{"report_id":"3bdc1f7f-048c-40f9-9d92-4fa493b47160","version":0,"status":"done","tags":[],"date":"2026-09-21T13:33:34Z","url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":0,"asn":19318,"as":"Interserver, Inc","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"title":"Caixa Consórcios","dom":{"size":216549,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4738)","md5":"3193eb0652ea11450fb083e1c697af57","sha1":"23915cefa9546bc73b6fcaa00dc38c9213a34d3f","sha256":"a1d332f4c775b01a8c1f8c854e8a4867bbaabcf01a27d4fda0f0a360445d5166","sha512":"1d73404b6db1f76bb1e56c0ca0d3827eceb6f892b6913da76f6089a420a007f1f3750a7c685cfca05714c6a865cb62f52b531612e2fb83f5bacb19de5c011e52","ssdeep":"1536:NzPsvoUMaz3VKfpmVCg9VGIkCgxYqHjNl/UDtl/lfDtlc6O2A37wRXcPq0/IBEwo:hsvoUMhgiIW","tlshash":"2124a4bea5b4582bf199c385dfb458593d88d0dbee82c190f39c47b86f604c7483b968","dom_hash":"domhashd01d2b6e4e3fdd627a45959959a22ad5","first_seen":"2026-09-21T13:33:51.561215Z","last_seen":"2026-09-21T13:33:51.561215Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":0,"asn":19318,"as":"Interserver, Inc","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T13:33:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-20T23:01:40.450976Z","alert_count":0,"request_count":2,"received_data":19611,"sent_data":1312,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cotacao.simulacaoaqui.com.br","ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-18T07:13:53.227895Z","last_seen":"2026-08-12T09:28:04.218544Z","alert_count":32,"request_count":32,"received_data":1988964,"sent_data":16539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":4,"received_data":179661,"sent_data":2374,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-20T23:34:05.890074Z","alert_count":0,"request_count":4,"received_data":1781127,"sent_data":2198,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":1,"received_data":485911,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":8301,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/simple.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4b84a01d95bb832ffe42e62cc2d000","sha1":"5ee6daff78016e3cb82f3ab368911057742adc57","sha256":"90c3a25f7712905b666dfb345cc790f878cfd7c5755b588b571a80404d2333e2","sha512":"8e502a60b383f7cd04026316421564ee195654210b4cce26d74f31049dfb81104b7e45503085b8f348c515c9d1860226de334b2777133305e4b7c09669a27cfb","ssdeep":"","tlshash":"6ff0d80f8864506241ab923e4f6ee34aa75775031bad3d217bcc39088f5c16e1bf82f8","size":495,"data":"","first_seen":"2025-07-13T00:10:58.50679Z","last_seen":"2026-09-21T13:33:51.620035Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56b911d645b972b5dbd2b43a20ec9978","sha1":"31d8314cadf92c9fe839b872f6121ff3331cf67b","sha256":"2e8aa029ae9512eeaa119e0b8ece63639a1401245ffbef7386edd86c84333990","sha512":"55356498d94f8966f0fe6341e38677a8edcb5ec35414cb6357b75b49a6ab50701b25d90036cb71acb98408abde374848ba2182c0440b0bf59faa4e1ed58e3b76","ssdeep":"","tlshash":"941125770614e0354b3209d5e1fecbb5e892701cf15885e8a825dec51e79dc7ce056c5","size":1010,"data":"","first_seen":"2026-09-21T13:33:51.621745Z","last_seen":"2026-09-21T13:33:51.621745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7194d329b790cfa16f1a2823dcc2cbcb","sha1":"b4db6a496f7c849c8b0a6de53d5d736d701bcc64","sha256":"66fa91d02f400fd7080b2a950d2fc6b47abd775b383b923f3e0422d8d003efc8","sha512":"6a460d5f0847976136aed6ee0458218af06e719ff7767790ed2e387e285ec2d7e663de2df415f233dd80c9d971a8b8a30befea5b7d149cb30f6f12728c81cce4","ssdeep":"","tlshash":"e7c09b8c211a5c7155fb2744cb7fba09b481322494e5ba31495d63445e20e17d755954","size":149,"data":"","first_seen":"2026-07-01T01:00:37.710517Z","last_seen":"2026-09-21T13:33:51.623013Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a830d9b4ce42754355f7c208b2e89603","sha1":"8ac7806ad3e7ad944f18b4c78632fbd0c4a4c999","sha256":"f5065d2ffc295ae4c2d816d042f4e33260b984eb730c22dca0987060c6de31ec","sha512":"7ddceda0fc24ff7db1b4a78c3c924d769caf111230f4ae22094f0b8b9148b10a0cd8adf8c7e0660c5bbd14c3859a5904cdf3135e377fbf51e95fa94fdbae3d5f","ssdeep":"","tlshash":"7ef0dcac2c52a05633fe2634c227aa6a2767070064c2d8688641c8247c94a820c929ce","size":460,"data":"","first_seen":"2026-07-01T01:00:37.712474Z","last_seen":"2026-09-21T13:33:51.624387Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6026887b9abe729ab8296a23d22cb800","sha1":"d6886573a86c01a45de4612079a106ef9bf4a657","sha256":"8481342805414ee0a48ed5bc3062204c80a57779706ba3c38dddc6630e678e2a","sha512":"8080dcbde0e623dae89fe1fe4c2a6ada34fc8d398cfc6915a6683aa0a147491a0d628ea3c04854376eb2ea7ca0d7e5c84b149e8289bb54caff9d3789488597fb","ssdeep":"","tlshash":"cb31ac4b7ee32149563371792f9fa14da53994160599ca80b17da8802fa0e2c63bedfc","size":1625,"data":"","first_seen":"2026-07-01T01:00:37.714479Z","last_seen":"2026-09-21T13:33:51.625816Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b5d97e0d4ed7406f1593a9adb271ae7","sha1":"781cb10a458be33bfcba58408c5eb02b63aaa280","sha256":"6ea0a5a13d30d890426a4a2eaf46cd84dc6c0b4257cde011a65b5bd069d55001","sha512":"c257906c09a1bb82381d2096d05abe16a6bf26d9623f3dc9ff52b97301ef00a2102413739eef635fef29a2f0d694a8885918b194d11fd91019df232334e7e554","ssdeep":"","tlshash":"f2019c3928f630b195232e3a43cb97a3156a3417b055cf853e4e9f400f5c598c642b69","size":813,"data":"","first_seen":"2026-07-01T01:00:37.716242Z","last_seen":"2026-09-21T13:33:51.627164Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","size":846252,"data":"","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-22T00:10:09.357411Z","times_seen":3490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/custom.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c52fe367580c1de264e2cdc7dbdaa8ab","sha1":"7e18d988c25fd90e63abeace3ec3bc110cffb0d3","sha256":"d68197513457dea44c1a8ab6a9a62703e7b7e1bce74999e554b54c8df0594c92","sha512":"a377b666f7f67d49ee4412d00c231130058d8a5f9ee2be53a68f22d091f157d68e3c28b4b93d45491480e0093f6bf409f58d3c159767d125aecac37c2efa112d","ssdeep":"48:jpu2WwGgeZToIgoInHDEPEkj/RgEL/gE78DgE77EwlORWDWHW/MXJsdV9IwjMdVB:ISIx6gIWxW7rw4i2/MXJU0o3oMuNFLzb","tlshash":"c2e18a84f6e717a8337326512ffbd160ac12698ba688cd5c709d2dc14fcdfa0e41666b","size":7186,"data":"","first_seen":"2025-07-13T00:10:58.502466Z","last_seen":"2026-09-21T13:33:51.602738Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/jquery-1.11.0.