZOzF5XyUELLuLTJYLnd6ydyDy_80nkZVzUwPjeTlnXJZzLXOC7Nb6Zer1JBOK7vodJXc7YRTsslDI3RZrBz0qQxWq3iKyeVHO0nPyTD1G5yc9x5Fau4x5Le6H3bbiPu20AuHzVoe3Op7nB77XVbC6hLY7mwlNdEUOP_0Oqa7I7t9LcHYKG59CaAes8MBGJdhnJSbJg35WpEYYfpxa1hRmAGlKpHkD-bEzi8_Jc_OPbl7_ZbPRl36nUOKMbAMiK5FmJT7XvxL049s_HqS5HugJq1d8I2e5csD0w6tXIeobu-dtbu3K9BWIdAqbnr35ONoErCHgaQOxJojV5QuMl7Dq7Od_tj2_rGf2S_SzBnjcmPM4ayx4nMVfV0QsXqyVejX4F5qtXrtRoHxBabfT9oJupLwglCJqdcOebDMaBAq5rfTjb3_7NwAA___Vmszd-AMAAA== HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+9caa6cbdf3d44c99b30db50f11b2e8e6=1690160; expires=Mon, 04 May 2026 21:51:05 GMT; path=/; secure; SameSite=None\niprc_l:1690160=1; expires=Mon, 04 May 2026 21:51:05 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9d2a856f2d0431bfe5a678f8e3707ab0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dn711207.ca.archive.org/0/items/win-3_202412/win%20%283%29.mpeg","fqdn":"dn711207.ca.archive.org","domain":"archive.org","tld":"org"},"ip":{"addr":"204.62.248.181","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dn711207.ca.archive.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 22:48:35 GMT","end":"Wed, 15 Jul 2026 22:48:34 GMT"},"fingerprint":{"sha1":"22:F5:21:B8:8E:4B:96:98:29:82:74:C5:D7:B9:9E:10:61:A4:44:0F","sha256":"31:C1:30:FC:A8:14:04:22:60:DC:9C:DD:01:13:48:BF:33:75:88:F9:B5:5F:66:5C:D2:34:C8:9D:90:CF:E9:3C"}}},"request":{"raw":"GET /0/items/win-3_202412/win%20%283%29.mpeg HTTP/1.1\r\nHost: dn711207.ca.archive.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nRange: bytes=0-\r\nReferer: https://maxsegnr.com.br/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 20 Apr 2026 21:51:05 GMT\r\ncontent-type: video/mpeg\r\ncontent-length: 15622\r\nlast-modified: Mon, 30 Dec 2024 22:47:13 GMT\r\netag: \"677322f1-3d06\"\r\ncontent-range: bytes 0-15621/15622\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15622,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"6f04e37b420772d2e7592e15b4330eaa","sha1":"332aba6ba1cc9eae52532036fcb63e727577e55d","sha256":"7eb704980cedf2a08a19992517b60e100f34fbd892e5fc2a0be487e921178695","sha512":"49beca20670df3510e3bf164243fc1f887db16f28c6eeef4cc6e35b658553b5b96f9e3c6fa17156659f07d219e8ebcc4ea3be312feb9632ea3709be6c74e7fdb","ssdeep":"384:wzhWB6BjXhTgWolfhi63+xyxejM4EQ6j9:wFWqjxTSl0+ezE79","tlshash":"3662ae80bb681a7df4a307feab9b8562c0995f263d59db2d833bfbc4724b001574552c","first_seen":"2025-03-26T07:47:02.86528Z","last_seen":"2026-06-04T15:05:04.198727Z","times_seen":462,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":0,"dns":38,"connect":140,"send":0,"wait":630,"receive":1,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl29159990.profitablecpmratenetwork.com/aa15b2486eb20753c2b57b571123218e/invoke.js","fqdn":"pl29159990.profitablecpmratenetwork.com","domain":"profitablecpmratenetwork.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:03.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"profitablecpmratenetwork.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:13:16 GMT","end":"Mon, 15 Jun 2026 14:13:15 GMT"},"fingerprint":{"sha1":"BC:8E:D7:91:CA:9C:82:79:1D:3B:0D:C4:5A:1C:38:F3:8E:BD:C6:B8","sha256":"33:27:4F:63:F0:BE:24:EB:26:AB:C6:CF:E1:2F:CD:8C:26:B0:D2:61:57:CF:32:A7:D3:E6:BE:24:A8:9F:34:82"}}},"request":{"raw":"GET /aa15b2486eb20753c2b57b571123218e/invoke.js HTTP/1.1\r\nHost: pl29159990.profitablecpmratenetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 17484\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: pl29159990.profitablecpmratenetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 70df201e32ef7bfa88cff7e4b2fe58a9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":47805,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47803), with no line terminators","md5":"38ba16a2cf89046ec6cd3c7eeab5075a","sha1":"c733143b7900ba9cb4d9cec38b4dceec50f5879b","sha256":"e5a33aec61151c9bc20bcf4ceb37438195c18fa96de3e62cec561bbb381a9e8b","sha512":"28d564b423561a00364cc2ac1600802612bb5b9fa74cae14d9e4662c1be0e0b4913fce31553953f299e6c465a7a5c16a67b20880f5405bf64a0ae0cbcf35d9e5","ssdeep":"768:3JEOlhPyuK4VtK9OoQjPKpDHuiN1JyKxYNo0E6bO8xcvHVk4e:+tg+pDBWucE7AGk/","tlshash":"9a23c5d87e41f23c16676036623fc50fe22a5f01978cfa98e167d5a82b6cf09993a705","first_seen":"2026-04-20T21:51:28.56883Z","last_seen":"2026-04-20T21:51:28.56883Z","times_seen":1,"resource_available":true,"data":null}},"time_used":862,"timings":{"blocked":328,"dns":45,"connect":95,"send":0,"wait":104,"receive":95,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"pl29159990.profitablecpmratenetwork.