{"report_id":"3675e5b9-03c3-4fbe-acb8-bc36b9657563","version":0,"status":"done","tags":[],"date":"2026-08-31T07:28:57Z","url":{"schema":"http","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"title":"Mercado Livre - Gire a Roleta!","dom":{"size":14216,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f6be576bd0acdc247eaf497d8af90ffb","sha1":"3c5765aa2a986c0183196f178ea55b5b2a9ea8f3","sha256":"06d3eb48fc5e5b2e511ab5c5d7c17843b79c1d3b73bbedbacfd93d5230a33e4a","sha512":"85cbaeaf6da01b513bb5a8c4c965640212b957c0f522d5801c27dd32bbbdb4e97d1f72e9412df934a834a31ee8b29baaa5125a16f59abe9901f3ef8b89165f46","ssdeep":"384:jdjswY8GgGVP7WRZfzA1HWLGZaQZlampCbCI/hd22Z5yirMUEpnS0:pswY8jqP7WRZfGN","tlshash":"7552636766fa247943a311491e872a4f3b309107ee59ed043e7cc9901fcdeeed42b689","dom_hash":"domhashb83ddb315f6f74e0584b89139912cd2a","first_seen":"2026-08-31T07:28:31.226427Z","last_seen":"2026-08-31T07:29:00.224646Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:28:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.postimg.cc","ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-08-27T22:02:06.839668Z","alert_count":0,"request_count":6,"received_data":280483,"sent_data":3273,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.utmify.com.br","ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1350186,"first_seen":"2024-02-12T18:06:21Z","last_seen":"2026-08-28T08:24:30.629327Z","alert_count":0,"request_count":3,"received_data":103174,"sent_data":1432,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"especialde25anos.biz","ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-29T09:34:07.703233Z","last_seen":"2026-08-29T09:34:07.703233Z","alert_count":110,"request_count":22,"received_data":1206181,"sent_data":11538,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"tracking.utmify.com.br","ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1674326,"first_seen":"2024-08-31T10:04:06Z","last_seen":"2026-08-26T06:14:10.583489Z","alert_count":0,"request_count":6,"received_data":9467,"sent_data":3414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"inetstats.org","ip":{"addr":"104.21.72.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-15","domain_rank":4928357,"first_seen":"2025-07-07T12:45:33.038332Z","last_seen":"2026-08-29T09:33:20.674414Z","alert_count":0,"request_count":1,"received_data":926,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/confetti.browser.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"614ca68dbb866caa25b1fc15a314d1b5","sha1":"86ed080b3985cd2604bfa864048aff86a01388d5","sha256":"e4f3d22f12d07be903b8f4756763e691561d9b6f1f3bc47b300f8dd0766a2d98","sha512":"7eadeea6160c5dcdd9a5898b7522439a72124be092bfac05451acb064b1575160c69f1435583f573cf264edca3eb634eb4c2e291f5bec6a9320e93d78d678fe6","ssdeep":"192:7tKPGrnmAPsihR3/dZm9YqgZdWybN6TRbHCTzvP:7QinmMhR+9GZdWybN6TxczvP","tlshash":"67f1b69df7513e160b5322baa84f910ea238b56f170f4484a2b9d5a42dbc41c333ff29","size":7464,"data":"","first_seen":"2023-04-07T21:08:12Z","last_seen":"2026-08-31T07:30:24.945008Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"944180892603a8887e126b1a2aca415a","sha1":"f3f1e4b6669f369d9a12b9c196969863f98db9f3","sha256":"efdaacdfe976acea46ce3584d8f2461e42cf26c4ace4bc9b5d9c968259ef71ae","sha512":"b010655a5a24a8f4b78524fec1901463bb1c662958a7da0b4d74a0443f775b2589357ae5aa9c9412aacd644631f317c24c71315a2c90f1932e9610c9e9c11e4f","ssdeep":"","tlshash":"2dd0a77e197867b3a97610dbe87a7b893c85b53e5442d157428ecd8a3d0dd571cfc010","size":259,"data":"","first_seen":"2026-08-29T09:33:47.230883Z","last_seen":"2026-08-31T07:30:24.950427Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f04a13507f9c3526d9a67cf74e7b06a8","sha1":"d395d23fea3a7121fdbe7905cccb8397cb9fb13b","sha256":"ff4fcb63c719703c9aca26bc4a2b8eac203c0173fd183f4934f92ea91ea993ad","sha512":"6f59549a398d930f8838b48a215d4a0cc3e7201e2533cc5299fb66ff1c3e9c2dce6447c89f0ea6e36aaeed9cc2138aa66182151df79cd608e46270648a1e73df","ssdeep":"","tlshash":"5bd0a57f3d64677319665047987b77543fd5643d5452d12b039dcc8e2d0ce8108bd051","size":272,"data":"","first_seen":"2026-08-29T09:33:47.233054Z","last_seen":"2026-08-31T07:30:24.951184Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5537a704c5d1e28cd26f59b3e393bfab","sha1":"c61e08ff929d1c680f66980dc1c6dd075d96f6d8","sha256":"29b74281c9c971701183a6da858e8fdce1d30e2c5a4b274d486894b2bbfc61e1","sha512":"b4b7674d4ac4b3a0d8f8cc6da68bd5bf11394fce0291408c287d7cd26869f62332aca5999afd4fdd941b0b20d70d58d8f73adc7520fb9c9f8fee947a7e7a8e86","ssdeep":"192:+WzABTH9a0+LGZaQZlampCbCI/hd22Z5yirMUEpy2SI:dzA1HWLGZaQZlampCbCI/hd22Z5yirM1","tlshash":"9222cf6763fb246843a321590f472a5b3b315147ad59e9087e3cca501fcddede03a6ca","size":10029,"data":"","first_seen":"2026-08-29T09:33:47.234773Z","last_seen":"2026-08-31T07:30:24.9519Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/jstools.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a66559b76d0ce4d85ecffabb01518e","sha1":"fd6c1666b0314e1be054b99797765ba53f38d7a4","sha256":"c8153a4d1f0b4cf39fb21a5dd23cf254cc8e1c938fe622e5609eb39b1fdb8b96","sha512":"6fa3848f2f8d113b7bddd4f46200b04953ef5c5fe4e626d9820480112bff4383405372d4d0fda4ac38f502f80b5af170c0021594ec0b68512ffae2eea802724a","ssdeep":"","tlshash":"fff05996b120d2fb85f309e9169ab745b0f30296290998d0159c9c45962df4f4e2aac9","size":537,"data":"","first_seen":"2026-03-17T06:47:12.033646Z","last_seen":"2026-08-31T07:30:24.946672Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel-google.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4c673c32c09960c65aa780d6289520","sha1":"caa54e28bcaebcfc3ce7e7b5ad7be077f6330ba7","sha256":"edb5504c63a92d3c2eda5e4b8ca6be450dd546db2c0beb2d3179420d11cab5d5","sha512":"5a0a939db523c4305f9c9feca4e96a68546a6d915d77ddf6119d444b7be72902a02dc01f290e5741c130fa439529a782560b61ed5301483fdd907c275212d3bc","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/TRjU2IcEVv9:Etnjfz6RYJio+/tU9vKtyZ0A432","tlshash":"9d039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","size":40502,"data":"","first_seen":"2026-06-14T08:04:00.23828Z","last_seen":"2026-08-31T07:30:24.942222Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/faaa37c9-904a-4083-be7a-b770e95b5732","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"0b264f98bdccda2c3c9bb4a0c6f681fa","sha1":"7f563a0c47c06f2b43399ce4730bc047341b2067","sha256":"52dfc67da32a0bd7106b8cd7b016c5d76e6065b853b9b1d7dd581d6b7486108e","sha512":"124a0c4e231ce3c1f7168f5bcface83e2ab179d63c8121a5af3f9df51c408a69aa4d9fcda2350933d214ea030fcce2d70f5d99d0f93847c26db23a614704d5d5","ssdeep":"192:ktKPGrnmAPsihR3/dZm9YqgZdWybN6TRbHCTzvQF8zGsGAh:kQinmMhR+9GZdWybN6Txczv8VFAh","tlshash":"73f1a99df7513e1a0f13327a985f510da139b56b170f4544a2bc96a42ebc81d333ee29","size":7605,"data":"","first_seen":"2026-06-18T17:48:02.554981Z","last_seen":"2026-08-31T07:30:24.952599Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inetstats.org/g/s.js?r=https://especialde25anos.biz/roleta/index.html","fqdn":"inetstats.org","domain":"inetstats.org","tld":"org"},"ip":{"addr":"104.21.72.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7cd98030682f624d138c0ed7cb1f568","sha1":"8684d0a7092c6065ce24361726f6b5c635ea9a48","sha256":"fe95ece5682bc3e1649eb1e1cd69a396c089b40284537c90cb72ab68ed6b580c","sha512":"a753b74fa7972e9bf1b264715d153ebb69adee3374deff42448e80229928974540f1c7d7052a3213c64c342314b4f720783b2f4886f3a5ec26d15bdbed07933d","ssdeep":"","tlshash":"37c02b104f1e87b4203901dbd0e3c3cc583020f8b505c8034007c0b45448ee70ec2dc0","size":133,"data":"","first_seen":"2025-07-07T12:45:39.359476Z","last_seen":"2026-08-31T07:30:24.943264Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/jquery-3.0.0.slim.