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-09-21T23:06:44.924695Z","times_seen":32608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/jquery-migrate-1.2.1.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-09-21T23:39:16.803697Z","times_seen":25860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/know.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"720dc93902f33d5e831fec7d43e860e0","sha1":"592f530c0fa4f274eb20acab398761ecd4f7788e","sha256":"3594f333200d8b07ca5949ebcb6cb9262bc9cdab404adc7e808c9086a3c4a4bb","sha512":"8e0a56cc74f0e2a4d33a7a89adfeadb34653079ba2518db127a0d3d1b5ac5cdb84496f2171584748ad1dec5cc8b09d45a4d76d07e3fdd5318a14921ffa09c2f4","ssdeep":"","tlshash":"6011cc2397784834476348ba7ea94bcc3b111087f14c59ac3ceda9452b489a49ce22c9","size":1069,"data":"","first_seen":"2025-07-13T00:10:58.511508Z","last_seen":"2026-09-21T13:33:51.598699Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3DWRJELTEN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c95c3056b4a00c63b65e8dbcaf4271","sha1":"6985d180c2d4fc8f020a6f4552708396bbb04ec0","sha256":"f7c35fbb84ec04d566226b2ddb075bee85f11d1e5ba4fb9d454ae786efd62b97","sha512":"266284e368cf51de4d10deec7473e40a5f18051eb16a3550634733f7a1487d2bf0de892f58524a9785c6f8bd92bbe9dc2fa27a76c118f7df919520270f5b3f33","ssdeep":"6144:zI1rBQ6PN1gbcn76+4bcc6MbBEAF33GBfmrcFod45znwUf:A2mAbqxfxFoK5/","tlshash":"aea42acd73d674228392f678903f018bb67b69a2b44cc899f289d8d42d3465a5137f7c","size":485307,"data":"","first_seen":"2026-09-21T13:33:51.590252Z","last_seen":"2026-09-21T13:33:51.590252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/jquery.reveal.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0dd153251d07028beadb005a422284f","sha1":"b0ff23d3a2a6ae00caa627dcc3e512de3e3894ba","sha256":"b904b715a6408d803b9be6e27c9e19067060fed198a8d75383f622b245964d03","sha512":"85a0814309803e89c9b5642e05beaf827a3323db0be796c24e6578ec84cba5275a47753b58a10eb7c76e1d3f7ed6c73d3debfecca65a2393f83775a5a823e8db","ssdeep":"48:+cqL3u88oGoMiGGGLTlj824By9FLGi8uoZ0QOiIYj+qZfDNMr1xq5I4TvAY/xKQj:UL3JoLxS0i05o3r75AM8MQ3q3","tlshash":"ada1cb88bf6d120a43bff67ba81e444dca3de4b35d025439bb6c92dc0b68528478f924","size":4856,"data":"","first_seen":"2025-07-13T00:10:58.505675Z","last_seen":"2026-09-21T13:33:51.567456Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/ajax/libs/jquery.mask/1.14.10/jquery.mask.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"053305c2b293c27c02523cda42962c09","sha1":"556b0af7346b9e21a8eea1be8b195b563169ecd5","sha256":"be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44","sha512":"0fd324efdf7391ea6508816630c79a71b76a7ca3196d28554d8255e9c5bf29bd426c380716882b053e65f78890479e1b1b458ac5e7ad53041de31f0822e45980","ssdeep":"384:nPmG4foMrslSSQCyUAjKQze/he/UqlGA2A1:nOdobAjK78l1","tlshash":"1d922e0939f322625a6372ad0bef5009a3b58653149eee04bd4d63815f50a3893f7fe9","size":20120,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-09-21T13:33:51.591421Z","times_seen":2931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/slick/slick.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-09-21T23:52:11.564671Z","times_seen":115129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/partners.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6487a74f8178dc7c45a230724be3b434","sha1":"01141b2371131ccf302c8a7ec6834a31c9f976cd","sha256":"16a4cff1eceeeacfcc0b26a772cb4e14ede7f840e91d4000f1e59ef154cd64b8","sha512":"40284b69d4ddaaa332532249fc2a6ab21ef55d573da0312d5a29a9deef8f6dd09aec1b7c81d8cb05697e689e9c23270b737a4567e764cea4ed2fcedea9256709","ssdeep":"","tlshash":"c7f0650bc86104924197913e5c0e93456767b5070abd7c613adc28088f5c15f1bf92f8","size":535,"data":"","first_seen":"2025-07-13T00:10:58.521465Z","last_seen":"2026-09-21T13:33:51.615063Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/whatsapp.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cba478045bba73bfc06e0ae7c049b1f","sha1":"5a3175bb55801675d5f52f6d31896906b75bcdae","sha256":"6e72f03a6d20b86a7d35c3a5c5e7db40ff34bf181efdef90db273de199d1b43c","sha512":"69ec1da7af8a1cd131bc07b5adfc085abb8c9d0c2c376058ee6a49da5494925fc52adc779e1c9c397c5a51e53c4e69dc694812fa7bb236ac5f7376135d8e0ffa","ssdeep":"","tlshash":"fde0dfba6272a436115ba7ef678b58089d20808b6c007c617e0d6cc80fd9d1619f95b3","size":396,"data":"","first_seen":"2025-07-13T00:10:58.507785Z","last_seen":"2026-09-21T13:33:51.599924Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d8463112156f537e64bc0cc795dc133","sha1":"3b21c915761369b640a86538e29ba402098ba12a","sha256":"b270cb1a41b1cf6fda1dd535019b54da06652f28e7ea11037dcc4393c60647d7","sha512":"f9906d38d98f0ed74ab190030b94625a420425ffdd4cb75114c533d13eff6873af4def45fc015dd2be63d6c62793164fe93616183f43e3dd8ab0d65308c53ee9","ssdeep":"","tlshash":"c3d0a7eb1441cdf7cda09dab9743d1a678efd0b780a981f405e04c522ce1c9110245ac","size":252,"data":"","first_seen":"2026-05-25T21:58:32.98547Z","last_seen":"2026-09-21T18:58:43.263239Z","times_seen":2990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/jquery-3.6.0.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-21T23:43:28.054001Z","times_seen":505137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/form.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a77311f1dbd40f7bda8c58230932d22","sha1":"4a624e9b320c7815669fb272a3bf8aac3c3c39e5","sha256":"399dbff97ab5161165ca169a497dc256b3e57518caa2fd5124fa877d4022b0fb","sha512":"6a3915f03ab59876503b59631ae686f5eb6a6fec09c165a0916a296b88bddc33cca610be435ad6ec3858adbd663280dbb7595419b4e419919c726d312547279e","ssdeep":"192:rbMAsQ5/yaSTLWEU8TPZb6KLUvX5WW3cyDBzEeAxP/bIgIaIp6IgIaItIbImaIgJ:fMAJCP9nEXDzEJBx5fx5Seq3ex+HXV","tlshash":"f07283447a61b970e67b20faa79fd0297af50407a58cd820784d59cc4fdcdd4a0be2fa","size":16665,"data":"","first_seen":"2025-07-14T21:06:28.976187Z","last_seen":"2026-09-21T13:33:51.591992Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/faq.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"243cb00dfb2e2738287c3c4946047242","sha1":"767d2d498e0b1a9cf7070fa5689dde1328d84edc","sha256":"8476f8e765c903ac09994e9bf14948415e46a0e0d6b5ccd52c08a28e13726ee9","sha512":"62c5a9a8175755a0556b78c71107f5bbc2d5760bedc9cd29c7e8cfd6651ea98be0ca7e1d4409f6c8e26656f377a6d637584a0c4ca2a2ca74993fc6022064700a","ssdeep":"","tlshash":"eaf0926656bc263543139dbb9b9eafcd37202087a08c399e3c9dd9493f856b00de71c2","size":439,"data":"","first_seen":"2025-07-13T00:10:58.491414Z","last_seen":"2026-09-21T13:33:51.604106Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/logo2.