{"report_id":"419b89da-b16d-44b3-8fa7-b9609287a25c","version":0,"status":"done","tags":[],"date":"2026-07-07T15:01:49Z","url":{"schema":"http","addr":"itauempresas30horas.likescandy.com/","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":0,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/home.html#150126.shtml-%20KWjx60mn#*IrV$hWNkkMk%B5lZEf*srPTVmb1S0EKBdpcBcDDpcOx84LKJpmJGyw0E*w3IwSNMN#42dGZDzPrRb-f#bM1qmlxjduF#Vz#Z1FfMOlpUWTVjeqmYn94sUh#2PSWHm*afOx!w*35Sa9KaZRm$$@pIdebEYLFwGz#ChtvN8JLIeUBro1HbkG2zYb!UjF575@57*qFWWNjRBo1R0o6NkuRNoV10izrQ*8-FVd9oh5jAQ$Pb7nf4mbWrJc4gAo!QRVgE*aD7On7Z6$aPbiDQ-j#K#MszVZfYmblWMZ","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"title":"Banco Itau","dom":{"size":746,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6acd70aa3a8de17198c3c74cbb8ad488","sha1":"abdc43e242a52ef8ae53f2ec1f1af02bdfabba65","sha256":"ab8935f36b6a4f0696810764237edb4e338390f17fcb2c17e4b26a270b6d9cbe","sha512":"c59f053b28ea29acbf75bd4fb708b8b1b4add5840dff032afc4f392568ffac1bf5ddce5d12dcafaedd2e1fad6f90c61fd815c8bd749a60a5596618abe0fc83d5","ssdeep":"","tlshash":"1401158c7d11c81ce3a3029699f4f24c56e2fc28e2e1e9f68096359ab061fb1dc5217c","dom_hash":"domhashf4612bfe0bb1b4cfcdf7a3b989aa472b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"itauempresas30horas.likescandy.com/","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":0,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T15:01:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"itauempresas30horas.likescandy.com","ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"domain_registered":"2007-01-03","domain_rank":0,"first_seen":"2026-07-05T08:38:36.165221Z","last_seen":"2026-07-05T08:38:36.165221Z","alert_count":54,"request_count":18,"received_data":50302,"sent_data":11381,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"SweetAlert2:9","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":68728,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-07-03T01:15:23.968015Z","alert_count":0,"request_count":1,"received_data":544143,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-07-06T08:21:58.74978Z","alert_count":0,"request_count":1,"received_data":96769,"sent_data":521,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/function.js","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"95b73850476024e88c2689148f85f7e9","sha1":"7542da429ff76a3a753e638d1e540911f09f80ab","sha256":"0eb76cea9a89d803d5142fd4a980940638aec00b3e3ed87702d052173368e101","sha512":"017ca5426cd58bee8c8525885f9e704ed0f3dbb6c977c0fef3a972c05acaf9b9d511591136b9e27f7671fe5685af30aed04d1346808f1510c6158739c7641e22","ssdeep":"96:VxSf/Nsy/+NQujo2q3DDmXRmmJofpTJEol2SiTQxmrpZ3moSISMmZ67:VxUNujo2qsyfBJbl3iMxmNNhSISMV","tlshash":"dda15580fa8f33ee57f21131007d1286de6ed532c7299ab9f4764082f7b1b1a715aa4d","size":5081,"data":"","first_seen":"2026-07-05T11:28:48.350995Z","last_seen":"2026-07-07T15:01:52.049434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/jquery.mask.js","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b5470c70d12e8ac4f31d995c3c027f6","sha1":"f92de41b26d5e744f6335660c2b0d10d21