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7846af619b5aa7859af14291d8375d","sha1":"3e818ef47246acaf4bc608aaa6ae6b6186e5a097","sha256":"beb66e38b20dc486e50de380cfd1affe9f952032e19be1eab9becc89a954f48d","sha512":"52c6dbdee03c6ff5959d603dca8d89d2a2e135b438acb8e80c1a6a01ef347b7f2d7b16a9dc32cb3e9f92ba91cf6aad98f64f76792a300863bb653e4b68c95f56","ssdeep":"1536:u5hEyisTikEJqRdXXe2pP7lgoVMEXDdVhvL5Sh4xzAdXtqT9jnx3w6m1DU8Cu7:0QGDHhvLzzuXkT73Y1DU8Cu7","tlshash":"4563c4d9b2d67052d77730b850bf450bf07a98dab44c8d60e0a8d8e47d78a89817bf2d","size":69361,"data":"","first_seen":"2026-03-17T06:47:12.032612Z","last_seen":"2026-08-31T07:30:24.940615Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/jquery.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d36ebce3809e275245efe5ea92f6e411","sha1":"fffa39ac2b7f468b9bf38f99fa73a882ee37ad30","sha256":"94d3359ffb8cb6c50c43b62d9d144313570981034da174d7320192be940e773c","sha512":"213d20fbe0244dfa74ca5881aaed1ff5ca9d4fda109ff7c7aac867ebc36f915ca869cf3c05874ab2490d84bc7ceed657dd42b47060bf67f41e415a64ce195915","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUJTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9M:t4J+N3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"9993d7d9b6d6706287b734b850bf410bb17aa8eab40c4c60e058d8e47e74e9d507bf2d","size":97600,"data":"","first_seen":"2026-03-17T06:47:12.028852Z","last_seen":"2026-08-31T07:30:24.944206Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/bootstrap.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36868,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-09-02T14:36:03.357958Z","times_seen":22284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/utms/latest.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"095e507c5a14a41feced352c26dd729b","sha1":"7f46093ebba00fec47f53c6a8082656e31a48267","sha256":"599af0d6ba0795a397f44815d223d4fcd968d57f176b167e8a69ae8283b8107b","sha512":"39c84ec76af96473ea5a379b55be4c7d9dc1648ed55feb5a57539ecb0a3abf88de154c077e71d1848d34a972769e9c566055ed4e41bfe7ecc13c4296ae789811","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NUGwNviLDFzI0M+urGc2ecbsbSdlaI5:uszukMaPJEuYEsOj7ZudQ9e49d3NUGwq","tlshash":"7e9297a4f1aa909416b28cbf40b75232f22cb725b145c180a54f5d89345eeeb63f3d7b","size":19449,"data":"","first_seen":"2026-08-12T12:45:50.348589Z","last_seen":"2026-09-01T21:44:47.591894Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/latest.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dd66cc0aa8428537cd8258d211afec4","sha1":"366ce9cc7a1cb9ee6908c14bcf18ad0edb7bdf77","sha256":"d58a0651391fea6f2538b1e81138bb458e0418b37bc73b445b34bd9100d67f7e","sha512":"93963dff2b741eeac105a4f00887eadc73699410c74f16da2f4c2b8f579a5d58e008eb64b00e9cd72bf247eff8ba1bccdfc8d665aa9d34743625a88f3ebdb026","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NURxeCiHDFzIlM+urGc2ecbsbSdla6t:uszukMaPJEuYEsOj7ZudQ9e49d3NURx3","tlshash":"d49298a4f1a5909412b24cbf40b75232f22cb735b145c180a54f5d89345eeeb63e3d7b","size":19506,"data":"","first_seen":"2026-06-23T14:07:39.965421Z","last_seen":"2026-08-31T07:30:24.923846Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff078647e8888f28c23d519571c06500","sha1":"c4e1a1dd18e1e87fa354ca5beb5f064f5cf01abf","sha256":"3afb6ab2343e23bb8b4cdde9b659e3af54c67e1157ff2ea75a2ac02e244f8df7","sha512":"a0e86cd5f29ac5058cd18c72ab595aaa921fdcf362b1afb970589d40fa38f1833e6941838925e6efe26af71147a2ae26ff5c0673f940eabb55f2f7bdc58ab3c2","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/zRj02Icmvva:Etnjfz6RYJio+/N09bKtyZ0A43B","tlshash":"f1039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","size":40498,"data":"","first_seen":"2026-06-14T00:04:44.270205Z","last_seen":"2026-09-01T21:44:47.586997Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Tracker Meta version 1.6.1","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":40427},{"level":"log","text":"Tracker.inited?:false","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":29779},{"level":"log","text":"Tracker Google version 1.5.1","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":40427},{"level":"log","text":"Tracker.inited?:false","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":29779},{"level":"log","text":"error on getIpv4NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":6603},{"level":"log","text":"error on getIpv6NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":6603},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj39 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj40 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj41 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj42 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"error on getIpv4NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":6603},{"level":"log","text":"error on getIpv6NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":6603},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj45 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj46 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj47 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj48 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"response for 6a5143f9a6d5d982ee4fe71b: 1683000296293647","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":20281},{"level":"log","text":"response for 6a5261d78277f60546ee8d54: ","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":20281},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj87 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj88 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj89 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj90 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj91 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj92 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj93 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj94 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj95 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj96 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj97 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj98 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj99 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj100 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj101 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj102 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj103 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj104 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj105 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj106 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj107 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj108 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj109 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj110 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"response for 6a5143f9a6d5d982ee4fe71b: 1683000296293647","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":20281},{"level":"log","text":"response for 6a5261d78277f60546ee8d54: undefined","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":20281},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj111 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj112 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj113 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj114 