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.751Z","timestamp":1789997579751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/logo2.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-712a\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28970,"size_decoded":27409,"mime_type":"image/png","magic":"PNG image data, 362 x 92, 8-bit/color RGBA, non-interlaced","md5":"690fff139991377fcc4bb1e4c62cf60b","sha1":"99826418920a7c748b458aaf41776ab0456397c6","sha256":"566589fac02f0a4f105406913bcd47146875bcfb14da524bc8ffd27269896f92","sha512":"185e42976881dcca1d6ecc3f538f32e6a8d6339f75dcef0ae94c429d35e83a3cfd9a5ef10b1480b48044e1793d11fc0ff223f1b4a7efd3c5d6fba6069d4a7669","ssdeep":"384:EXnLmFveIX+TZIVPQgOrPoG6AhP3eCHqcjMfD0utbS7c36HFbhVtvah3EyUsy5h5:aVY2rAJgf/DjM95Sx4QXjlFa/WtGHw7b","tlshash":"77d2e1ccca814d300d9dedb3a2dae56b67be28881b52d1e677dbc80a4bd01e9cd55307","first_seen":"2026-02-18T03:00:08.48017Z","last_seen":"2026-09-21T13:33:51.564549Z","times_seen":23,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.000Z","timestamp":1789997580000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cotacao.simulacaoaqui.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 14:29:17 GMT\r\nexpires: Mon, 20 Sep 2027 14:29:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 83023\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":46240,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-09-21T23:32:17.449613Z","times_seen":11324,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/jquery.reveal.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.723Z","timestamp":1789997579723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/jquery.reveal.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-12f8\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4856,"size_decoded":1963,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d0dd153251d07028beadb005a422284f","sha1":"b0ff23d3a2a6ae00caa627dcc3e512de3e3894ba","sha256":"b904b715a6408d803b9be6e27c9e19067060fed198a8d75383f622b245964d03","sha512":"85a0814309803e89c9b5642e05beaf827a3323db0be796c24e6578ec84cba5275a47753b58a10eb7c76e1d3f7ed6c73d3debfecca65a2393f83775a5a823e8db","ssdeep":"48:+cqL3u88oGoMiGGGLTlj824By9FLGi8uoZ0QOiIYj+qZfDNMr1xq5I4TvAY/xKQj:UL3JoLxS0i05o3r75AM8MQ3q3","tlshash":"ada1cb88bf6d120a43bff67ba81e444dca3de4b35d025439bb6c92dc0b68528478f924","first_seen":"2025-07-13T00:10:58.505675Z","last_seen":"2026-09-21T13:33:51.567456Z","times_seen":41,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/cp_mobile_clique_aqui.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.748Z","timestamp":1789997579748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/cp_mobile_clique_aqui.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-10a8\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4264,"size_decoded":3572,"mime_type":"image/png","magic":"PNG image data, 94 x 34, 8-bit/color RGBA, non-interlaced","md5":"d71db71df40614e4f5ab093c5ab702fe","sha1":"506e0564912d1a26b7a450cadebec4b5f5af2ff6","sha256":"37edcee266642a7dfaaca6625a5965f590089a12a84c2b3c62695a1bbdc74e8f","sha512":"64e935176071d4eb7dd46749cf1e409f451e89ba719df58e158ca28ed1332aa198dfd98e3b9d04032a63123457a1e2d78290332ac87f6eda355fc7c927c76147","ssdeep":"96:nSQxWlknG2rHuxSaHCnHOg/HO1iy52N0stLccN/JynllumGodiV:nSQaknUin1g2dYcN/JyWmGr","tlshash":"61910a49f902ad21572daa0664da91a72b3b4bc4db51f090bc9edd5b1cb02fdcc0f4c6","first_seen":"2025-07-14T21:06:28.955882Z","last_seen":"2026-09-21T13:33:51.569897Z","times_seen":32,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/slick/slick.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.733Z","timestamp":1789997579733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/slick/slick.min.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-a76f\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42863,"size_decoded":11090,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-09-21T23:52:11.564671Z","times_seen":115129,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/jquery-3.6.0.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.722Z","timestamp":1789997579722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/jquery-3.6.0.min.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-15d9d\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31669,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-21T23:43:28.054001Z","times_seen":505137,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/jquery-migrate-1.2.1.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.731Z","timestamp":1789997579731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-1c1f\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7199,"size_decoded":3590,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-09-21T23:39:16.803697Z","times_seen":25860,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/faq.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.758Z","timestamp":1789997579758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/faq.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-785c\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30812,"size_decoded":29496,"mime_type":"image/png","magic":"PNG image data, 444 x 570, 8-bit/color RGBA, non-interlaced","md5":"76203821869bd5cea58f4b2fe39b9126","sha1":"1e084d74241512fd8087c52aed7162f7c5b27851","sha256":"89915bb52a319bd13e05a399dcf12819b09895fbc90780d8f4b3508208b60bfa","sha512":"eb74db8b3e99af0da597a8324406f7891c10f81248719685d48615af399c0e51987d51f6b4a0ca870e8f7d6883875f27be3423e433570c9d0245422edb9bf0d3","ssdeep":"768:cJpMZmw7GodT8wgmhg1hrxEocBb6obHrKgMzCcbvjnhVGYvrO:mCfaaTngIg1klbrbef/nhVGYvrO","tlshash":"e9d2e010d07418939ebcc0b816fa90f7adef3be0f50b461166da486a2c9845dbb0d7ed","first_seen":"2025-07-14T21:06:28.973702Z","last_seen":"2026-09-21T13:33:51.580706Z","times_seen":32,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0","date":"2026-09-21T13:33:01.157Z","timestamp":1789997581157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 18 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 271233\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-21T23:46:07.413119Z","times_seen":996130,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/jquery-1.11.0.min.