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/samue.png","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /samue.png HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d39fkvblvwpxa1.cloudfront.net/uploads/1737700441f54cda29360d16d1cb0f02e0e32ee181.png","fqdn":"d39fkvblvwpxa1.cloudfront.net","domain":"d39fkvblvwpxa1.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.148","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /uploads/1737700441f54cda29360d16d1cb0f02e0e32ee181.png HTTP/1.1\r\nHost: d39fkvblvwpxa1.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 13738\r\nlast-modified: Fri, 24 Jan 2025 06:34:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9MMxQZFOluyqQ1oFoeg1djBSiLTqiE.b\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 20 Apr 2026 21:24:25 GMT\r\netag: \"730cc2f7770aed939526751a3254664c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f9ed88582707ec58c61e5c95a41d4ada.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: UiDSkh33Gu_b3OHocuogqUp3EaJbBHK47nv5BqwgurolFTYH9VUUKg==\r\nage: 1600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":13738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 500, 8-bit colormap, non-interlaced","md5":"730cc2f7770aed939526751a3254664c","sha1":"23b785ce6019fd2e35fe2cc2db2190b829d5c07c","sha256":"683384df21204e4f809c948ed21f07b24539060c2cc99dcca0fe6ff613ea25bf","sha512":"4b911e8e04c3ba93e98833846b4261af083692b91bee1de9f1ebaba50de7799c4c21674b532771dbf1f9fa655326c6fcaeb4ece9526ccc9acfa645a18b2758ed","ssdeep":"384:Zdgj4TNP3Plkha702dTUSA8zYiyWKyODx:ZdgsBVkhacSAObyWKyy","tlshash":"9252c088d5c45b7141c2cdae077d0b106915c1e8fa726742894d3becb1a15e8e05bbda","first_seen":"2025-04-10T10:20:37.936086Z","last_seen":"2026-08-05T22:05:21.122371Z","times_seen":402,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":30,"dns":50,"connect":10,"send":0,"wait":40,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/ren.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NXa2sOIH0awCQQWn59Wvu8sNhMVPojPqrkygyftV-5zqerX1qrp7Opp1xXgXDMysOd2zEyiyxgZKj4E4IGxlE-wEChsYCQsbS_U2DHuhzr2XU_DOufd-c1idky4qdvbRh2am05RtRV3qvr6rM2km1t2-7nq0S6-4uzrrhVfcaQvF-C0vCLv0Dfd9JfbMlk89Sj3que_pQiVmurViofMfY68b027od70oxLR4ureVA8scyPE5eR5aNs_-k3wGLZbIRvfeUXavNPmb746qlJWmwFgef5rtZWaSYXRRJoWDJDte_w1jG0K-24DJjtcOYMaL1gG4bsjGSw_As-O1TPDx0ROlPIXKwOUlTMZLqHQJzZYQ5ha0vE8AIbG9g2x0d9sUE7b_hGUt25DO40fQk4Z0HryIbPTT1VRP3WsmrUptMotpUkNPl9DDJfLqBOVsA3pyAlF-BS3_IluPP0A2WuzY1EDLeuVeJ0sw66BqP-2gShxUuYORPHNDOgiFx4JeEkvRpyELQ6k4jQc-pSwWfVTiJrS8DVEcIC8OsKfvNIQ8-htWOrBlQ5yPDzCW9ZFMrW_ruzK1FffW2V_noJ6bcnjIjkw5VBkBK26jkPVC5zfsLYjymfkssXJuWmC8rOeMy3quZUlQ3Dh7lXqxZELRTb-v5GY_TIJNFgq5GbFeEFMZqlDFi8SWVX2Yn5Pn2jE6v-g59tSZy5gXcT8c9BT3aT8KhM-jPo_6nucHvjdQsLqGthurCc10Q3Y__wG5bsjmv8fg7AQ2PYHQDljlgU1qsC9qzLJ7w6LKjTB8P7esK8wI0tTIyw7KfecwPScvzD-5fvW31UZf-dODEqdkHRBFjbyo8aX-nWCY3vx5Jy_1SM9Yu-JrJSuVA6bvX74M0d7YHW91a5cOXoPID2Dz07cfJquANQQ830CqCVJ18QLjNaw6_fW_dc8v6kP7NYZFBzztzHladBY8LdJvGyIWL6-UtuC3QGH1mRv5POgNBj2V9GQSyMAPZBxRFYcs7oVxGKG0jX74_R__BwAA___Xcfa5-AMAAA==","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NXa2sOIH0awCQQWn59Wvu8sNhMVPojPqrkygyftV-5zqerX1qrp7Opp1xXgXDMysOd2zEyiyxgZKj4E4IGxlE-wEChsYCQsbS_U2DHuhzr2XU_DOufd-c1idky4qdvbRh2am05RtRV3qvr6rM2km1t2-7nq0S6-4uzrrhVfcaQvF-C0vCLv0Dfd9JfbMlk89Sj3que_pQiVmurViofMfY68b027od70oxLR4ureVA8scyPE5eR5aNs_-k3wGLZbIRvfeUXavNPmb746qlJWmwFgef5rtZWaSYXRRJoWDJDte_w1jG0K-24DJjtcOYMaL1gG4bsjGSw_As-O1TPDx0ROlPIXKwOUlTMZLqHQJzZYQ5ha0vE8AIbG9g2x0d9sUE7b_hGUt25DO40fQk4Z0HryIbPTT1VRP3WsmrUptMotpUkNPl9DDJfLqBOVsA3pyAlF-BS3_IluPP0A2WuzY1EDLeuVeJ0sw66BqP-2gShxUuYORPHNDOgiFx4JeEkvRpyELQ6k4jQc-pSwWfVTiJrS8DVEcIC8OsKfvNIQ8-htWOrBlQ5yPDzCW9ZFMrW_ruzK1FffW2V_noJ6bcnjIjkw5VBkBK26jkPVC5zfsLYjymfkssXJuWmC8rOeMy3quZUlQ3Dh7lXqxZELRTb-v5GY_TIJNFgq5GbFeEFMZqlDFi8SWVX2Yn5Pn2jE6v-g59tSZy5gXcT8c9BT3aT8KhM-jPo_6nucHvjdQsLqGthurCc10Q3Y__wG5bsjmv8fg7AQ2PYHQDljlgU1qsC9qzLJ7w6LKjTB8P7esK8wI0tTIyw7KfecwPScvzD-5fvW31UZf-dODEqdkHRBFjbyo8aX-nWCY3vx5Jy_1SM9Yu-JrJSuVA6bvX74M0d7YHW91a5cOXoPID2Dz07cfJquANQQ830CqCVJ18QLjNaw6_fW_dc8v6kP7NYZFBzztzHladBY8LdJvGyIWL6-UtuC3QGH1mRv5POgNBj2V9GQSyMAPZBxRFYcs7oVxGKG0jX74_R__BwAA___Xcfa5-AMAAA== HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0c98b1fdac8abc2eefa6112f626d787f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/f4/78/67/f4786788fb882bb158799a0ced65c396/1773930632.