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj115 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj116 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj117 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj118 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj119 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj120 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj121 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj122 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj123 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj124 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj125 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj126 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj127 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj128 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj129 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj130 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj131 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj132 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj133 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj134 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj135 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj136 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj137 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj138 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher14.process7//obj139 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj140 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.2251003408469855] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj141 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.049382029217061474] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj142 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.3351040491276629] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984}]},"http":[{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/bg-vazio.png","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.813Z","timestamp":1788161307813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/bg-vazio.png HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/css/stylead8e.css\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-d76b\"\r\nexpires: Wed, 30 Sep 2026 07:28:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55147,"size_decoded":48403,"mime_type":"image/png","magic":"PNG image data, 1080 x 1920, 8-bit/color RGBA, non-interlaced","md5":"d1d24a8c8b3d0b09e2828d3569b0b9c7","sha1":"9a4d3e277225a368b2e014d4eeaa3084ea4c84a4","sha256":"06b59ff4f9f30786db43b3afdc436c718081cea30f5378944bf8f795755c5440","sha512":"026343d48e245fd43042ba4c711071ce3914eb50c70b2ca540b57212c5316582a997422f192698e5c4f021c6ed6aaff93ee6b4f482722b2b73a819e9e9dff2a7","ssdeep":"1536:E19dGd2tB5UpyW/aCErQE2EyOgQua8UEH:EPbnGUW/rEPFg4E","tlshash":"f643cf6ae837b598cd15b7328c385e13be6f156111c031b3f73aa9a88d85f1cf993648","first_seen":"2026-03-17T06:47:12.035725Z","last_seen":"2026-08-31T07:30:24.939745Z","times_seen":15,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.885Z","timestamp":1788161307885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://especialde25anos.biz/\r\nOrigin: https://especialde25anos.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:28:28 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9SIgeZvwogusOZUd7XswGFdse6eodC0h%2Bca5JC9vyFUBKAp%2BmnqQF6ZVYcFZx1RdNpVdRf46blvu%2BeJ3vVhFU1ERl1RzntfbAoFxKtqpGdA8Vdchrn4TMTkn1Ie3sWu1y2FtIbKlsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a518e5fc656a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1320,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":235,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inetstats.org/g/s.js?r=https://especialde25anos.biz/roleta/index.html","fqdn":"inetstats.org","domain":"inetstats.org","tld":"org"},"ip":{"addr":"104.21.72.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:28.750Z","timestamp":1788161308750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inetstats.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:04:44 GMT","end":"Sun, 01 Nov 2026 22:03:05 GMT"},"fingerprint":{"sha1":"72:73:EB:A6:02:25:2C:81:60:B1:2D:EF:5C:57:F5:DF:05:35:A3:3C","sha256":"2E:F2:62:6C:C6:31:E5:6A:D3:F4:32:75:FA:FC:C1:A4:D9:B4:3D:98:A8:DA:1B:26:F3:A1:94:69:F9:FF:3B:E4"}}},"request":{"raw":"GET /g/s.js?r=https://especialde25anos.biz/roleta/index.html HTTP/1.1\r\nHost: inetstats.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:28:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.2.1\r\naccess-control-allow-origin: https://especialde25anos.biz\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: X-Requested-With,content-type\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7qqzUDoaUXdv9BXUxiqbvwxApsXAfgMbTAmmF4Hn5OVVJ%2FvpXIQEgdak6Ly9sp1OncTG8NfKU%2B5GEalSGF1E%2FeniRCo7C973fJCiRcgpKafQK3jacp4VqFyEhFu%2FnYH\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a33a5193dfe635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133,"size_decoded":925,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e7cd98030682f624d138c0ed7cb1f568","sha1":"8684d0a7092c6065ce24361726f6b5c635ea9a48","sha256":"fe95ece5682bc3e1649eb1e1cd69a396c089b40284537c90cb72ab68ed6b580c","sha512":"a753b74fa7972e9bf1b264715d153ebb69adee3374deff42448e80229928974540f1c7d7052a3213c64c342314b4f720783b2f4886f3a5ec26d15bdbed07933d","ssdeep":"","tlshash":"37c02b104f1e87b4203901dbd0e3c3cc583020f8b505c8034007c0b45448ee70ec2dc0","first_seen":"2025-07-07T12:45:39.359476Z","last_seen":"2026-08-31T07:30:24.943264Z","times_seen":105,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":52,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/kXrTRHtD/6.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:47.986Z","timestamp":1788161327986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /kXrTRHtD/6.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 31 Aug 2026 07:28:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55143\r\nlast-modified: Tue, 23 Jul 2024 16:29:25 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55143,"size_decoded":55509,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:07:23 13:28:26], baseline, precision 8, 201x201, components 3","md5":"9ff2e56d21513f4b4edcd238fe5a7837","sha1":"c14132423c652b38731abfa658a9f3e1d6247108","sha256":"0ff2c58075113e63eb9cd7f38ddc5eb4f40239eb449620e87481b95df5bdc0a4","sha512":"6941f63623df3cc24599be5379a2dd16e207ac660bbe09232dd0ef2e03fa4b86ed59703d6c5025d97790860e969b01ae8e5b928ef0c9218e169eedbf020c500c","ssdeep":"1536:n/7YEqerWC/7YEqerB5doshS50eby9VqfUd7EUwcpZ3b:n86x86NTS23qchtxZr","tlshash":"c943e046a6214ee3fde66d3bc490d5b65231afe8f283314e34bc2451fb92742987d742","first_seen":"2026-08-31T07:29:00.231618Z","last_seen":"2026-08-31T07:29:00.231618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/confetti.browser.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.310Z","timestamp":1788161307310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/js/confetti.browser.min.js HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-1d28\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7464,"size_decoded":3694,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7117)","md5":"614ca68dbb866caa25b1fc15a314d1b5","sha1":"86ed080b3985cd2604bfa864048aff86a01388d5","sha256":"e4f3d22f12d07be903b8f4756763e691561d9b6f1f3bc47b300f8dd0766a2d98","sha512":"7eadeea6160c5dcdd9a5898b7522439a72124be092bfac05451acb064b1575160c69f1435583f573cf264edca3eb634eb4c2e291f5bec6a9320e93d78d678fe6","ssdeep":"192:7tKPGrnmAPsihR3/dZm9YqgZdWybN6TRbHCTzvP:7QinmMhR+9GZdWybN6TxczvP","tlshash":"67f1b69df7513e160b5322baa84f910ea238b56f170f4484a2b9d5a42dbc41c333ff29","first_seen":"2023-04-07T21:08:12Z","last_seen":"2026-08-31T07:30:24.945008Z","times_seen":130,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/utms/latest.