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.729Z","timestamp":1789997579729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/jquery-1.11.0.min.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-1787d\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96381,"size_decoded":34161,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-09-21T23:06:44.924695Z","times_seen":32608,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/whatsapp-logo.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.749Z","timestamp":1789997579749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/whatsapp-logo.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-d6a\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3434,"size_decoded":3976,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"28950b7fcd4159c0cdbf8cb04594404b","sha1":"590db59fd8b003110b85ac2e729101384d7376b2","sha256":"997855343c2b9e91cb98349d7fbe950436cfbd4a8752963423a45d65d7adb14c","sha512":"0922b0a8af2186d449574b901216dee2ecb64edab4c4651b7e121eb28b21d3f0c68b1b508b41357e8e1c1cf2f86ba5bb4c97d6a77abf82a1a563696b694a119a","ssdeep":"","tlshash":"48613ad1d9f0c338c4c51567568fa3537863440a4b9b6b0e4618dbcdca288aeb594b67","first_seen":"2025-07-14T21:06:28.95155Z","last_seen":"2026-09-21T13:33:51.584088Z","times_seen":32,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/logo.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.750Z","timestamp":1789997579750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/logo.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-53a7\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21415,"size_decoded":19712,"mime_type":"image/png","magic":"PNG image data, 362 x 92, 8-bit/color RGBA, non-interlaced","md5":"3a4fa89700711808b4e7ddeb2346c436","sha1":"c5d6da9f78a6c883e3f9dc528e16af1cc08caf0a","sha256":"4f639cc9d1c82ad239de67402f9f310653d13b7a77e530ae37cc209592c2b95b","sha512":"a78740b6fc53c8dfa9a4164daacf2f05e02a08669d5b1ca07b58cea79a9e005b3c5f01453589685977d41453d579a172439965c3f8b292164af58122d0c4e3b8","ssdeep":"384:EWn0R+mFveIX+G0ijJ5e5uSI2tYqmIZKOquAx2eZNidciDnghtPx4bcLTSLMXVuj:H0R4EPJ5e4qYSLquAMMniKPx4bcPSL6Y","tlshash":"48a2c000e451ad3145c8da837dd895a15f3b5bd8ee21d580acfec806399163bcb8a9eb","first_seen":"2026-02-18T03:00:08.473168Z","last_seen":"2026-09-21T13:33:51.585396Z","times_seen":23,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/modal-gloss.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.980Z","timestamp":1789997579980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/modal-gloss.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:33:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-b60\"\r\nexpires: Wed, 21 Oct 2026 13:33:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2912,"size_decoded":2556,"mime_type":"image/png","magic":"PNG image data, 800 x 300, 8-bit/color RGBA, non-interlaced","md5":"14ac18a2f0348c88734800f89bba0fdc","sha1":"b13d3c9a3fa766b2e5bdcf83d314186dd7aeebfc","sha256":"7d2aab4db2f4758ad052077dde124507d2f84e8c7a0d882853b271b8ea189671","sha512":"5f8c9563ff1849b64d6bdccd15786043f20873eb70083e48645b299eaa52428409fe1dc69403d5410c36e0394e954bd67c7619336b01949fc33fe97907df4fed","ssdeep":"","tlshash":"7c516153f7d059ebd02c137153a353adbed211f517a40d540c228ce8e571b29bfb9a88","first_seen":"2023-05-15T02:50:52Z","last_seen":"2026-09-21T13:33:51.587062Z","times_seen":336,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.002Z","timestamp":1789997580002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cotacao.simulacaoaqui.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 14:29:17 GMT\r\nexpires: Mon, 20 Sep 2027 14:29:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 83023\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":46240,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-09-21T23:32:17.449613Z","times_seen":11324,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":22,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0","date":"2026-09-21T13:33:00.851Z","timestamp":1789997580851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42355\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 11:02:41 GMT\r\nexpires: Sat, 18 Sep 2027 11:02:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 268219\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43202,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7a6d902a0adcd7c9223bc3457d32a41","sha1":"a8edb18d3034cd30504e947ca68ebef437c7b706","sha256":"8266c6122d4a35954f3142697506efb503322c0470d3863c9e759e2e2295e5cc","sha512":"a49bba8e98fd71591b08e158dfa5e500f0bc0b5de853ed672f9769c3be6a813dfbee5c88c5bfe8484943f4b624aa09ed07f2a41e4b4d03b9541455ce662ed4fd","ssdeep":"1536:n7Rpgh9C9ToL9gTNfWNfK4RxXnHZzhXwWx7W1bx7:n7ArC9ULiTYNC4Rv9Xi","tlshash":"85838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-14T19:29:34.239267Z","last_seen":"2026-09-22T00:10:43.644867Z","times_seen":3143,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/partner-0.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.753Z","timestamp":1789997579753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/partner-0.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-10111\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65809,"size_decoded":65592,"mime_type":"image/png","magic":"PNG image data, 219 x 193, 8-bit/color RGB, non-interlaced","md5":"b60dd1dfd76340ce34e6711351fb9d53","sha1":"b53c21b31fa79848d93fb7088dc979d0a7323c91","sha256":"f058399d742b233f0952e26ff3b7397b2c5e5c5aaa4b4efa36a246c828323aa7","sha512":"6612c3d301c8af6fcbbbb3ce67ea7c2c13c746803cab29b25b3f19bbbc6383688dbec5b3d3766be6bd0b6468b15ac442e1f48305d9564bd60d4536cca27f68a4","ssdeep":"1536:aoetEAMOD5uUDhRhj0EH+d+DQgoKuwU4YF5m3DZUWaVsr32L:SEWD5uUDnh0OoKuwU3FiFUWusT2L","tlshash":"155302acaa478c5e5cccfa44d83d01ce66525f0c1a16e63bd5fb84834f5a9b80fd818e","first_seen":"2025-07-14T21:06:28.977616Z","last_seen":"2026-09-21T13:33:51.588244Z","times_seen":32,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/slick/slick.css","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.519Z","timestamp":1789997579519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/slick/slick.css HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-6f0\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1776,"size_decoded":1078,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-09-21T23:52:11.609215Z","times_seen":76780,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3DWRJELTEN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.719Z","timestamp":1789997579719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-3DWRJELTEN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\nexpires: Mon, 21 Sep 2026 13:32:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 164984\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485307,"size_decoded":165588,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4997)","md5":"55c95c3056b4a00c63b65e8dbcaf4271","sha1":"6985d180c2d4fc8f020a6f4552708396bbb04ec0","sha256":"f7c35fbb84ec04d566226b2ddb075bee85f11d1e5ba4fb9d454ae786efd62b97","sha512":"266284e368cf51de4d10deec7473e40a5f18051eb16a3550634733f7a1487d2bf0de892f58524a9785c6f8bd92bbe9dc2fa27a76c118f7df919520270f5b3f33","ssdeep":"6144:zI1rBQ6PN1gbcn76+4bcc6MbBEAF33GBfmrcFod45znwUf:A2mAbqxfxFoK5/","tlshash":"aea42acd73d674228392f678903f018bb67b69a2b44cc899f289d8d42d3465a5137f7c","first_seen":"2026-09-21T13:33:51.590252Z","last_seen":"2026-09-21T13:33:51.590252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":79,"connect":17,"send":0,"wait":66,"receive":44,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/ajax/libs/jquery.mask/1.14.10/jquery.mask.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.732Z","timestamp":1789997579732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-4e98\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20120,"size_decoded":5954,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"053305c2b293c27c02523cda42962c09","sha1":"556b0af7346b9e21a8eea1be8b195b563169ecd5","sha256":"be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44","sha512":"0fd324efdf7391ea6508816630c79a71b76a7ca3196d28554d8255e9c5bf29bd426c380716882b053e65f78890479e1b1b458ac5e7ad53041de31f0822e45980","ssdeep":"384:nPmG4foMrslSSQCyUAjKQze/he/UqlGA2A1:nOdobAjK78l1","tlshash":"1d922e0939f322625a6372ad0bef5009a3b58653149eee04bd4d63815f50a3893f7fe9","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-09-21T13:33:51.591421Z","times_seen":2931,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/form.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.734Z","timestamp":1789997579734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/form.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-4119\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16665,"size_decoded":4657,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1146)","md5":"9a77311f1dbd40f7bda8c58230932d22","sha1":"4a624e9b320c7815669fb272a3bf8aac3c3c39e5","sha256":"399dbff97ab5161165ca169a497dc256b3e57518caa2fd5124fa877d4022b0fb","sha512":"6a3915f03ab59876503b59631ae686f5eb6a6fec09c165a0916a296b88bddc33cca610be435ad6ec3858adbd663280dbb7595419b4e419919c726d312547279e","ssdeep":"192:rbMAsQ5/yaSTLWEU8TPZb6KLUvX5WW3cyDBzEeAxP/bIgIaIp6IgIaItIbImaIgJ:fMAJCP9nEXDzEJBx5fx5Seq3ex+HXV","tlshash":"f07283447a61b970e67b20faa79fd0297af50407a58cd820784d59cc4fdcdd4a0be2fa","first_seen":"2025-07-14T21:06:28.976187Z","last_seen":"2026-09-21T13:33:51.591992Z","times_seen":32,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.005Z","timestamp":1789997580005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cotacao.simulacaoaqui.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 14:29:17 GMT\r\nexpires: Mon, 20 Sep 2027 14:29:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 83023\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":46240,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-09-21T23:32:17.449613Z","times_seen":11324,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":30,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/icons/favicon.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.469Z","timestamp":1789997580469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/icons/favicon.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nCookie: _ga_3DWRJELTEN=GS2.1.s1789997580$o1$g0$t1789997580$j60$l0$h0; _ga=GA1.1.2093502849.1789997580\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:33:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-388c\"\r\nexpires: Wed, 21 Oct 2026 13:33:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14476,"size_decoded":13986,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced","md5":"3573e1a69b0c1a635fe3edc75f5f42a6","sha1":"bd83362e92bd6cd4f0b2f8bf2cfa6d87f59ae4d6","sha256":"ebab4c3ccedac551d8c13981d327e1fcc7211a5a029a81224d672fdc0a037808","sha512":"098f494dd5c5b0a0399ca7e1fdc3a0762ee15ac18efea687700694cd0e90cbaf5e823b9fc8d628de093ff965bea7202f9692d4b3d9c01e7a968148b5ae854137","ssdeep":"384:5ZcnmMo9i+o4rY/9SEX8d9iW2PM+xl1FIvaF+MmpDj/Dh:DcbMc1SzpUM+xzFIRF/Dh","tlshash":"13529d04e842ae19564ffb8229fc8297c55786d4de20a05a36ce5b0bfd614f8ca954cf","first_seen":"2025-07-14T21:06:28.974514Z","last_seen":"2026-09-21T13:33:51.594207Z","times_seen":31,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0","date":"2026-09-21T13:33:00.852Z","timestamp":1789997580852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 268946\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354514,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-22T00:10:09.357411Z","times_seen":3490,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T13:32:58.455Z","timestamp":1789997578455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/ HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 08 Jul 2026 01:20:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4da5e1-32bf8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207864,"size_decoded":29363,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4732), with CRLF line terminators","md5":"996a5d529113cd530694fd67852fa707","sha1":"9bcef3cfc54c380b9cfc1b3b2e5d41b7a9d413fe","sha256":"9da865acb313ac08c62307b9ffd9756754815a7244360129d3f9674ef2f4ca00","sha512":"dfd41eb8065de60b60d7c10711b0d3a69395cc2958ee1bcac6dace76241ae52d387d2c2c9a1cebdf0dc16814e6b526b05bd279edd92b2748a198c184feb023f3","ssdeep":"1536:UYCq88zcj4p7V4g9VKIkCgXN5IEQ28Pkw28y8kw2uN/K0D3s9x+FE2h6nMSgocwm:1hucl/","tlshash":"3714b67ea584585bf2bac384dfa45859fd48d0c3ea838180f39c67bb6f714c6483b964","first_seen":"2026-07-18T07:13:58.69374Z","last_seen":"2026-09-21T13:33:51.596052Z","times_seen":7,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":181,"connect":105,"send":0,"wait":109,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/reveal.css","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.720Z","timestamp":1789997579720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/reveal.css HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-688\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1672,"size_decoded":1253,"mime_type":"text/css","magic":"ASCII text","md5":"e597a6bf3a62c2f375cf89e96a0d28b7","sha1":"f75c7afe6b1df406ed3adf37768ec6f071d3cc22","sha256":"05c32e9aa0f45721291e97fa7b145539e24b3b69f056892849027a05e746c876","sha512":"168f575e30926dc6879ccd08cac1bbc279b778130c48500dac8194ee46b9d7b6344acfb751ed7d7a97f4c4a151a3bc2a651d591055a38ee88652d63140c9872d","ssdeep":"","tlshash":"9b311034af7d039ab41fd4f63b306957c72a9453b3168c1616f460a0df8a91a40be37c","first_seen":"2025-07-13T00:10:58.52051Z","last_seen":"2026-09-21T13:33:51.597369Z","times_seen":41,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/know.