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /si/f4/78/67/f4786788fb882bb158799a0ced65c396/1773930632.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 152029\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 19 Mar 2026 14:30:37 GMT\r\netag: \"69bc088d-251dd\"\r\nexpires: Wed, 22 Apr 2026 21:51:04 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"f40117026b39b01e78cf3c4d5b4ddabd","sha1":"2fdddb2bb8f0a297e4b0af279ca99a7cdc642044","sha256":"8b910f0f0fd67f22c1e0ef33588a539287cfb0f31942033202c3115d8912588b","sha512":"c91e338c000bd0e8f8e16b37283843bdb155781d0be3aabb64f811c339c3f4e4ffa4e30d01c3765cd3ddc78c8f820443cfc3922d9ab22afb623afb5bbc7f298c","ssdeep":"3072:WaYmIvGlv/D6tZcJRMDCVMOcJEyYDyz5bvU0JFTkp3VPCmca3/Uo5PP4cmpB:Wa1IvGdWtm7gCiOVyLbU0Pil6mcCUo7+","tlshash":"cee312dc2a1b147586ef5d6006f495ec2614ed4e2f4f8f47086f278e8e1ae1a67031a7","first_seen":"2026-03-19T16:38:53.369901Z","last_seen":"2026-05-01T11:31:05.574126Z","times_seen":188,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":108,"dns":53,"connect":21,"send":0,"wait":22,"receive":75,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/impr.gif?sid=H4sIAAAAAAAC_1RSPYwbRRSevZiKAgEBQbcFBUicb_bHf6SIFAFp4A5I0BXQzN-a4XZ3Nju7ts80F4Kog5SCjvVnX1yAQlLTIB8F4iQkVqJwkZMAKQVtpNTIjqWQJ8333tM3xfe9976elGekiZItP3jfjHUcs51Wk7qv7-tUmqF1d6-6Hm3SC-6-TtvhBXe0gnzwlheETfqGe1mJA7PjU49Sj3ruuzpXkRntrFno7Iee1-zRZug3vVaIUf50b0sHljmQgzPyArSsn_sn-gRaLJAmd99W9qAw2ZvvJGXMCpNjIOcfpwepGaZInpRR7iBK55vfMLYm5NstmHS-cQAzmK0cgOuabL18Hzydb2SCD44fK-UxVAoun8VwsICKF9BsAWFuQMs_CCAkdveQJrd3TT5kh49ZtmJr0nj0EHpYk8b980iTO5diPXKvmLgstEktRlEFPVpA9xfIyhMU4y3o4QlE8SW0_J3sPHoPaTLbs7GBltXavY4WYNZBuXraQRk5KDMHiVy6Ie2GwmNBO-pJ0aEhC0OpOO11fUpZT3RQiuvQ8iZEfoQsP8KB_qYm5OHfsNKBLWrifHiEgayOZWx9W92WsS25t8n-JgfV1BT9CTs2RV-lBCy_iVxWM51dszcginPTcWTl1KyA8aKaMi6rqZYFQX5t-Rr1epIJRbf9jpLbnTAKtlko5HaLtYMelaEKVW8W2aKsJtkZeX41RucnPcWBWrqMeS3uh9224j7ttALh81aHtzqe5we-11WwuoK2W-sJjXVN9j_9Hpmuyfa_c3B2AhufQGgHrPTAhhXYZxXG6d1-XmZGGH6YWdYUJoE0FbKigeLQmcRn5MXpR1cv_bzeqJi9AiVOLz6I1gGRV8jyCp_rXwj68fV7e1mhEz1mqxVfKVihzoHpmpB7z0DomryU_Li-tu6fBUR2BJudXrw1_uvynfNfwBoCnjmINUGsTskmwHgF-7-eP6kn9iv08wZ43JjyOG_MeJzHt9Yya_Lqb94K_BVQWL10o0D5gtJup-0F3Uh5QShF1OqGPdlmNAgUClvrB9_9-l8AAAD__xGEhyz6AwAA","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSPYwbRRSevZiKAgEBQbcFBUicb_bHf6SIFAFp4A5I0BXQzN-a4XZ3Nju7ts80F4Kog5SCjvVnX1yAQlLTIB8F4iQkVqJwkZMAKQVtpNTIjqWQJ8333tM3xfe9976elGekiZItP3jfjHUcs51Wk7qv7-tUmqF1d6-6Hm3SC-6-TtvhBXe0gnzwlheETfqGe1mJA7PjU49Sj3ruuzpXkRntrFno7Iee1-zRZug3vVaIUf50b0sHljmQgzPyArSsn_sn-gRaLJAmd99W9qAw2ZvvJGXMCpNjIOcfpwepGaZInpRR7iBK55vfMLYm5NstmHS-cQAzmK0cgOuabL18Hzydb2SCD44fK-UxVAoun8VwsICKF9BsAWFuQMs_CCAkdveQJrd3TT5kh49ZtmJr0nj0EHpYk8b980iTO5diPXKvmLgstEktRlEFPVpA9xfIyhMU4y3o4QlE8SW0_J3sPHoPaTLbs7GBltXavY4WYNZBuXraQRk5KDMHiVy6Ie2GwmNBO-pJ0aEhC0OpOO11fUpZT3RQiuvQ8iZEfoQsP8KB_qYm5OHfsNKBLWrifHiEgayOZWx9W92WsS25t8n-JgfV1BT9CTs2RV-lBCy_iVxWM51dszcginPTcWTl1KyA8aKaMi6rqZYFQX5t-Rr1epIJRbf9jpLbnTAKtlko5HaLtYMelaEKVW8W2aKsJtkZeX41RucnPcWBWrqMeS3uh9224j7ttALh81aHtzqe5we-11WwuoK2W-sJjXVN9j_9Hpmuyfa_c3B2AhufQGgHrPTAhhXYZxXG6d1-XmZGGH6YWdYUJoE0FbKigeLQmcRn5MXpR1cv_bzeqJi9AiVOLz6I1gGRV8jyCp_rXwj68fV7e1mhEz1mqxVfKVihzoHpmpB7z0DomryU_Li-tu6fBUR2BJudXrw1_uvynfNfwBoCnjmINUGsTskmwHgF-7-eP6kn9iv08wZ43JjyOG_MeJzHt9Yya_Lqb94K_BVQWL10o0D5gtJup-0F3Uh5QShF1OqGPdlmNAgUClvrB9_9-l8AAAD__xGEhyz6AwAA HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+6742e13e93d9604aafee0d674478f988=6530072; expires=Tue, 21 Apr 2026 21:51:05 GMT; path=/; secure; SameSite=None\niprc_l:6530072=1; expires=Tue, 21 Apr 2026 21:51:05 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9ebce173afed301d6e5038fd06ae4dc5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kumbh+Sans:wght@520\u0026family=Mochiy+Pop+One\u0026family=Nunito:wght@200\u0026family=Poppins:wght@400;600;700;900\u0026family=REM:wght@300\u0026family=Varela+Round\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:03.