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.312Z","timestamp":1788161307312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"GET /scripts/utms/latest.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 21:17:55 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"095e507c5a14a41feced352c26dd729b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4c304736e6087956cb00821d710060a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: gq1H3rHPUYld5vu9-8lRUpda8aWUjiu9yMQKSdyXVtYA54rx_uc3Ig==\r\nage: 6819\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93LxBn13BDPguzG0xW85a45rqNAK1aE%2Fd8cQ3m8sypZvSIB%2FIddw2s6fI%2FDrkCAg%2B%2FHzyRMm8g8QUIgNimVhw4OWJrRjZ3doNY7FOK9Rdv2mGcRk6OAqp9%2BaQ20MGF0%2BWWYB\"}]}\r\ncf-ray: a33a518acb2556c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19449,"size_decoded":6793,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19364), with no line terminators","md5":"095e507c5a14a41feced352c26dd729b","sha1":"7f46093ebba00fec47f53c6a8082656e31a48267","sha256":"599af0d6ba0795a397f44815d223d4fcd968d57f176b167e8a69ae8283b8107b","sha512":"39c84ec76af96473ea5a379b55be4c7d9dc1648ed55feb5a57539ecb0a3abf88de154c077e71d1848d34a972769e9c566055ed4e41bfe7ecc13c4296ae789811","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NUGwNviLDFzI0M+urGc2ecbsbSdlaI5:uszukMaPJEuYEsOj7ZudQ9e49d3NUGwq","tlshash":"7e9297a4f1aa909416b28cbf40b75232f22cb725b145c180a54f5d89345eeeb63f3d7b","first_seen":"2026-08-12T12:45:50.348589Z","last_seen":"2026-09-01T21:44:47.591894Z","times_seen":68,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":18,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/star-struck.png","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.332Z","timestamp":1788161307332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/star-struck.png HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-847e\"\r\nexpires: Wed, 30 Sep 2026 07:28:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33918,"size_decoded":34466,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"6139bf7ea2b98ebcf8f7f816c766edc9","sha1":"6d255c0fa9532602b741eedae6b833f3792d0172","sha256":"8c1eaca3b50066596293590d941f85b78e6161c89b15bb228148fb01d90666e8","sha512":"a93197be483eca967805fc1ae87a4f3f7c687ac1b4b0b168c1961d28cf2fd069162c0433a165afe54c72ab3d8e2d4105390a998cf24f650e559f6987bd6b152f","ssdeep":"768:ZvK3JsIUA+Tol+kQNt+tJaJdS8IK99n7ZOcT1IqKc:opmqit+tJaf9+kyQ","tlshash":"75e2f1d6c4a122052b363ce94a58a4682d0394bdea73531e342dc56fe3cdf572d1c98a","first_seen":"2026-03-17T06:47:12.021243Z","last_seen":"2026-08-31T07:30:24.93241Z","times_seen":15,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/media/ml.mp3","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.822Z","timestamp":1788161307822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/media/ml.mp3 HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 69120\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\netag: \"6a508084-10e00\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-69119/69120\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69120,"size_decoded":69575,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 320 kbps, 48 kHz, JntStereo","md5":"71c4815140892018c6f4fc59a11581d2","sha1":"8a1f9e0ddbdccc570d71b61098d399a9c6d8f2e8","sha256":"e9efc04be08f86d426d16f554a43dc741f241b35a7ebd541e38511c1e8fd6205","sha512":"14594c2e76ef3520bd99d748684c36c0447ebc91c30fd15c514679ebe3afebcca554c5461579a53b0d5de42d929a324fcd25c5855126dd3d2efcd00d08d56e16","ssdeep":"1536:+r3SEk2UEc4FUYEp2D9REvCb2fYpEbFU8kX2tK/tE4hH9T:+rSt2U0UrC6CCQpiU8kXbVE47","tlshash":"69630102d60799fcf82e6579eef27700e508de6c87e804d8c535e7b34ae6fc281a9465","first_seen":"2026-03-17T06:47:12.017276Z","last_seen":"2026-08-31T07:30:24.928904Z","times_seen":15,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/css/all.css","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.090Z","timestamp":1788161307090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/css/all.css HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-d6db\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55003,"size_decoded":12579,"mime_type":"text/css","magic":"ASCII text, with very long lines (54818)","md5":"743c2171ed2227358b7950530fe524de","sha1":"d44ff8b5c491d564cc737e913a5cd52bb43a9c6b","sha256":"473fe74f734ab33a5bf90d082ecb1751ce59541517a017a6dcbceea502c7363b","sha512":"83c8c357f682e907eee69ccff7a59de605d232c8b4f1529783595e5bf9d4907fd0436eec168942c8b044ee0dfb7cbb0dc5dcb05c6575daf27278377dcc6ff289","ssdeep":"768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz1:gu5PWC4/vzH5BCkgc7zsi5","tlshash":"9f330ab8e54c41c9a732c44fbf82b2bc61b6f73ce5914d95f00e591c2ad26a811c9fb9","first_seen":"2026-03-17T06:47:12.014684Z","last_seen":"2026-08-31T07:30:24.924779Z","times_seen":15,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.766Z","timestamp":1788161307766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"GET /scripts/pixel/pixel.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 21:17:55 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"ff078647e8888f28c23d519571c06500\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3a392288dea1bbbea74e310795e2a172.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: i1S3aDby49bQcAvp7BGniE7k9s55mkiwrEypVwl2tx5ayMzetsDRSA==\r\nage: 6767\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5RAipBdmBqt88hOiJvYLP0wrySvt3ZrCod7qOPHbyswm08Q2aVZrWVrC3OigQWYgZ3FxijKZz7nOpOuilDJvjC4aJQwyYWVICviX5Av5YyeAL4Y7WkPt3ONZoTFR68Fw%2BVB\"}]}\r\ncf-ray: a33a518d8e7656c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40498,"size_decoded":10203,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40491), with no line terminators","md5":"ff078647e8888f28c23d519571c06500","sha1":"c4e1a1dd18e1e87fa354ca5beb5f064f5cf01abf","sha256":"3afb6ab2343e23bb8b4cdde9b659e3af54c67e1157ff2ea75a2ac02e244f8df7","sha512":"a0e86cd5f29ac5058cd18c72ab595aaa921fdcf362b1afb970589d40fa38f1833e6941838925e6efe26af71147a2ae26ff5c0673f940eabb55f2f7bdc58ab3c2","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/zRj02Icmvva:Etnjfz6RYJio+/N09bKtyZ0A43B","tlshash":"f1039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","first_seen":"2026-06-14T00:04:44.270205Z","last_seen":"2026-09-01T21:44:47.586997Z","times_seen":158,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/responda.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.785Z","timestamp":1788161307785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/responda.html HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Jul 2026 15:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5262a1-7b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1972,"size_decoded":1417,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e91872f1dd86dec161e66b14c03c2cd2","sha1":"5add71a6bb485376061eaf6149d0fec3a88aa086","sha256":"f6dade2f216904a6c35e349ae9f1a03f7488803ddf25207f69bca1b013637411","sha512":"229bc917ecebd3ba92f6f5e02fc000dba0e812a8213f217a7ed9ab3498a99d29bbc8732df8e95ea893d66b3d998e502f71c2899be9388baaf18074e100f0239f","ssdeep":"","tlshash":"5f41943f55916337642700a6fab2f78c3a9891259043cb6226cde85a7e4cdf709bb2c0","first_seen":"2026-08-29T09:33:47.190116Z","last_seen":"2026-08-31T07:29:00.241016Z","times_seen":7,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.883Z","timestamp":1788161307883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"POST /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://especialde25anos.biz/\r\nContent-Type: application/json\r\nContent-Length: 416\r\nOrigin: https://especialde25anos.