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.737Z","timestamp":1789997579737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/know.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-42d\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":1069,"size_decoded":1014,"mime_type":"application/javascript","magic":"ASCII text","md5":"720dc93902f33d5e831fec7d43e860e0","sha1":"592f530c0fa4f274eb20acab398761ecd4f7788e","sha256":"3594f333200d8b07ca5949ebcb6cb9262bc9cdab404adc7e808c9086a3c4a4bb","sha512":"8e0a56cc74f0e2a4d33a7a89adfeadb34653079ba2518db127a0d3d1b5ac5cdb84496f2171584748ad1dec5cc8b09d45a4d76d07e3fdd5318a14921ffa09c2f4","ssdeep":"","tlshash":"6011cc2397784834476348ba7ea94bcc3b111087f14c59ac3ceda9452b489a49ce22c9","first_seen":"2025-07-13T00:10:58.511508Z","last_seen":"2026-09-21T13:33:51.598699Z","times_seen":41,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/whatsapp.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.738Z","timestamp":1789997579738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/whatsapp.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 396\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\netag: \"6a4c7bac-18c\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":396,"size_decoded":915,"mime_type":"application/javascript","magic":"ASCII text","md5":"8cba478045bba73bfc06e0ae7c049b1f","sha1":"5a3175bb55801675d5f52f6d31896906b75bcdae","sha256":"6e72f03a6d20b86a7d35c3a5c5e7db40ff34bf181efdef90db273de199d1b43c","sha512":"69ec1da7af8a1cd131bc07b5adfc085abb8c9d0c2c376058ee6a49da5494925fc52adc779e1c9c397c5a51e53c4e69dc694812fa7bb236ac5f7376135d8e0ffa","ssdeep":"","tlshash":"fde0dfba6272a436115ba7ef678b58089d20808b6c007c617e0d6cc80fd9d1619f95b3","first_seen":"2025-07-13T00:10:58.507785Z","last_seen":"2026-09-21T13:33:51.599924Z","times_seen":41,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.717Z","timestamp":1789997579717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 13:32:59 GMT\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7617,"size_decoded":1421,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"862868e3c86d0c7bdd83f2c922f7a7b6","sha1":"e0f237ac01b359d0765ddac4f79d94a778796be6","sha256":"46483f4753449171f173884f490195427061d6c7983623a17633eeb03baac8d2","sha512":"1b02f3542874cb3e4a1748259412682f577993a6dd95643872c589df9bd167f36420144357b881b42f36c035e57a765829a3206f915431c3fefddcb10292ccb0","ssdeep":"96:aOEbaHqOEbakFZhOEbal3/OEbaTOEbaPJc+ubOEba5NLOXbaHqOXbakFZhOXbalO:JHZdl3gkLTHHi2l3fTLk9HkIl3VZLiQ","tlshash":"3df1dc64806a6480aa031dc233cf3e329d5e64506485d6bd5ffd2db49cafe366371b0c","first_seen":"2025-09-24T13:45:14.445532Z","last_seen":"2026-09-21T13:33:51.601389Z","times_seen":118,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":80,"connect":16,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/custom.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.724Z","timestamp":1789997579724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/custom.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-1c12\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7186,"size_decoded":1585,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c52fe367580c1de264e2cdc7dbdaa8ab","sha1":"7e18d988c25fd90e63abeace3ec3bc110cffb0d3","sha256":"d68197513457dea44c1a8ab6a9a62703e7b7e1bce74999e554b54c8df0594c92","sha512":"a377b666f7f67d49ee4412d00c231130058d8a5f9ee2be53a68f22d091f157d68e3c28b4b93d45491480e0093f6bf409f58d3c159767d125aecac37c2efa112d","ssdeep":"48:jpu2WwGgeZToIgoInHDEPEkj/RgEL/gE78DgE77EwlORWDWHW/MXJsdV9IwjMdVB:ISIx6gIWxW7rw4i2/MXJU0o3oMuNFLzb","tlshash":"c2e18a84f6e717a8337326512ffbd160ac12698ba688cd5c709d2dc14fcdfa0e41666b","first_seen":"2025-07-13T00:10:58.502466Z","last_seen":"2026-09-21T13:33:51.602738Z","times_seen":41,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/faq.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.736Z","timestamp":1789997579736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/faq.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 439\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\netag: \"6a4c7bac-1b7\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":439,"size_decoded":958,"mime_type":"application/javascript","magic":"ASCII text","md5":"243cb00dfb2e2738287c3c4946047242","sha1":"767d2d498e0b1a9cf7070fa5689dde1328d84edc","sha256":"8476f8e765c903ac09994e9bf14948415e46a0e0d6b5ccd52c08a28e13726ee9","sha512":"62c5a9a8175755a0556b78c71107f5bbc2d5760bedc9cd29c7e8cfd6651ea98be0ca7e1d4409f6c8e26656f377a6d637584a0c4ca2a2ca74993fc6022064700a","ssdeep":"","tlshash":"eaf0926656bc263543139dbb9b9eafcd37202087a08c399e3c9dd9493f856b00de71c2","first_seen":"2025-07-13T00:10:58.491414Z","last_seen":"2026-09-21T13:33:51.604106Z","times_seen":41,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/heropeople.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.752Z","timestamp":1789997579752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/heropeople.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-f4481\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1000577,"size_decoded":1000030,"mime_type":"image/png","magic":"PNG image data, 925 x 612, 8-bit/color RGBA, non-interlaced","md5":"2975e9fde0d38196d7e22dc3123af505","sha1":"2e13f58f0269e870151ed8cda5b53b46cbf89a8c","sha256":"48855bc0a21452de528b1f9e14ada27d44d80f4af45ada7354cac8075b32cc75","sha512":"09f03df2d6df8356514d5337f982c35c2b462679248b4e761788d2da4f73972a9f2f23ef9328eb9116a95e94d7883bfd5b066fb4f7625178387fafb2aac0d80e","ssdeep":"24576:Hn03yys8yEt61rxrx5/n5RIWoHP/dmJUY+KiOQcY:Hn0sigj5v55eN5KQR","tlshash":"bd2533a3f444acf256af8868cdf066295c6fbaf6d54a609f38c115407d37dcd2a046f8","first_seen":"2025-07-14T21:06:28.967282Z","last_seen":"2026-09-21T13:33:51.605456Z","times_seen":31,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/partner-1.