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Kumbh+Sans:wght@520\u0026family=Mochiy+Pop+One\u0026family=Nunito:wght@200\u0026family=Poppins:wght@400;600;700;900\u0026family=REM:wght@300\u0026family=Varela+Round\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Apr 2026 21:51:03 GMT\r\ndate: Mon, 20 Apr 2026 21:51:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126043,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"ac6e2adf2326221a12544d78d680cab4","sha1":"642bd1246bd10db63ea24456ee2b62da2a0710f4","sha256":"a06048b02ccb57246d176b006449526c27d3df0d915fbd0696f05c662abf3bb9","sha512":"602138ab48f2eade3ac7d036530ba958173aace25a873097361935b59871ed57cd45cb92c5b1f5ce68addb79586816ff89fa49706bff4ed33975f7d689511409","ssdeep":"1536:AOVwFSC+780fGE9pJ3QHsX/8FrwsX5eg67iWhmRu5J+wAOR:AVO7xbGRxLcn5O6","tlshash":"77c354a1490745cefea31ca356dfd924bead687cf881883d53fa08c2ac1a459d1c7b4d","first_seen":"2025-09-18T13:19:01.188132Z","last_seen":"2026-08-08T04:07:31.001645Z","times_seen":278,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":111,"dns":1,"connect":13,"send":0,"wait":35,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/samue.png","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:03.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /samue.png HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/ren.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NdvZwoofRLMKBBWcnle_7i43EBY_ic6ouzKBJu9X7XOq69XWq-ru6WjWFeNdMDCz5nTPTqDIGhsoPQbigLCVTbATKGxgJCxsLNXbMHihzr2XU_DOufd-fVidky4qdvbhB2am05RtRV3qvrarM2km1t2-4Xq0S6-6uzrrhVfdaQvF-E0vCLv0dfc9JfbMlk89Sj3que_qQiVmurViofMfYq8b027od70oxLT4f28rB5Y5kONz8hy0bJ75O_kUWiyRje6_rexeafI33hlVKStNgbE8_iTby8wkw-iiTAoHSXa8_hvGNoR8uwGTHa8dwIwXrQNw3ZCNFx-CZ8drmeDjo6dKeQqVgcvLmIyXUOkSmi0hzG1o-YAAQmJ7B9no3rYpJmz_KctatiGdJ4-hJw3pPHwB2ejHa6meutdNWpXaZBbTpIaeLqGHS-TVCcrZBvTkBKL8Elr-SbaevI9stNixqYGW9cq9TpZg1kHVftpBlTiocgcjeeaGdBAKjwW9JJaiT0MWhlJxGg98Slks-qjELWh5B6I4QF4cYE_fbQh5_BesdGDLhjgfHWAs6yOZWt_W92RqK-6ts7_OQT035fCQHZlyqDICVtxBIeuFzm_a2xDlpfkssXJuWmC8rOeMy3quZUlQ3Dx7hXqxZELRTb-v5GY_TIJNFgq5GbFeEFMZqlDFi8SWVX2Yn5Nn2zE6P-s59tSZy5gXcT8c9BT3aT8KhM-jPo_6nucHvjdQsLqGthurCc10Q3Y_-x65bsjmP8fg7AQ2PYHQDljlgU1qsM9rzLL7w6LKjTB8P7esK8wI0tTIyw7KfecwPSfPzz--ce3X1UZf_sOHEqdkHRBFjbyo8YX-jWCY3vppJy_1SM9Yu-LrJSuVA6YfXLkC0d7YXW91a5cPXoXID2Dz07ceJauANQQ8v4RUE6Tq4gXGa1h1-su_655f1If2KwyLDnjamfO06Cx4WqTfNEQsXmqVeiu5LVBYfeZGPg96g0FPJT2ZBDLwAxlHVMUhi3thHEYobaMffff7fwEAAP__pqEed_gDAAA=","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NdvZwoofRLMKBBWcnle_7i43EBY_ic6ouzKBJu9X7XOq69XWq-ru6WjWFeNdMDCz5nTPTqDIGhsoPQbigLCVTbATKGxgJCxsLNXbMHihzr2XU_DOufd-fVidky4qdvbhB2am05RtRV3qvrarM2km1t2-4Xq0S6-6uzrrhVfdaQvF-E0vCLv0dfc9JfbMlk89Sj3que_qQiVmurViofMfYq8b027od70oxLT4f28rB5Y5kONz8hy0bJ75O_kUWiyRje6_rexeafI33hlVKStNgbE8_iTby8wkw-iiTAoHSXa8_hvGNoR8uwGTHa8dwIwXrQNw3ZCNFx-CZ8drmeDjo6dKeQqVgcvLmIyXUOkSmi0hzG1o-YAAQmJ7B9no3rYpJmz_KctatiGdJ4-hJw3pPHwB2ejHa6meutdNWpXaZBbTpIaeLqGHS-TVCcrZBvTkBKL8Elr-SbaevI9stNixqYGW9cq9TpZg1kHVftpBlTiocgcjeeaGdBAKjwW9JJaiT0MWhlJxGg98Slks-qjELWh5B6I4QF4cYE_fbQh5_BesdGDLhjgfHWAs6yOZWt_W92RqK-6ts7_OQT035fCQHZlyqDICVtxBIeuFzm_a2xDlpfkssXJuWmC8rOeMy3quZUlQ3Dx7hXqxZELRTb-v5GY_TIJNFgq5GbFeEFMZqlDFi8SWVX2Yn5Nn2zE6P-s59tSZy5gXcT8c9BT3aT8KhM-jPo_6nucHvjdQsLqGthurCc10Q3Y_-x65bsjmP8fg7AQ2PYHQDljlgU1qsM9rzLL7w6LKjTB8P7esK8wI0tTIyw7KfecwPSfPzz--ce3X1UZf_sOHEqdkHRBFjbyo8YX-jWCY3vppJy_1SM9Yu-LrJSuVA6YfXLkC0d7YXW91a5cPXoXID2Dz07ceJauANQQ8v4RUE6Tq4gXGa1h1-su_655f1If2KwyLDnjamfO06Cx4WqTfNEQsXmqVeiu5LVBYfeZGPg96g0FPJT2ZBDLwAxlHVMUhi3thHEYobaMffff7fwEAAP__pqEed_gDAAA= HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 50d10e8fc7c4bf8966b5053ec7067d5d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":283,"dns":0,"connect":94,"send":0,"wait":96,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/ren.gif?sid=H4sIAAAAAAAC_1RSPYgkVRd9NV9nC_vhD6JZBYIKTs-rv-4uNxAWfxKdUXdlAk3eX7XPqa5XW6-qu6ejWVeMd8HAzJrTPTuBImtsoPQYiAPCVjbBTqCwgZGwsLFUT8PghTr3Xk7BO-fe-9VhdU66qNjZB--bmU5TthV1qfvqrs6kmVh3-6br0S695u7qrBdec6ctFOM3vCDs0tfcd5XYM1s-9Sj1qOe-owuVmOnWioXOv4-9bky7od_1ohDT4r-9rRxY5kCOz8mz0LL5_1_JJ9BiiWz04C1l90qTv_72qEpZaQqM5fHH2V5mJhlGl2VSOEiy4_XfMLYh5JsNmOx47QBmvGgdgOuGbLzwCDw7XssEHx9dKOUpVAYur2AyXkKlS2i2hDB3oOVDAgiJ7R1ko_vbppiw_QuWtWxDOk-fQE8a0nn0PLLRD9dTPXVvmLQqtckspkkNPV1CD5fIqxOUsw3oyQlE-QW0_INsPX0P2WixY1MDLeuVe50swayDqv20gypxUOUORvLMDekgFB4LekksRZ-GLAyl4jQe-JSyWPRRidvQ8i5EcYC8OMCevtcQ8uRPWOnAlg1xPjzAWNZHMrW-re_L1FbcW2d_nYN6bsrhITsy5VBlBKy4i0LWC53fsncgyv_NZ4mVc9MC42U9Z1zWcy1LguLW2cvUiyUTim76fSU3-2ESbLJQyM2I9YKYylCFKl4ktqzqw_ycPNOO0flJz7GnzlzGvIj74aCnuE_7USB8HvV51Pc8P_C9gYLVNbTdWE1ophuy--l3yHVDNv8-BmcnsOkJhHbAKg9sUoN9VmOWPRgWVW6E4fu5ZV1hRpCmRl52UO47h-k5eW7-0c3rv6w2-tLvFEqcknVAFDXyosbn-leCYXr7x5281CM9Y-2Kb5SsVA6Yfnj1KkR7Y_e81a1dOXgFIj-AzU_ffJysAtYQ8LyDVBOk6vIFxmtYdfrzP-ueX9aH9ksMiw542pnztOgseFqkXzdELF5slXot-BearT5zI58HvcGgp5KeTAIZ-IGMI6rikMW9MA4jlLbRj7_97d8AAAD__ynyXAP4AwAA","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPYgkVRd9NV9nC_vhD6JZBYIKTs-rv-4uNxAWfxKdUXdlAk3eX7XPqa5XW6-qu6ejWVeMd8HAzJrTPTuBImtsoPQYiAPCVjbBTqCwgZGwsLFUT8PghTr3Xk7BO-fe-9VhdU66qNjZB--bmU5TthV1qfvqrs6kmVh3-6br0S695u7qrBdec6ctFOM3vCDs0tfcd5XYM1s-9Sj1qOe-owuVmOnWioXOv4-9bky7od_1ohDT4r-9rRxY5kCOz8mz0LL5_1_JJ9BiiWz04C1l90qTv_72qEpZaQqM5fHH2V5mJhlGl2VSOEiy4_XfMLYh5JsNmOx47QBmvGgdgOuGbLzwCDw7XssEHx9dKOUpVAYur2AyXkKlS2i2hDB3oOVDAgiJ7R1ko_vbppiw_QuWtWxDOk-fQE8a0nn0PLLRD9dTPXVvmLQqtckspkkNPV1CD5fIqxOUsw3oyQlE-QW0_INsPX0P2WixY1MDLeuVe50swayDqv20gypxUOUORvLMDekgFB4LekksRZ-GLAyl4jQe-JSyWPRRidvQ8i5EcYC8OMCevtcQ8uRPWOnAlg1xPjzAWNZHMrW-re_L1FbcW2d_nYN6bsrhITsy5VBlBKy4i0LWC53fsncgyv_NZ4mVc9MC42U9Z1zWcy1LguLW2cvUiyUTim76fSU3-2ESbLJQyM2I9YKYylCFKl4ktqzqw_ycPNOO0flJz7GnzlzGvIj74aCnuE_7USB8HvV51Pc8P_C9gYLVNbTdWE1ophuy--l3yHVDNv8-BmcnsOkJhHbAKg9sUoN9VmOWPRgWVW6E4fu5ZV1hRpCmRl52UO47h-k5eW7-0c3rv6w2-tLvFEqcknVAFDXyosbn-leCYXr7x5281CM9Y-2Kb5SsVA6Yfnj1KkR7Y_e81a1dOXgFIj-AzU_ffJysAtYQ8LyDVBOk6vIFxmtYdfrzP-ueX9aH9ksMiw542pnztOgseFqkXzdELF5slXot-BearT5zI58HvcGgp5KeTAIZ-IGMI6rikMW9MA4jlLbRj7_97d8AAAD__ynyXAP4AwAA HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 0\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cad320933062d9be159a3f132f959288\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":286,"dns":1,"connect":94,"send":0,"wait":96,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/public/external/check.php?it=4596755\u0026time=1776721867056","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:07.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/check.php?it=4596755\u0026time=1776721867056 HTTP/1.1\r\nHost: d5b3uz3fo8hn3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Mon, 20 Apr 2026 21:51:07 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YfAJ8mb6H9zXTTnQt2PvUNqV8cfuVD6Y4PD_y84uDXWd66NVXllPZw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-08T14:38:56.849271Z","times_seen":3367,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1qt1z4ccvak33.cloudfront.net/4cb4d3f.js","fqdn":"d1qt1z4ccvak33.cloudfront.net","domain":"d1qt1z4ccvak33.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:03.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /4cb4d3f.js HTTP/1.1\r\nHost: d1qt1z4ccvak33.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Feb 2026 12:26:30 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Mon, 20 Apr 2026 21:28:28 GMT\r\netag: W/\"dbe451db27ded8a6693127c5f75fbf6a\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: GAdwZGc9uUoE2_KI9zX97Q5d_MD-qGCp4UM3W1BPW-IuJKS59nBC2g==\r\nage: 1442\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27325,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"dbe451db27ded8a6693127c5f75fbf6a","sha1":"cfa488e05bd335acd3a552390b34076dc3de1dbb","sha256":"33b51d9dc698ae440ce10cdb24dd0ef9c0f9536e6f58e25c003252094f8172d7","sha512":"13f5dc59d1a4dc5726a8ee8c02a749593e61e8a1f4ea6ce5a830016c696e0994a8e141dee341d00b500b8ca9cea72bd20038ad66379eacccb433f993c47dedb7","ssdeep":"768:n5f2v236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:T3Z7OZ1h2ayQgM","tlshash":"04c2545aab6a1849867763b9df1f5208f675032f1512c119bc7c88d85fb0d3442aaffc","first_seen":"2026-02-24T15:07:21.466786Z","last_seen":"2026-06-16T10:39:53.358418Z","times_seen":298,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":26,"dns":23,"connect":1,"send":0,"wait":388,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/sara1.png","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /sara1.png HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"archive.org/download/win-3_202412/win%20%283%29.mpeg","fqdn":"archive.org","domain":"archive.org","tld":"org"},"ip":{"addr":"207.241.224.2","port":443,"asn":7941,"as":"INTERNET-ARCHIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.archive.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 08 Jan 2026 22:02:42 GMT","end":"Tue, 09 Feb 2027 22:02:42 GMT"},"fingerprint":{"sha1":"0B:EA:A4:17:CB:20:F0:D5:F7:E4:F4:9F:A7:C0:0F:49:DD:4C:44:56","sha256":"51:86:C5:EC:3D:3E:7B:93:A7:46:62:22:16:61:94:42:8B:7C:F8:89:35:02:84:A6:D0:C8:40:E7:96:CB:1A:4D"}}},"request":{"raw":"GET /download/win-3_202412/win%20%283%29.mpeg HTTP/1.1\r\nHost: archive.