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"type\":\"PageView\",\"lead\":{\"pixelId\":\"6a5261d78277f60546ee8d54\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"parameters\":\"\",\"icTextMatch\":null,\"icCSSMatch\":null,\"icURLMatch\":null,\"leadTextMatch\":null,\"addToCartTextMatch\":null},\"event\":{\"sourceUrl\":\"https://especialde25anos.biz/roleta/index.html\",\"pageTitle\":\"Mercado Livre - Gire a Roleta!\"},\"tikTokPageInfo\":null}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:28:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 452\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"1c4-Rh/s861CkLb0BFtXAnPs97wL/Q4\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdXePUKNQwl%2B0wp8kzkOvE5ZyBCe85e6lCTO%2BHp6v3qCAy%2B2mEp%2FGaX6kchV1pMgB%2BKrML5pWHjehezJWQcqRHl7gRlWITucKJ4%2B88h0JI98K2XZ2oyZ5GQeL0Bpl%2BmJVAnKrmg5MGM%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a33a518fd94156a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":1792,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f4a67311ea231edc29428c04816073e","sha1":"fd1fa5900ebb66f03df0a5d9ab9c5bf6b68cc3f6","sha256":"141bc206b0478a3ddb960375bc0995efbdffb72588cb5eb4454980e7beda66dc","sha512":"d23360f1131648fa261f0fb009aae1863b414daaa8faa7afd79eec8e896b9f12ac5c92b368e6227d30ce288c5508af91535cc7bfcc2063040051830d536ea025","ssdeep":"","tlshash":"4001bd9ba9e4ac56854ac2128d883a36008d366b408088d40cbddf8c89ec662752d433","first_seen":"2026-08-31T07:29:00.241871Z","last_seen":"2026-08-31T07:29:00.241871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/9XNrx3BF/10.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:51.987Z","timestamp":1788161331987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /9XNrx3BF/10.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 31 Aug 2026 07:28:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43934\r\nlast-modified: Tue, 23 Jul 2024 16:31:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43934,"size_decoded":44300,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:07:23 13:30:30], baseline, precision 8, 201x201, components 3","md5":"fa956429076b45bb8f08302c5baaa36e","sha1":"130a7b7ce49999479ef06c4a2bd9d2b551632601","sha256":"cbde4792a854d9eb60dfc325e204c7981aba66046c357e049cfc0809be7dd8cb","sha512":"2252511c5ef0d4f44238c2cb3e3113bf714fe843b0d9e7c2fde5981d0d72fa2b879811e8425652b445408898db3a5100d2af79a87b20a75e298f576df420cd35","ssdeep":"768:6oinE6P1LVv1Rlc4oinE6P1LVv1RsyJ/PCqisKhXC7eyUrTWyxuy+zoObfzQAEZO:cE6tFnnE6tFnsyJnvteZnWByzOHgZMh","tlshash":"f913e117bbe1de56fcc81a78aa61c7c1cb12692d3a63d8a73d9c2149bb317c64c4c543","first_seen":"2026-03-17T06:47:12.02643Z","last_seen":"2026-08-31T07:29:00.244572Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/jquery-3.0.0.slim.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.094Z","timestamp":1788161307094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/js/jquery-3.0.0.slim.min.js HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-10ef1\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69361,"size_decoded":24596,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32462)","md5":"0a7846af619b5aa7859af14291d8375d","sha1":"3e818ef47246acaf4bc608aaa6ae6b6186e5a097","sha256":"beb66e38b20dc486e50de380cfd1affe9f952032e19be1eab9becc89a954f48d","sha512":"52c6dbdee03c6ff5959d603dca8d89d2a2e135b438acb8e80c1a6a01ef347b7f2d7b16a9dc32cb3e9f92ba91cf6aad98f64f76792a300863bb653e4b68c95f56","ssdeep":"1536:u5hEyisTikEJqRdXXe2pP7lgoVMEXDdVhvL5Sh4xzAdXtqT9jnx3w6m1DU8Cu7:0QGDHhvLzzuXkT73Y1DU8Cu7","tlshash":"4563c4d9b2d67052d77730b850bf450bf07a98dab44c8d60e0a8d8e47d78a89817bf2d","first_seen":"2026-03-17T06:47:12.032612Z","last_seen":"2026-08-31T07:30:24.940615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/bootstrap.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.097Z","timestamp":1788161307097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/js/bootstrap.min.js HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-9004\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36868,"size_decoded":10382,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003)","md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-09-02T14:36:03.357958Z","times_seen":22284,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/latest.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.317Z","timestamp":1788161307317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/js/latest.js HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-4c32\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19506,"size_decoded":6616,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19421), with no line terminators","md5":"8dd66cc0aa8428537cd8258d211afec4","sha1":"366ce9cc7a1cb9ee6908c14bcf18ad0edb7bdf77","sha256":"d58a0651391fea6f2538b1e81138bb458e0418b37bc73b445b34bd9100d67f7e","sha512":"93963dff2b741eeac105a4f00887eadc73699410c74f16da2f4c2b8f579a5d58e008eb64b00e9cd72bf247eff8ba1bccdfc8d665aa9d34743625a88f3ebdb026","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NURxeCiHDFzIlM+urGc2ecbsbSdla6t:uszukMaPJEuYEsOj7ZudQ9e49d3NURx3","tlshash":"d49298a4f1a5909412b24cbf40b75232f22cb735b145c180a54f5d89345eeeb63e3d7b","first_seen":"2026-06-23T14:07:39.965421Z","last_seen":"2026-08-31T07:30:24.923846Z","times_seen":155,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/responda.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.325Z","timestamp":1788161307325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/responda.html HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Jul 2026 15:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5262a1-7b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1972,"size_decoded":1417,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e91872f1dd86dec161e66b14c03c2cd2","sha1":"5add71a6bb485376061eaf6149d0fec3a88aa086","sha256":"f6dade2f216904a6c35e349ae9f1a03f7488803ddf25207f69bca1b013637411","sha512":"229bc917ecebd3ba92f6f5e02fc000dba0e812a8213f217a7ed9ab3498a99d29bbc8732df8e95ea893d66b3d998e502f71c2899be9388baaf18074e100f0239f","ssdeep":"","tlshash":"5f41943f55916337642700a6fab2f78c3a9891259043cb6226cde85a7e4cdf709bb2c0","first_seen":"2026-08-29T09:33:47.190116Z","last_seen":"2026-08-31T07:29:00.241016Z","times_seen":7,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/N0Fdh9nr/23.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:43.987Z","timestamp":1788161323987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /N0Fdh9nr/23.