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.754Z","timestamp":1789997579754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/partner-1.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-b547\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46407,"size_decoded":46043,"mime_type":"image/png","magic":"PNG image data, 219 x 193, 8-bit/color RGB, non-interlaced","md5":"0899a6cf215d227f2e179919eb85a33c","sha1":"a5f235223638ed94f8162a8565ec849cfedce3a7","sha256":"0fbbad14500ae191fe13f732d92e582c60dd7569ea23a8593480fa440e201c14","sha512":"d02ec1010da45a580190528857e19d9e7ae7dce7b5e54ad67cfa11d8047c0e519ae560e8a8a5fe81926eadc6b3d647893c52650ceaa44b365f905f4531609465","ssdeep":"768:aJ49HUC1/cp7YE15V59dVvJFCRCgbsvUiMOKQ8KEuB4aZsIy7mfKK3:Y6X10p7F5RVGRCgQUiiKrZ/dJ3","tlshash":"db230263fab15945b2b2360ee73dba1c75b24bd059a5787069fdfa0d98000ad0b839e1","first_seen":"2025-07-14T21:06:28.964573Z","last_seen":"2026-09-21T13:33:51.606884Z","times_seen":32,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/partner-2.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.755Z","timestamp":1789997579755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/partner-2.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-10346\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66374,"size_decoded":65806,"mime_type":"image/png","magic":"PNG image data, 219 x 193, 8-bit/color RGB, non-interlaced","md5":"79835f722b65caed53e8f355ce17bd9b","sha1":"bfd3c66932b8c0b42572da789399f2fed093a4cd","sha256":"9362154cce514be469c4e8e5bfa55623c3a2f6a68fa7fc66abf45eb59e53c14f","sha512":"32ebbd7a3ed939fe7025e9f11a10da2fd21bb4e59004bd6b462996e8d3647c4ec47f351e0fd0b0710703979d8e0db26fcbce732a8cffc8981f779e3607ffcba7","ssdeep":"1536:YwOnKZ1catmFmEqs7OFmofsVefjWZb5ReA2XZiFIVUNKcsxqyreKi:+ucem0EqKGPfUb5U2mU/sxqyr4","tlshash":"7453022cf2d2fc338948beea3c9649a66b765b5993c4d1568cc4d8e0c0c5cda40fe09b","first_seen":"2025-07-14T21:06:28.96816Z","last_seen":"2026-09-21T13:33:51.608305Z","times_seen":32,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/partner-3.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.756Z","timestamp":1789997579756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/partner-3.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-f29b\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62107,"size_decoded":61779,"mime_type":"image/png","magic":"PNG image data, 219 x 193, 8-bit/color RGB, non-interlaced","md5":"a8c053977b0296b374ff51e15105b3d8","sha1":"9c0ea24a0d12162b21feeca568d2dfdabfebf181","sha256":"975e539014eebea0a03ab81b45e437663dcd4554a15f9726a4572a94949cd709","sha512":"b61354b45c0339dca1e972612082ba52c4b0603a42e49a9f33230cdea918190f5042d4104f78a7bf059bfc551376139e2626e41ce0830e216ad4ac3b1e282c85","ssdeep":"1536:Y8sAecEbyyPS3nFz1kRCMkiWyMTdwuoCtoNNOHu:PeZbyyPSXFzKkiW/y8rHu","tlshash":"105302a065149ea9a85e9fd84cee93c93f7ea7c2d871f104aaf7143954076f6018f4c8","first_seen":"2025-07-14T21:06:28.950083Z","last_seen":"2026-09-21T13:33:51.609655Z","times_seen":32,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.753Z","timestamp":1789997580753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 21 Sep 2026 13:33:00 GMT\r\ncontent-security-policy: script-src 'nonce-ApJp_CclParzfQJxw_rqCw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16860,"size_decoded":3171,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"90fc5edc92f61a16aceda8039cf09b7b","sha1":"ac6f62266e191d0785ffdc92b32de81b596e2b6c","sha256":"fc01148083f8742a4b6cbff435ba7a36cb87637146c23ba15ad6807a2d823ca7","sha512":"ec8d5bff5fcfe3c4b68799e9e13c279588a9de9d2f203aae1571aaddf845185950b1c4eef0492f9d06ca1694c8d58338d6b22e2bd730c108831bc70134aad599","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/o:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+f","tlshash":"e6720e50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-21T13:33:51.611469Z","last_seen":"2026-09-21T13:33:51.611469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/css/bundle.css","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.517Z","timestamp":1789997579517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/css/bundle.css HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-b88d\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47245,"size_decoded":7790,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"22733c3f3a31507b08d35139bba1ee64","sha1":"894c10dac3303a0b989ce19835a8a8e3c117e3ac","sha256":"0e0ce730800a1ab79e15f3121db7d4b8f1a1c06cf5fd0f1a8dd3c3a630d5e88b","sha512":"e0663a885d2cfe105ad717dd90fa0379212a9a18b176741e4373919d8a9823d1b51284403cbbfca1b92011cd2189f6b74550734990b02cde5b49f9d773872d25","ssdeep":"192:fT93bs2uNj9o/sxK39tO4XFVDB+qOom72b0CiNGXFE9sd1ruXuLN1lR+e1Wcn/aL:9s2SDwtSz/d7yZtoNOGozVS","tlshash":"c4232f6052142208337bef7c77a36a9dba2c5472974f42bcbad1608cb38c5994776ecd","first_seen":"2026-02-18T03:00:08.449831Z","last_seen":"2026-09-21T13:33:51.613186Z","times_seen":23,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/partners.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.735Z","timestamp":1789997579735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/partners.