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.24.0\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://dn711207.ca.archive.org/0/items/win-3_202412/win%20%283%29.mpeg\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15724800\r\nonion-location: https://archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/download/win-3_202412/win%20%283%29.mpeg\r\ncontent-security-policy: report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-e8b0ed6b1ad63fe0f4550febe687b7e1' https://archive.org/includes/ https://archive.org/includes/ https://archive.org/components/ https://archive.org/components/ https://archive.org/v/ https://archive.org/v/ https://archive.org/upload/app/ https://archive.org/offshoot_assets/ https://archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org\r\nx-fastcgi-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15622,"size_decoded":0,"mime_type":"audio/mpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":331,"dns":26,"connect":148,"send":0,"wait":253,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"51.102.231.236","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://maxsegnr.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://maxsegnr.com.br\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=a729509c-9619-45a9-bbef-94db03357bb7:3:1; expires=Thu, 17 Apr 2036 21:51:04 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"52a8d258a8a419f2ec8b18bada5aed0f","sha1":"4be245efb4de289794c281368edfdd3e0e3d5d65","sha256":"747007a80ce2e952d099ead4b9ffb309339b2b71033adf5b56440f377e414577","sha512":"b987537de9174df4bfc795f4cfeefbee01f5f4e2cb3faac7c47b689450b646d34cab0ca0d4c0ac7d1f4c7b176b4de278ea4266ef7c3e52da7154294673e95678","ssdeep":"","tlshash":"f19004505031111c47fcdf055f700c115454d7504c1500f0100df174d4750105134451","first_seen":"2026-04-20T21:51:28.572186Z","last_seen":"2026-04-20T21:51:28.572186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":92,"dns":10,"connect":21,"send":0,"wait":22,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/favicon.ico","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=a729509c-9619-45a9-bbef-94db03357bb7%3A3%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/impr.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NXa2sOIH0awCQQWn59Wnf24gLH4SnVF3ZQJN3q_a51TXq61X1d3TUa8rxrtgYGb16Z7tQJE1NlB6DMQBYSvrYCdQ2MBIWNhYqrdh2At17r2cgnfOvfebWXFOmijY-qMPzUTHMdtrNan7-qFOpBlZd_-669EmveIe6qQdXnHHNWTDt7wgbNI33PeVODJ7PvUo9ajnvqczFZnx3oaFTn_sec0ebYZ-02uFGGdP97ZwYJkDOTwnz0PL6tl_os-gxQrJ4N47yh7lJn3z3UERs9xkGMrlp8lRYkYJBhdllDmIkuX2bxhbEfLdDkyy3DqAGS5qB-C6IjsvPQBPlluZ4MOTJ0p5DJWAy0sYDVdQ8QqarSDMLWh5nwBCYv8AyeDuvslG7PgJy2q2Io3Hj6BHFWk8eBHJ4KersR6710xc5NokFuOohB6voPsrpMUp8skO9OgUIv8KWv5F9h5_gGSwOLCxgZblxr2OVmDWQVF_2kEROShSBwO5dkPaDYXHgnbUk6JDQxaGUnHa6_qUsp7ooBA3oeVtiGyKNJviSN-pCHn0N6x0YPOKOB9PMZTliYytb8u7MrYF97bZ3-agnJu8P2MnJu-rhIBlt5HJcqHTG_YWRP7MfBJZOTc1MJ6Xc8ZlOdcyJ8hurF-lXk8yoeiu31FytxNGwS4LhdxtsXbQozJUoeotIpsX5Sw9J8_VY3R-0XMcqbXLmNfifthtK-7TTisQPm91eKvjeX7ge10Fq0tou7OZ0ERX5PDzH5Dqiuz-uwRnp7DxKYR2wAoPbFSCfVFiktzrZ0VqhOHHqWVNYQaQpkSaN5AfO7P4nLww_-T61d82G33lTw9KnJFtQGQl0qzEl_p3gn588-eDNNcDPWH1iq_lLFcOmL5_-TJEfWN3vM2tXZq-BpFOYdOztx9Gm4A1BDzdQawJYnXxAuMlrDr79b9tzy_qmf0a_awBHjfmPM4aCx5n8bcVEYuXN0pr8GugsHrtRoHyBaXdTtsLupHyglCKqNUNe7LNaBAo5LbSD7__4_8AAAD__ysZZmf4AwAA","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NXa2sOIH0awCQQWn59Wnf24gLH4SnVF3ZQJN3q_a51TXq61X1d3TUa8rxrtgYGb16Z7tQJE1NlB6DMQBYSvrYCdQ2MBIWNhYqrdh2At17r2cgnfOvfebWXFOmijY-qMPzUTHMdtrNan7-qFOpBlZd_-669EmveIe6qQdXnHHNWTDt7wgbNI33PeVODJ7PvUo9ajnvqczFZnx3oaFTn_sec0ebYZ-02uFGGdP97ZwYJkDOTwnz0PL6tl_os-gxQrJ4N47yh7lJn3z3UERs9xkGMrlp8lRYkYJBhdllDmIkuX2bxhbEfLdDkyy3DqAGS5qB-C6IjsvPQBPlluZ4MOTJ0p5DJWAy0sYDVdQ8QqarSDMLWh5nwBCYv8AyeDuvslG7PgJy2q2Io3Hj6BHFWk8eBHJ4KersR6710xc5NokFuOohB6voPsrpMUp8skO9OgUIv8KWv5F9h5_gGSwOLCxgZblxr2OVmDWQVF_2kEROShSBwO5dkPaDYXHgnbUk6JDQxaGUnHa6_qUsp7ooBA3oeVtiGyKNJviSN-pCHn0N6x0YPOKOB9PMZTliYytb8u7MrYF97bZ3-agnJu8P2MnJu-rhIBlt5HJcqHTG_YWRP7MfBJZOTc1MJ6Xc8ZlOdcyJ8hurF-lXk8yoeiu31FytxNGwS4LhdxtsXbQozJUoeotIpsX5Sw9J8_VY3R-0XMcqbXLmNfifthtK-7TTisQPm91eKvjeX7ge10Fq0tou7OZ0ERX5PDzH5Dqiuz-uwRnp7DxKYR2wAoPbFSCfVFiktzrZ0VqhOHHqWVNYQaQpkSaN5AfO7P4nLww_-T61d82G33lTw9KnJFtQGQl0qzEl_p3gn588-eDNNcDPWH1iq_lLFcOmL5_-TJEfWN3vM2tXZq-BpFOYdOztx9Gm4A1BDzdQawJYnXxAuMlrDr79b9tzy_qmf0a_awBHjfmPM4aCx5n8bcVEYuXN0pr8GugsHrtRoHyBaXdTtsLupHyglCKqNUNe7LNaBAo5LbSD7__4_8AAAD__ysZZmf4AwAA HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+539670c950a3eecb13d4f8c526e98352=1690161; expires=Mon, 04 May 2026 21:51:05 GMT; path=/; secure; SameSite=None\niprc_l:1690161=1; expires=Mon, 04 May 2026 21:51:05 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 523efaf0a1cbf57ccff4fbb9ac953f0d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":99,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/mylogo.png","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:03.