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 31 Aug 2026 07:28:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49809\r\nlast-modified: Tue, 23 Jul 2024 16:39:56 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":49809,"size_decoded":50175,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:07:23 13:39:52], baseline, precision 8, 201x201, components 3","md5":"2d7909c9e78a62869f20b43dee876282","sha1":"395471b01d7be15933337d7752d583f73ae9c007","sha256":"fa9a6bddf5e6b58fce864c3100f33dc1a42a47de26aacf71fdb42504d953679f","sha512":"c2dabee522957ed06b0697ed7e3aa3a0b238b8c0466294c81d4ea814c9cf011eff383cd02e21862066fc578611e40e6e8e02a99f097b4c404e5312d3d7aad8f6","ssdeep":"1536:4e22u/rCSae22u/rCrOwggzV4eP5fB/9hSc5Ek:ijCVjC5zV4wZ9oc5P","tlshash":"c923e1182f65dd86fad4a43ce563cf9566319f7872f30540390fa840fba8bb648d924b","first_seen":"2026-03-17T06:57:56.663441Z","last_seen":"2026-08-31T07:29:00.248376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/css/bootstrap.min.css","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.092Z","timestamp":1788161307092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/css/bootstrap.min.css HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-1d98a\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121226,"size_decoded":20591,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"ab85f17c72c094c53e4c0b285608704d","sha1":"4a9392be6892bbe5d322e942aac5c6a2a4ea983d","sha256":"fcc7b4257f59535b8630483006f84c2f7bd17174e75aef6c157464b29838d915","sha512":"1b90adc87cc194a46f7a8f8a642238e32b7b55832d0be844f7dabb1fad91056fa705fbee59882d83fd63b5889795540b148ab01ed5f8a14de62f489a26380551","ssdeep":"768:lyAGxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Kw/o1BIuiHlqLmN8lDbNmPbh","tlshash":"99c3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2026-03-17T06:47:12.020413Z","last_seen":"2026-08-31T07:30:24.925703Z","times_seen":15,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/jquery.min.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.096Z","timestamp":1788161307096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/js/jquery.min.js HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-17d40\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97600,"size_decoded":34785,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32446)","md5":"d36ebce3809e275245efe5ea92f6e411","sha1":"fffa39ac2b7f468b9bf38f99fa73a882ee37ad30","sha256":"94d3359ffb8cb6c50c43b62d9d144313570981034da174d7320192be940e773c","sha512":"213d20fbe0244dfa74ca5881aaed1ff5ca9d4fda109ff7c7aac867ebc36f915ca869cf3c05874ab2490d84bc7ceed657dd42b47060bf67f41e415a64ce195915","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUJTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9M:t4J+N3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"9993d7d9b6d6706287b734b850bf410bb17aa8eab40c4c60e058d8e47e74e9d507bf2d","first_seen":"2026-03-17T06:47:12.028852Z","last_seen":"2026-08-31T07:30:24.944206Z","times_seen":15,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/media/roleta.mp3","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.825Z","timestamp":1788161307825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/media/roleta.mp3 HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 265093\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\netag: \"6a508084-40b85\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-265092/265093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265093,"size_decoded":265551,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, Stereo","md5":"1585c483a23b06bac199cf477fa781bd","sha1":"551fa01ed0a974894bc7d773fc5c66861a9047a4","sha256":"b3a493e3fb4e0a3a229fd6398daca61e60b33efd628794b3920a9adb55c53ece","sha512":"d64bfa0937a205ebc3de75adb5d6231a8de05e75b0efad6d10b8fbd4fe5c09963fd2addcb2942ccb2e36c47593f70ab53bf653b9b9a8c656299ab29019aa70eb","ssdeep":"6144:vdeYBTn6HkjWRD8xv4XuT1rgdVldvcekt9inPPtN7L4fugpr2kzh:v8Iqnt+JWVsVtUnPFNUfugprjN","tlshash":"b94413bb4fdd9836d6b411b58233ce49a359ad139b007097ef4cf2068cbc9415aaa47f","first_seen":"2026-03-17T06:47:12.025009Z","last_seen":"2026-08-31T07:30:24.933328Z","times_seen":14,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/2ynfYBgw/5.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:35.831Z","timestamp":1788161315831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /2ynfYBgw/5.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 31 Aug 2026 07:28:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36076\r\nlast-modified: Tue, 23 Jul 2024 16:26:08 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36076,"size_decoded":36442,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:07:23 13:24:45], baseline, precision 8, 201x201, components 3","md5":"c4ffa499e30454998f06e87b249dcc9c","sha1":"75b22d0b4dd845e5cd2749e32bd2afddfcfe137c","sha256":"a7452f188edd326ebbb933aa652fc5c8fa609d93e93fbacdd862bbe38dd26ec7","sha512":"329af8bff879ba97e30946b98b995b926f5d51d235c09b71b20ee1a3001ea63a6e85dc884980b1382c1135bfb8aeaf72848888faf2953f73b8d89249f2f1d65b","ssdeep":"768:rA319jeszcOA319jesOcijLSfRkONTbxxqTM7GYqBYrN59YtxI3:uDMDm7ibPqTvjYhMtxI3","tlshash":"73f2cf55ba229e02fdc81d79ecb6d78883010b90b4e79f1b761d5982f7b2bd2dc18127","first_seen":"2026-03-17T06:47:12.019639Z","last_seen":"2026-08-31T07:29:00.253093Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/cHSQ4pzN/9.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:39.986Z","timestamp":1788161319986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /cHSQ4pzN/9.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 31 Aug 2026 07:28:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41763\r\nlast-modified: Tue, 23 Jul 2024 16:31:37 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41763,"size_decoded":42129,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:07:23 13:29:01], baseline, precision 8, 201x201, components 3","md5":"bfb4b21d7664d737e77dac9c5c988521","sha1":"855432ebd9475a12fcc0a216e0546b5d511d5fa5","sha256":"f123fc0e20637566e45051a99bb6965bf0e08e8152e211e0ce6600db3476c55e","sha512":"ec56f762a759d7f58e5da4dac5a4b116cb0cafe413bd79e99cbcfee8dc466b986102ca877d52fe454ab0db61f15eba46ba10ead5ce15bec869a897f3752b7a9e","ssdeep":"768:8ykFzbccuGykFzbDrOiDvWB97aqI6Y3A8h2vSj2bbGODH:yNfN/rO8WjaEWiU2WODH","tlshash":"e913cf3413a3ee25f6d46a3ad4aad39333026b608ae306c134dd358277797a17d5c327","first_seen":"2026-08-31T07:29:00.253807Z","last_seen":"2026-08-31T07:29:00.253807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/js/jstools.js","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.315Z","timestamp":1788161307315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/js/jstools.js HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 537\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\netag: \"6a508082-219\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":537,"size_decoded":1056,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (537), with no line terminators","md5":"71a66559b76d0ce4d85ecffabb01518e","sha1":"fd6c1666b0314e1be054b99797765ba53f38d7a4","sha256":"c8153a4d1f0b4cf39fb21a5dd23cf254cc8e1c938fe622e5609eb39b1fdb8b96","sha512":"6fa3848f2f8d113b7bddd4f46200b04953ef5c5fe4e626d9820480112bff4383405372d4d0fda4ac38f502f80b5af170c0021594ec0b68512ffae2eea802724a","ssdeep":"","tlshash":"fff05996b120d2fb85f309e9169ab745b0f30296290998d0159c9c45962df4f4e2aac9","first_seen":"2026-03-17T06:47:12.033646Z","last_seen":"2026-08-31T07:30:24.946672Z","times_seen":15,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.877Z","timestamp":1788161307877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"POST /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://especialde25anos.biz/\r\nContent-Type: application/json\r\nContent-Length: 416\r\nOrigin: https://especialde25anos.