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 535\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\netag: \"6a4c7bac-217\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":1054,"mime_type":"application/javascript","magic":"ASCII text","md5":"6487a74f8178dc7c45a230724be3b434","sha1":"01141b2371131ccf302c8a7ec6834a31c9f976cd","sha256":"16a4cff1eceeeacfcc0b26a772cb4e14ede7f840e91d4000f1e59ef154cd64b8","sha512":"40284b69d4ddaaa332532249fc2a6ab21ef55d573da0312d5a29a9deef8f6dd09aec1b7c81d8cb05697e689e9c23270b737a4567e764cea4ed2fcedea9256709","ssdeep":"","tlshash":"c7f0650bc86104924197913e5c0e93456767b5070abd7c613adc28088f5c15f1bf92f8","first_seen":"2025-07-13T00:10:58.521465Z","last_seen":"2026-09-21T13:33:51.615063Z","times_seen":41,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/assets/partner-4.png","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.757Z","timestamp":1789997579757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/assets/partner-4.png HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-116bd\"\r\nexpires: Wed, 21 Oct 2026 13:32:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71357,"size_decoded":71040,"mime_type":"image/png","magic":"PNG image data, 219 x 193, 8-bit/color RGB, non-interlaced","md5":"6b193b55759117b885be4019ee2dad02","sha1":"64f0127548c6d668b1d4345d6ea391e28d9ce125","sha256":"093260d655c04d67126e76a86169014b5eb3de1fe37296b56c5aa741a8edda99","sha512":"efdd27296de1952bc7084c1612ed474e39892a11d1db0f349c1e7778d4a5ee830eb64d4d83f060e32487eb625a9ff7e5a921cdc674ab32fd3e7fd5672599bb16","ssdeep":"1536:Y/bDJMFCwTWS2O5PzLoFhtOzRyf160VXglndxBwCgTA3WU:aMFNTWS2outOzIf160Bgbe4WU","tlshash":"a263020ee8165edc62d654c3327d824aca750fc6b602c653b4d80f3a78a04fdd97a38c","first_seen":"2025-07-14T21:06:28.95924Z","last_seen":"2026-09-21T13:33:51.616272Z","times_seen":32,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.101Z","timestamp":1789997580101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cotacao.simulacaoaqui.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 268946\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354534,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-22T00:10:09.357411Z","times_seen":3490,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":17,"receive":65,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/slick/ajax-loader.gif","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:33:00.163Z","timestamp":1789997580163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/slick/ajax-loader.gif HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:33:00 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-1052\"\r\nexpires: Wed, 21 Oct 2026 13:33:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4178,"size_decoded":3839,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-09-21T22:34:50.617698Z","times_seen":47134,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao\u0026co=aHR0cHM6Ly9jb3RhY2FvLnNpbXVsYWNhb2FxdWkuY29tLmJyOjQ0Mw..\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3l6y99d5leh0","date":"2026-09-21T13:33:01.142Z","timestamp":1789997581142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 24 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 339759\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-21T23:46:07.390342Z","times_seen":729013,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/slick/slick-theme.css","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.715Z","timestamp":1789997579715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/slick/slick-theme.css HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c7bac-c1a\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3098,"size_decoded":1395,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"7fe399f7dfbddeff813071e3d712926d","sha1":"624788427329b0bd7d0095a84b9260f1e319b142","sha256":"92c42ab409600f1d2568aeede1dff4be649d991e1aba7b89435f31bed8e1d2fc","sha512":"f43d1fb531b2b40aff5fec58c31d4c5c136ea0aa23e8d82791fce320396fcee4c5a9aa26c97ba8ba152a3ae745aa683c2b1008b38b4f1c2d33d9ee286a7a6e7f","ssdeep":"","tlshash":"3451df985ab7ab46101790903be7472477cb70131629d8acff95638c8fce0d8ead934e","first_seen":"2025-07-13T00:10:58.501515Z","last_seen":"2026-09-21T13:33:51.61869Z","times_seen":41,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotacao.simulacaoaqui.com.br/cx001/js/simple.js","fqdn":"cotacao.simulacaoaqui.com.br","domain":"simulacaoaqui.com.br","tld":"com.br"},"ip":{"addr":"74.50.84.190","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.734Z","timestamp":1789997579734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotacao.simulacaoaqui.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 02:25:18 GMT","end":"Sat, 05 Dec 2026 02:25:17 GMT"},"fingerprint":{"sha1":"2E:E9:F1:67:5C:C7:27:D0:6E:47:3F:30:3B:1F:55:F9:C1:D9:96:22","sha256":"E8:35:F7:B7:21:08:19:3F:0E:54:E8:10:0B:F6:FE:AC:70:D8:8A:49:61:3C:72:D8:8A:7C:C2:A2:48:F6:22:07"}}},"request":{"raw":"GET /cx001/js/simple.js HTTP/1.1\r\nHost: cotacao.simulacaoaqui.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/cx001/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 495\r\nlast-modified: Tue, 07 Jul 2026 04:08:12 GMT\r\netag: \"6a4c7bac-1ef\"\r\nexpires: Tue, 22 Sep 2026 01:32:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":1014,"mime_type":"application/javascript","magic":"ASCII text","md5":"1b4b84a01d95bb832ffe42e62cc2d000","sha1":"5ee6daff78016e3cb82f3ab368911057742adc57","sha256":"90c3a25f7712905b666dfb345cc790f878cfd7c5755b588b571a80404d2333e2","sha512":"8e502a60b383f7cd04026316421564ee195654210b4cce26d74f31049dfb81104b7e45503085b8f348c515c9d1860226de334b2777133305e4b7c09669a27cfb","ssdeep":"","tlshash":"6ff0d80f8864506241ab923e4f6ee34aa75775031bad3d217bcc39088f5c16e1bf82f8","first_seen":"2025-07-13T00:10:58.50679Z","last_seen":"2026-09-21T13:33:51.620035Z","times_seen":41,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"cotacao.simulacaoaqui.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cotacao.simulacaoaqui.com.br/cx001/","date":"2026-09-21T13:32:59.739Z","timestamp":1789997579739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LfDCk8qAAAAAIs1hRpnWOuFmQ_gzOsFcfuF_Rao HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cotacao.simulacaoaqui.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 21 Sep 2026 13:32:59 GMT\r\ndate: Mon, 21 Sep 2026 13:32:59 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":1316,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1010), with no line terminators","md5":"56b911d645b972b5dbd2b43a20ec9978","sha1":"31d8314cadf92c9fe839b872f6121ff3331cf67b","sha256":"2e8aa029ae9512eeaa119e0b8ece63639a1401245ffbef7386edd86c84333990","sha512":"55356498d94f8966f0fe6341e38677a8edcb5ec35414cb6357b75b49a6ab50701b25d90036cb71acb98408abde374848ba2182c0440b0bf59faa4e1ed58e3b76","ssdeep":"","tlshash":"941125770614e0354b3209d5e1fecbb5e892701cf15885e8a825dec51e79dc7ce056c5","first_seen":"2026-09-21T13:33:51.621745Z","last_seen":"2026-09-21T13:33:51.621745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":60,"connect":25,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}