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /mylogo.png HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/mylogo.png","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /mylogo.png HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/ren.gif?sid=H4sIAAAAAAAC_1RSPYwbRRSevZiKAgEBQbcFBUicb_bP9pIiUgSkgTsgQVdAMz-7Zrjdnc3Oru0zzYUg6iCloGP92RcXoJDUNMhHgTgJiZUoXOQkQEpBGyk1smMp5Enzvff0TfF9772vJ9UZaaNiyw_e12OVJGwnaFP79X2VST009u5V26FtesHeV1nHv2CPVlAM3nI8v03fsC9H4kDvuNSh1KGO_a4qoliPdtYsVP5D6LRD2vbdthP4GBVP96ayYJgFOTgjL0DJ5rl_4k-gxAJZevftyByUOn_znbRKWKkLDOT84-wg08MM6ZMyLizE2XzzG9o0hHy7BZ3NNw6gB7OVA3DVkK2X74Nn841M8MHxY6U8QZSBy2cxHCwQJQsotoDQN6DkHwQQErt7yNLbu7oYssPHLFuxDWk9egg1bEjr_nlk6Z1LiRrZV3RSlUpnBqO4hhotoPoL5NUJyvEW1PAEovwSSv5Odh69hyyd7ZlEQ8l67V7FCzBjoVo9ZaGKLVS5hVQubZ_2fOEwrxOHUnSpz3xfRpyGPZdSFoouKnEdSt6EKI6QF0c4UN80hDz8G0ZaMGVDrA-PMJD1sUyMa-rbMjEVdzbZ3WSvnuqyP2HHuuxHGQErbqKQ9Uzl18wNiPLcdBwbOdUrYLysp4zLeqpkSVBcW75GnVAyEdFttxvJ7a4fe9vMF3I7YB0vpNKP_Cicxaas6kl-Rp5fjdH6SU1xEC1txpyAu36vE3GXdgNPuDzo8qDrOK7nOr0IRtVQZms9obFqyP6n3yNXDdn-dw7OTmCSEwhlgVUO2LAG-6zGOLvbL6pcC80Pc8PaQqeQukZetlAeWpPkjLw4_ejqpZ_XGxWzVxCJ04sP4nVAFDXyosbn6heCfnL93l5eqlSN2WrFV0pWRufAVEPIvWcgVENeSn9cX1vvzxIiP4LJTy_eGv91-c75L2A0Ac8tJIogiU7JJsB4DfO_nj-pJ-Yr9IsWeNKa8qRozXhSJLfWMhvy6m_OCtwVUBi1tAOXe51erxPFHRl70nM9GQY0Cn0WdvzQD1CaRj347tf_AgAA___t7Bfy-gMAAA==","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPYwbRRSevZiKAgEBQbcFBUicb_bP9pIiUgSkgTsgQVdAMz-7Zrjdnc3Oru0zzYUg6iCloGP92RcXoJDUNMhHgTgJiZUoXOQkQEpBGyk1smMp5Enzvff0TfF9772vJ9UZaaNiyw_e12OVJGwnaFP79X2VST009u5V26FtesHeV1nHv2CPVlAM3nI8v03fsC9H4kDvuNSh1KGO_a4qoliPdtYsVP5D6LRD2vbdthP4GBVP96ayYJgFOTgjL0DJ5rl_4k-gxAJZevftyByUOn_znbRKWKkLDOT84-wg08MM6ZMyLizE2XzzG9o0hHy7BZ3NNw6gB7OVA3DVkK2X74Nn841M8MHxY6U8QZSBy2cxHCwQJQsotoDQN6DkHwQQErt7yNLbu7oYssPHLFuxDWk9egg1bEjr_nlk6Z1LiRrZV3RSlUpnBqO4hhotoPoL5NUJyvEW1PAEovwSSv5Odh69hyyd7ZlEQ8l67V7FCzBjoVo9ZaGKLVS5hVQubZ_2fOEwrxOHUnSpz3xfRpyGPZdSFoouKnEdSt6EKI6QF0c4UN80hDz8G0ZaMGVDrA-PMJD1sUyMa-rbMjEVdzbZ3WSvnuqyP2HHuuxHGQErbqKQ9Uzl18wNiPLcdBwbOdUrYLysp4zLeqpkSVBcW75GnVAyEdFttxvJ7a4fe9vMF3I7YB0vpNKP_Cicxaas6kl-Rp5fjdH6SU1xEC1txpyAu36vE3GXdgNPuDzo8qDrOK7nOr0IRtVQZms9obFqyP6n3yNXDdn-dw7OTmCSEwhlgVUO2LAG-6zGOLvbL6pcC80Pc8PaQqeQukZetlAeWpPkjLw4_ejqpZ_XGxWzVxCJ04sP4nVAFDXyosbn6heCfnL93l5eqlSN2WrFV0pWRufAVEPIvWcgVENeSn9cX1vvzxIiP4LJTy_eGv91-c75L2A0Ac8tJIogiU7JJsB4DfO_nj-pJ-Yr9IsWeNKa8qRozXhSJLfWMhvy6m_OCtwVUBi1tAOXe51erxPFHRl70nM9GQY0Cn0WdvzQD1CaRj347tf_AgAA___t7Bfy-gMAAA== HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dc3a593c710f4fe006c387daa6e58b6f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consumeririssalary.com/impr.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NdvZwoofRLMKBBWcnlef_rmBsPhJdEbdlQk0eb9qn1Ndr7ZeVXdPR72uGO-CgZnVp3u2A0XW2EDpMRAHhK2sg51AYQMjYWFjqd6GwQt17r2cgnfOvffrWXFOmijY-sMPzETHMdtrNan72qFOpBlZd_-G69Emveoe6qQdXnXHNWTDN70gbNLX3feUODJ7PvUo9ajnvqszFZnx3oaFTn_oec0ebYZ-02uFGGf_723hwDIHcnhOnoOW1TN_R59CixWSwf23lT3KTfrGO4MiZrnJMJTLT5KjxIwSDC7KKHMQJcvt3zC2IuTbHZhkuXUAM1zUDsB1RXZefAieLLcywYcnT5XyGCoBl5cxGq6g4hU0W0GY29DyAQGExP4BksG9fZON2PFTltVsRRpPHkOPKtJ4-AKSwY_XYj12r5u4yLVJLMZRCT1eQfdXSItT5JMd6NEpRP4ltPyT7D15H8lgcWBjAy3LjXsdrcCsg6L-tIMiclCkDgZy7Ya0GwqPBe2oJ0WHhiwMpeK01_UpZT3RQSFuQcs7ENkUaTbFkb5bEfL4L1jpwOYVcT6aYijLExlb35b3ZGwL7m2zv81BOTd5f8ZOTN5XCQHL7iCT5UKnN-1tiPzSfBJZOTc1MJ6Xc8ZlOdcyJ8hurl-hXk8yoeiu31FytxNGwS4LhdxtsXbQozJUoeotIpsX5Sw9J8_WY3R-1nMcqbXLmNfifthtK-7TTisQPm91eKvjeX7ge10Fq0tou7OZ0ERX5PCz75Hqiuz-swRnp7DxKYR2wAoPbFSCfV5iktzvZ0VqhOHHqWVNYQaQpkSaN5AfO7P4nDw___jGtV83G335Dx9KnJFtQGQl0qzEF_o3gn5866eDNNcDPWH1iq_nLFcOmH5w5QpEfWN3vc2tXZ6-CpFOYdOztx5Fm4A1BDy9hFgTxOriBcZLWHX2y7_bnl_UM_sV-lkDPG7MeZw1FjzO4m8qIhYv1Uq9jdwaKKxeu1GgfEFpt9P2gm6kvCCUImp1w55sMxoECrmt9KPvfv8vAAD__1rJjqn4AwAA","fqdn":"consumeririssalary.com","domain":"consumeririssalary.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"consumeririssalary.