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"type\":\"PageView\",\"lead\":{\"pixelId\":\"6a5143f9a6d5d982ee4fe71b\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"parameters\":\"\",\"icTextMatch\":null,\"icCSSMatch\":null,\"icURLMatch\":null,\"leadTextMatch\":null,\"addToCartTextMatch\":null},\"event\":{\"sourceUrl\":\"https://especialde25anos.biz/roleta/index.html\",\"pageTitle\":\"Mercado Livre - Gire a Roleta!\"},\"tikTokPageInfo\":null}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:28:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 469\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"1d5-9sUa9QfNk0Tvkb3qFzknOcKfsDs\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A53HnMQm2HIReuOlec8yBGjJwMPlBP2f60omhsswfN1mfMlvjzGvyyDKeJ7A%2BY7a37vNXbA%2B%2FJrkDZqN9fUiVxCnAXe9b7Sn9XozfsgzwbGDVSMLNSCRLRLPDG2TqcwEvPnZu6uEZlI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a33a518fc93a56a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":1801,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"952f6a932e715f9cd8ede66f15fdf4bf","sha1":"c2b25b7fcaeae04d5d23ece45b28fc6036b63695","sha256":"a01b1385a71867112e0bc94d29af0e3a4b340b684438bade98fb099ed2928095","sha512":"9c7f98b6fb4534240f7f588a157c129b5a90c69a181a7f69c0d1ea0aaec0f89f652ba57c521d1ef0023162ebf53f699512be525b0fad7d4481f8bc4935c36e8f","ssdeep":"","tlshash":"6d01bd7e1db57ca08595c2a2ce5c3976025d3b2ba080c89288eeff0c85dcd77205c812","first_seen":"2026-08-31T07:29:00.256586Z","last_seen":"2026-08-31T07:29:00.256586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/favicon.png","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:28.160Z","timestamp":1788161308160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/favicon.png HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:28 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"6a908742-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":44116,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-09-02T15:47:52.430962Z","times_seen":14487,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/MT9bPss2/15.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.26","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:31.835Z","timestamp":1788161311835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /MT9bPss2/15.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 31 Aug 2026 07:28:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51562\r\nlast-modified: Tue, 23 Jul 2024 16:33:48 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51562,"size_decoded":51928,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:07:23 13:33:42], baseline, precision 8, 201x201, components 3","md5":"0ac2238c7c97855f3dc821291e01b75a","sha1":"13fd969f1260b45a67ca3591b2f4d9da41639086","sha256":"2342e62a7850b3ee66f11ded28ccfda80595aa7cd9e67cd81f1b3ee9407a1709","sha512":"fd0d70ab5ecdf08d458b461b63db19bd568ed0a012fb0bf40ba0fc423abb37a0596571ea7e26d6ea2e68208a9fb1785b70a43cbfd739dcf492ff09337b9b6d12","ssdeep":"768:A/FNCHuiFmcQB/FNCHuiFFNeEgrIO/if3/hqnEUjv9KAEUgCg06Y4aNd4cn:A/CHulB/CHuwwXrDsP+Hv31gRhlaNr","tlshash":"0a33e06f0af3cd44f6c2153a9c8ec3481a50fb87959b5781be8ca080bbb5b924d5d647","first_seen":"2026-08-29T09:33:47.228993Z","last_seen":"2026-08-31T07:29:00.258763Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":2,"connect":32,"send":0,"wait":34,"receive":62,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:35.881Z","timestamp":1788161315881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://especialde25anos.biz/\r\nOrigin: https://especialde25anos.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:28:36 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCRSB5xRJDFw7l8Fk7rNK48JyifgEOti7TWZmUYDmKkMpkjijldvGe1vPcbWOzbO09VyBlzwQdztwWD2YduoY0vWoXYbALvfrqi7OsbaBAL2zGtJdcJhQu9IfXlnpozgrxwK9QVNJ7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a51c04e0d56a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1314,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/index.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:28:26.483Z","timestamp":1788161306483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/index.html HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:26 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Jul 2026 15:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5262a1-3662\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13922,"size_decoded":3555,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"0d37debb5c4f4b1b331ebce2d956d670","sha1":"42db84e839da97b236b24b0f68c61eeedbb23929","sha256":"644bb7afdcc3d08459f400c57c7a58f8be1559f1294de324b99dde50709dcd62","sha512":"960194c3e26c41046d4578d3e23d45f31bf44e2806aa46561a149ff9c1b018fa4198d0e61f99c9e4288a0b42059d382cc99fa36649bc1b4a7f783be698fc2c8c","ssdeep":"384:fdkTs68GKhVFDRZfzA1HWLGZaQZlampCbCI/hd22Z5yirMUEpnS0:GTs68lhVFDRZfGN","tlshash":"0e52522762fa2479439311491e872a4b3b209147ee59ed047e7cca901fcdeeed42b6c9","first_seen":"2026-08-29T09:33:47.182756Z","last_seen":"2026-08-31T07:29:00.259497Z","times_seen":7,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":5,"connect":127,"send":0,"wait":127,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/css/stylead8e.css","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.093Z","timestamp":1788161307093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/css/stylead8e.css HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-3049\"\r\nexpires: Mon, 31 Aug 2026 19:28:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":3175,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"be05f88498532d900c04f13e32ebbd28","sha1":"b63331df46e8afa10dc04de8d7e233d73039e1bd","sha256":"8e2820a7b16ada227558ecd619f88184e6fc772d8f2b960591e43fc24ae25ff5","sha512":"d342edb5b87b5769383bb2a911f6837095f4da06a90c457fafb647a69cdd7d90f66a61a063d6911a4bfdaea65f4071a709b0d50da876c8efff19c8b71e4be8df","ssdeep":"192:ml33nqMcgGkJHMHJypeXbm2fGA5RIOPsUa8UF1zwOx6t1U7mTQunHzLxnJdhZkto:0A7Et0D","tlshash":"91420f66dd025046f23797686ff24b69e7aa40139b0246b97fdc72858ff42ac0161fcd","first_seen":"2026-08-29T09:33:47.20485Z","last_seen":"2026-08-31T07:30:24.922889Z","times_seen":13,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/roleta.png","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.327Z","timestamp":1788161307327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/roleta.png HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-33313\"\r\nexpires: Wed, 30 Sep 2026 07:28:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209683,"size_decoded":207354,"mime_type":"image/png","magic":"PNG image data, 692 x 845, 8-bit/color RGBA, non-interlaced","md5":"c717f36b6718e3db7cc0477a6fc75009","sha1":"9d291292fe9828cc8f4f1358f851b31d5ed6499c","sha256":"b9c9c7d1a705f3cc32b8e59a2565a1d72d7a9d066f7a452b369c3200e00919f1","sha512":"6e10ce547b89a5bca3855eea8edb23904ebdbf11c2435fe5a6afee18732b8238fb449461287cd36c7ecec5925f6f9b430abc7d304de192811742da57fee29492","ssdeep":"6144:CqBfXwP3siYa068tzZxiPL2qqCy1mXbGHlTBxbO:fdO8iY7Z0yqq91gbGBB1O","tlshash":"8b2412c767d1c21bd4c129a698629d26e11b385dba66cd7cb830ffef0e1920c6641c6f","first_seen":"2026-03-17T06:47:12.009626Z","last_seen":"2026-08-31T07:30:24.922091Z","times_seen":15,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/sweat.png","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.331Z","timestamp":1788161307331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/sweat.png HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-6cc7\"\r\nexpires: Wed, 30 Sep 2026 07:28:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27847,"size_decoded":28390,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"c52d266d674379d13a55cd862f72786f","sha1":"75ef25bf82c416ad3757069c2d1205d2b91aa778","sha256":"dba43f094384db451c41ab3fb44d7235608f1db7f9609fef06a00f162a374f9c","sha512":"7ed46a98e1fc657f23de4b0339e812dbc0a5b7b9e8d38433ed27b76fb43301262656d3de34ebfa810e41fb01e1987c3b46abd9350ead02028591ba79b8720511","ssdeep":"768:tRus8sETDuAbiQ2wWrhWE91Fv9oHN7x5SUTIgJ:tR98sRAWQGWE91oRDbTFJ","tlshash":"16c2f1164b43adf48317c19c9e608b0f1c65338a36ca754be6d28eaed54ccaf0865f68","first_seen":"2026-03-17T06:47:12.015926Z","last_seen":"2026-08-31T07:30:24.934179Z","times_seen":15,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/css2-5.html","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.369Z","timestamp":1788161307369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/css2-5.html HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/css/stylead8e.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Jul 2026 15:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5262a1-7b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1972,"size_decoded":1417,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e91872f1dd86dec161e66b14c03c2cd2","sha1":"5add71a6bb485376061eaf6149d0fec3a88aa086","sha256":"f6dade2f216904a6c35e349ae9f1a03f7488803ddf25207f69bca1b013637411","sha512":"229bc917ecebd3ba92f6f5e02fc000dba0e812a8213f217a7ed9ab3498a99d29bbc8732df8e95ea893d66b3d998e502f71c2899be9388baaf18074e100f0239f","ssdeep":"","tlshash":"5f41943f55916337642700a6fab2f78c3a9891259043cb6226cde85a7e4cdf709bb2c0","first_seen":"2026-08-29T09:33:47.190116Z","last_seen":"2026-08-31T07:29:00.241016Z","times_seen":7,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel-google.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.768Z","timestamp":1788161307768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"GET /scripts/pixel/pixel-google.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 21:17:54 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"bf4c673c32c09960c65aa780d6289520\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0eb659b3177cc8c6d47a4ad42c31ad9e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: EM4A6_8kQCfP2sYadaosY9SKp1xfDZJakFY422q68FtV_Wg4EXilDQ==\r\nage: 524\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Miw2NBjNRDRZ7bpAg7U1GD%2FedEfwK3vMl8Rs%2FXEw1nxP6e%2ByivPaZssHPey7rRDrzhG0wLfcaf8Kj4UcB7y8l0HDCkMsxg7wvpWC%2FyB%2B7CUIt50YDiGGCH2HzUKl1Xk6grQm\"}]}\r\ncf-ray: a33a518d8e7956c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40502,"size_decoded":10201,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40495), with no line terminators","md5":"bf4c673c32c09960c65aa780d6289520","sha1":"caa54e28bcaebcfc3ce7e7b5ad7be077f6330ba7","sha256":"edb5504c63a92d3c2eda5e4b8ca6be450dd546db2c0beb2d3179420d11cab5d5","sha512":"5a0a939db523c4305f9c9feca4e96a68546a6d915d77ddf6119d444b7be72902a02dc01f290e5741c130fa439529a782560b61ed5301483fdd907c275212d3bc","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/TRjU2IcEVv9:Etnjfz6RYJio+/tU9vKtyZ0A432","tlshash":"9d039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","first_seen":"2026-06-14T08:04:00.23828Z","last_seen":"2026-08-31T07:30:24.942222Z","times_seen":44,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.879Z","timestamp":1788161307879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://especialde25anos.biz/\r\nOrigin: https://especialde25anos.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:28:28 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjF5RXCz5UMFkjyqmS6jwoS50lWsACvmB7vyiCnPuXE6ELc8C3RS1hEGPOzN24m1ziVZD6rt22uDPo7b1wTBN5Rn4hsC1MNo%2FSUoJafDRDK3k6tkoQxlOKeJHHBDHB4EdSH%2F2rNN6WU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a518e5fc056a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1316,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":231,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"104.26.11.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:35.885Z","timestamp":1788161315885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://especialde25anos.biz/\r\nOrigin: https://especialde25anos.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:28:36 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDyPsYij44HFN39r9DUMP8vpYaXysDmTDZiFRnMIFW%2BXucGxfJq83%2FbisLyPSAYFq34hyMxYLs1lXFoljz1Toy41NIpasCocwfVmhGKdy2IoxfLjcrtaNq%2FQMQayJryuEIjvICiQTOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a51c04e1c56a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1318,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/button-gire.png","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.328Z","timestamp":1788161307328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/button-gire.png HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-7a6b\"\r\nexpires: Wed, 30 Sep 2026 07:28:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31339,"size_decoded":31882,"mime_type":"image/png","magic":"PNG image data, 266 x 231, 8-bit/color RGBA, non-interlaced","md5":"380042c8df4837e367c16852d525f1f2","sha1":"180ccc7821577fa2e2426b3b34b7e264619d26f5","sha256":"73fa645263ef0ecf467d580c4e317ee8549119b49d8c86b338ef87be99b8a7a5","sha512":"57c74d2ef85175b2a5a83f53e46c424c67b16f3770c5a1f1445aca7e87cf6c38a781cd01eeb6c7d310c677c24b258993462ab5f7206d9341837a805f8ae4e5cb","ssdeep":"768:wNjF6T5O1GYpmQ7EZc1wv+duaWCAtFbtwqSWH/2HU:w3gOMY77Ic1wG4adAt9txSWaU","tlshash":"73e2e13d5f52f29c700a191ec79976f635bc1639fd7ab843ab2438d4382a14f2fa1818","first_seen":"2026-03-17T06:47:12.01334Z","last_seen":"2026-08-31T07:30:24.945722Z","times_seen":15,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"especialde25anos.biz/roleta/images/man6.jpg","fqdn":"especialde25anos.biz","domain":"especialde25anos.biz","tld":"biz"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://especialde25anos.biz/roleta/index.html","date":"2026-08-31T07:28:27.329Z","timestamp":1788161307329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"especialde25anos.biz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 17:51:08 GMT","end":"Wed, 25 Nov 2026 17:51:07 GMT"},"fingerprint":{"sha1":"79:4E:97:FA:82:B5:B4:3E:9B:0E:74:22:24:9A:8C:43:B7:28:C1:46","sha256":"08:DF:83:60:C8:66:C9:81:94:56:F0:84:48:4F:25:6A:A5:44:3E:02:2F:46:95:0E:8B:85:38:36:52:9C:B8:B4"}}},"request":{"raw":"GET /roleta/images/man6.jpg HTTP/1.1\r\nHost: especialde25anos.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://especialde25anos.biz/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:28:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-14d0\"\r\nexpires: Wed, 30 Sep 2026 07:28:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5328,"size_decoded":5758,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 201x201, components 3","md5":"d764b28a288a2f8ee2901d17ab7ed88a","sha1":"2804e7911cf40e850127a5f6a350529cdc6c416d","sha256":"2de4d68a3741c63389d790cc6b4181636736a0fddef11cae7425d5ca4e77a10a","sha512":"8f241a56266786452cb8d6d60d021b5f448c4e85264e539af066eb075699e5aff7e4f137131a59a6d02dc84b5ba95b18964378ee1ed7fa90be394f5c394f9c32","ssdeep":"96:NIJFziHpwS1ixqmy2Io+cvXU72Z/LkaNENCITh6KY5iIqExRi:NIJRiHpLrq7+ukPaNohDO8","tlshash":"e2b18d95f4ab092fef0da536df1213b186205b15a4748307d9d44bf8bfa9c884ee6290","first_seen":"2026-08-29T09:33:47.180352Z","last_seen":"2026-08-31T07:30:24.927256Z","times_seen":13,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"especialde25anos.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"especialde25anos.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}