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 07:13:02 GMT","end":"Tue, 26 May 2026 07:13:01 GMT"},"fingerprint":{"sha1":"24:DF:7E:7F:68:4D:F5:8C:DD:F6:AC:4F:86:AF:08:66:EB:B8:05:E0","sha256":"2D:FD:08:88:1D:7F:BC:7B:D6:5B:31:4B:88:55:F7:16:68:E3:BC:48:47:3B:D1:80:9B:C6:D6:EC:FC:AA:49:5A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSO4gkVRR9NdvZwoofRLMKBBWcnlef_rmBsPhJdEbdlQk0eb9qn1Ndr7ZeVXdPR72uGO-CgZnVp3u2A0XW2EDpMRAHhK2sg51AYQMjYWFjqd6GwQt17r2cgnfOvffrWXFOmijY-sMPzETHMdtrNan72qFOpBlZd_-G69Emveoe6qQdXnXHNWTDN70gbNLX3feUODJ7PvUo9ajnvqszFZnx3oaFTn_oec0ebYZ-02uFGGf_723hwDIHcnhOnoOW1TN_R59CixWSwf23lT3KTfrGO4MiZrnJMJTLT5KjxIwSDC7KKHMQJcvt3zC2IuTbHZhkuXUAM1zUDsB1RXZefAieLLcywYcnT5XyGCoBl5cxGq6g4hU0W0GY29DyAQGExP4BksG9fZON2PFTltVsRRpPHkOPKtJ4-AKSwY_XYj12r5u4yLVJLMZRCT1eQfdXSItT5JMd6NEpRP4ltPyT7D15H8lgcWBjAy3LjXsdrcCsg6L-tIMiclCkDgZy7Ya0GwqPBe2oJ0WHhiwMpeK01_UpZT3RQSFuQcs7ENkUaTbFkb5bEfL4L1jpwOYVcT6aYijLExlb35b3ZGwL7m2zv81BOTd5f8ZOTN5XCQHL7iCT5UKnN-1tiPzSfBJZOTc1MJ6Xc8ZlOdcyJ8hurl-hXk8yoeiu31FytxNGwS4LhdxtsXbQozJUoeotIpsX5Sw9J8_WY3R-1nMcqbXLmNfifthtK-7TTisQPm91eKvjeX7ge10Fq0tou7OZ0ERX5PCz75Hqiuz-swRnp7DxKYR2wAoPbFSCfV5iktzvZ0VqhOHHqWVNYQaQpkSaN5AfO7P4nDw___jGtV83G335Dx9KnJFtQGQl0qzEF_o3gn5866eDNNcDPWH1iq_nLFcOmH5w5QpEfWN3vc2tXZ6-CpFOYdOztx5Fm4A1BDy9hFgTxOriBcZLWHX2y7_bnl_UM_sV-lkDPG7MeZw1FjzO4m8qIhYv1Uq9jdwaKKxeu1GgfEFpt9P2gm6kvCCUImp1w55sMxoECrmt9KPvfv8vAAD__1rJjqn4AwAA HTTP/1.1\r\nHost: consumeririssalary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29059491=1; nlecaa15b2486eb20753c2b57b571123218e=[6530072,1690161,1690162,1690160]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Apr 2026 21:51:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+582f715df28f2a968e2df69e0bb2737b=1690162; expires=Mon, 04 May 2026 21:51:05 GMT; path=/; secure; SameSite=None\niprc_l:1690162=1; expires=Mon, 04 May 2026 21:51:05 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: consumeririssalary.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e60840ab5d1886b9622831d41a0f95b9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":291,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"consumeririssalary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxsegnr.com.br/sara1.png","fqdn":"maxsegnr.com.br","domain":"maxsegnr.com.br","tld":"com.br"},"ip":{"addr":"108.167.188.63","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:03.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxsegnr.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 19:13:05 GMT","end":"Sun, 12 Jul 2026 19:13:04 GMT"},"fingerprint":{"sha1":"1B:C4:E2:FA:FC:CA:BC:F0:60:B4:AE:B4:EF:71:87:09:86:26:70:81","sha256":"DF:47:BC:45:C2:06:2F:7E:9F:B1:B9:DC:55:A0:C1:13:41:E4:BB:4D:2F:97:71:7C:51:E5:79:14:DD:1B:7A:93"}}},"request":{"raw":"GET /sara1.png HTTP/1.1\r\nHost: maxsegnr.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 07 Apr 2026 21:02:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Mon, 20 Apr 2026 21:51:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-08T15:12:19.512176Z","times_seen":7803,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"maxsegnr.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"maxsegnr.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/public/external/css_frontXF.css","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:04.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: d5b3uz3fo8hn3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Mon, 20 Apr 2026 21:51:04 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:23:45 GMT\r\netag: \"17f6-60315f092dd96\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: hzgxXOesN5bvxNAdpnuqoI2GCrAmGG3gZdfMUn8ef1vcxh70_z0WgA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6134,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-08-08T14:38:56.852333Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":32,"dns":23,"connect":1,"send":0,"wait":176,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d5b3uz3fo8hn3.cloudfront.net/public/external/check.php?it=4596755\u0026time=1776721882413","fqdn":"d5b3uz3fo8hn3.cloudfront.net","domain":"d5b3uz3fo8hn3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxsegnr.com.br/","date":"2026-04-20T21:51:22.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/check.php?it=4596755\u0026time=1776721882413 HTTP/1.1\r\nHost: d5b3uz3fo8hn3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxsegnr.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Mon, 20 Apr 2026 21:51:22 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.48 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -xw-QvYNYuclw3bhm33Iy71Sl9nf-5Mwzi2HYCUpcO8GXUgljheDqg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-08T14:38:56.849271Z","times_seen":3367,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}