bee210","sha256":"3b775d6e0b0f5cff98aca4daaa7f27a7c3678f39d1f5186776bb14b63cc2f625","sha512":"12881df4695c0b599acaaae46724c38cda703697b5010cb713a7e25f178088ee5b720482f1f432d2f00e970d4274d478e5b83dac6880d2511f00730ec3f5dfee","ssdeep":"96:AZa87Yu4Evyymrdew8UjXp9PZiUZK5QaZuBIiE07Z2myAeKJevlK7ZXO83:P87cxrQwz9kB5QaZuBIiE0GAecev/83","tlshash":"d0d1c7d931c5b06363b364a900bf414ad3b7e7d119de0809e65a95d1be74f8e0163e3b","size":6318,"data":"","first_seen":"2023-03-07T01:16:07Z","last_seen":"2026-07-13T18:41:52.736066Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Inicial.php","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7ab6c2a897b465116ea9ab7d784f1d1","sha1":"139b67a075fe0fade2e012649bdca5c56e0bcda3","sha256":"ebf8edcbaa4f3017c762c471bc328cb054def1ced49e5ef3c87d6dd83e943bba","sha512":"ac83786a6e73d857af71a0d925bfeb2c65149c1b4712e65c63716e258a8bf72b458080af03dae05cca367f9b513197e33e87a4d59d0fb6c47b34fca1c0699cbb","ssdeep":"","tlshash":"d6c02b3f23ac2233bef203b42b162f40463042270043bce06974c5c31328d67091143c","size":147,"data":"","first_seen":"2026-07-05T11:28:48.368854Z","last_seen":"2026-07-07T15:01:52.068999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Inicial.php","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a562564abeda6c1155d6861b45bcdd41","sha1":"ff26e2d94f75bc0eea225a2a8b9bac39a8388356","sha256":"3836948b6967089159b5094de4f3b14ddbe8a9b7b13da0db57996accc94e318e","sha512":"57dd6afbdcd3863fcfa2d58f441c6d0146ef06adf7bd45710ba7be61a479b9ebe62e75aac831928bd3e2d285e22968157ca20d98fc5fc32ec230421d5258e667","ssdeep":"","tlshash":"71c09b1575544719d0f35845253ff10e7f65734b17f1587c619434823f27e6c5005617","size":136,"data":"","first_seen":"2026-07-05T11:28:48.3699Z","last_seen":"2026-07-07T15:01:52.070515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Inicial.php","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0afbc01194b237cfe983c470d0add58","sha1":"34ac3b5b12b5ee65e41609ca5fd3913d0470da95","sha256":"3c127081bf9a6a38825eb152c5266104d6685efe2ac78c2e936a10e04ff2fe21","sha512":"68eda58f41bd615b292419e279fb2d8196d446b7050d067eaead9228065242fd64cc65f352a5576e4fe7625fcaf84f707b11d9de35ef71b05e5ab1c00165f4a8","ssdeep":"","tlshash":"a4d05e2ab0f51100442330352aef9056342a504b0944cf583d8f0aa15f6243a5a52b05","size":274,"data":"","first_seen":"2026-07-05T11:28:48.372094Z","last_seen":"2026-07-07T15:01:52.072024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Inicial.php","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cc17e847cfa9e4f929dbf080ab3d17f","sha1":"acdaab9cbf934eb2d9ffaf771525ee6ce7f9d1da","sha256":"8520f8e6f572c3cd10fdb6d0999637d82bddc3819b3cde9126ab87f5d4ae8d27","sha512":"6dd6b395b5734f8824615da83d636e0cc3c016931b89112c50bae0586b75331166c3239391afb9ef032eab2a43e3faebea2a9933c626a4a4e5e938c64acd6c69","ssdeep":"","tlshash":"24d0c98eb2f852a4c062b1624c6f8948577e210f585aa788310001c44f14c9dd162caa","size":213,"data":"","first_seen":"2026-07-05T11:28:48.374555Z","last_seen":"2026-07-07T15:01:52.079529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/home.html#150126.shtml-%20KWjx60mn#*IrV$hWNkkMk%B5lZEf*srPTVmb1S0EKBdpcBcDDpcOx84LKJpmJGyw0E*w3IwSNMN#42dGZDzPrRb-f#bM1qmlxjduF#Vz#Z1FfMOlpUWTVjeqmYn94sUh#2PSWHm*afOx!w*35Sa9KaZRm$$@pIdebEYLFwGz#ChtvN8JLIeUBro1HbkG2zYb!UjF575@57*qFWWNjRBo1R0o6NkuRNoV10izrQ*8-FVd9oh5jAQ$Pb7nf4mbWrJc4gAo!QRVgE*aD7On7Z6$aPbiDQ-j#K#MszVZfYmblWMZ","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"053bb3ebe816ffd48cafdf76c0b711f5","sha1":"354e49cb00005d302327d4385225bba56fe65800","sha256":"da225b908cec243f069976b48e51ee458c510dcf2903dc14bbf8046eedf46d78","sha512":"0983572eda0ae3c544110a086f43e17c50105ce50da9cc36062c79bc5387310c59d58b19a47a56fbb2dfe97f0652697b063997357497b6add2f0172fded8239c","ssdeep":"","tlshash":"d0c08ca8a6a086e89046f2a5088d124820a8d8317802902a612c9c8408a0f7290816bc","size":157,"data":"","first_seen":"2026-07-05T11:28:48.378567Z","last_seen":"2026-07-07T15:01:52.081272Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-15T13:42:51.698327Z","times_seen":54432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Inicial.php","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"eventHandler","is_inline":false,"md5":"b5092f4c9c5204dcb90943fb85a667d5","sha1":"7aa2f9a4786b797e6d6910549d3fe0c2611954cf","sha256":"03fd02e04219c49532090dafa5418c4261cf1108e31068ed41705ad1b73eb599","sha512":"a982c73dc11b53ee648e637d116008c6a21e4b73b3eda3b93f6e24acc13c045c07aa2c000ba03f68950563acd3ef745b5d23d46d9b6ee890aabe1fb430edd18d","ssdeep":"","tlshash":"c650000330c00f0000000f0c0000000000003c0c0300003030000000000000330000c0","size":10,"data":"","first_seen":"2025-10-17T06:40:15.330333Z","last_seen":"2026-07-07T15:01:52.083248Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/home.html#150126.shtml-%20KWjx60mn#*IrV$hWNkkMk%B5lZEf*srPTVmb1S0EKBdpcBcDDpcOx84LKJpmJGyw0E*w3IwSNMN#42dGZDzPrRb-f#bM1qmlxjduF#Vz#Z1FfMOlpUWTVjeqmYn94sUh#2PSWHm*afOx!w*35Sa9KaZRm$$@pIdebEYLFwGz#ChtvN8JLIeUBro1HbkG2zYb!UjF575@57*qFWWNjRBo1R0o6NkuRNoV10izrQ*8-FVd9oh5jAQ$Pb7nf4mbWrJc4gAo!QRVgE*aD7On7Z6$aPbiDQ-j#K#MszVZfYmblWMZ","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"introduction_type":"eventHandler","is_inline":false,"md5":"bc09e3fdbceca8a961f5fa9d1e072548","sha1":"268986bd7e7755b389199d656f64290eed1aeab8","sha256":"b1b4456c56265167e5cbf7f183cab18981649fb148835be63d365e1ce6e33ba9","sha512":"c41ba40c7e7e4af302d8ab2c8261d5e3d9be6cf12fbaebe849c481bba5efaabaf41c15db210266b4e75b5d7996bf079d5cf6de869247fe025cf17e9554060f8a","ssdeep":"","tlshash":"d350000c00c000c00000000c0c00300c00c00c0c000000c0c000000c00000300000003","size":9,"data":"","first_seen":"2026-07-05T11:28:48.375521Z","last_seen":"2026-07-07T15:01:52.084131Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@9","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c0de18caa00c8ea26099fb8cd50b05a","sha1":"b81e4affd6f879f32d6027e404cf477257663c39","sha256":"1cea8f5e200fcfc0e1d1b0797151f138faa548d850f9dde66a43424eb93f9450","sha512":"87f86a1120219010ce81cb71c7925fe5803abd4bfc9dcbdbbd39e0e9ec3a44ecd95ad8186bbfd823b0ae80d38ce5c7c13612dd1aa54de9ae9e0db11425e13f4e","ssdeep":"768:LaCDIKBK6bAQ14K2PkXuzZudkndA1dyKW9RuRFmPu4uqrH3CVdewQLwqcGc3BfwX:LaSBrL4K2NgdkdALdWaRFfsEX9wCO","tlshash":"f163f6857a403123a6ab417968ebe309b6b5a542fc330c54f129d0944ffbe8f1573bb9","size":67597,"data":"","first_seen":"2023-03-08T15:28:13Z","last_seen":"2026-07-15T06:23:04.52964Z","times_seen":2793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/processa.php?r=1791.4889111963892","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:41.557Z","timestamp":1783436501557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /processa.php?r=1791.4889111963892 HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"action=G"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:41 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":92,"size_decoded":456,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9150a57b42e2049b23f6554bc84fc577","sha1":"4e852ec45e528ec521f98658a409a3b6bd3b2264","sha256":"4091038f6882de3c87baab30f614ab930ca0f5b6ab4f77c31ee93ee7210add73","sha512":"7f2bf40cc7391d925debe33002d1f58f585e1918a07b2970956666d9b7192046da43f43544c922c5427982de22ca611f381ac2552b2cd47362ddafec658f7818","ssdeep":"","tlshash":"bab012a394af80418e806dd405951ea1617416518834c64104cc8061928c4f4028e01a","first_seen":"2026-07-05T11:28:48.356298Z","last_seen":"2026-07-07T15:01:52.040186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/pics/favicon.ico","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itauempresas30horas.likescandy.com/home.html#150126.shtml-%20KWjx60mn#*IrV$hWNkkMk%B5lZEf*srPTVmb1S0EKBdpcBcDDpcOx84LKJpmJGyw0E*w3IwSNMN#42dGZDzPrRb-f#bM1qmlxjduF#Vz#Z1FfMOlpUWTVjeqmYn94sUh#2PSWHm*afOx!w*35Sa9KaZRm$$@pIdebEYLFwGz#ChtvN8JLIeUBro1HbkG2zYb!UjF575@57*qFWWNjRBo1R0o6NkuRNoV10izrQ*8-FVd9oh5jAQ$Pb7nf4mbWrJc4gAo!QRVgE*aD7On7Z6$aPbiDQ-j#K#MszVZfYmblWMZ","date":"2026-07-07T15:01:27.161Z","timestamp":1783436487161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /pics/favicon.ico HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/home.html\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Wed, 21 Feb 2018 11:17:04 GMT\r\nETag: \"47e-565b7111bac00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1150\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":1150,"size_decoded":1468,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"7f9a251e3beb73737dd07ebf570029ac","sha1":"5be846a68e889436c94ae85ba1df6c9cbd4a4b61","sha256":"718354aa3d78256bf073c518d57f27765018c9cfa8f19e72e2c34ddfcce8fcc1","sha512":"18fe430236b538ec3561af29fb2c50ecc0fa50d1c6e043de20690162e7ced0ed3fbe692f928a8674a703fdd783abc4328ae82b34650debe13d84a4bc96bcf6cf","ssdeep":"","tlshash":"bc2175b6e925394dcdff0336974416326319dc06d2bb44873307085a61097cd5bc2148","first_seen":"2023-06-20T23:31:51Z","last_seen":"2026-07-07T15:01:52.044178Z","times_seen":4,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":130,"send":0,"wait":132,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@9","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.568Z","timestamp":1783436487568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/sweetalert2@9 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 15:01:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 18243\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 9.17.4\r\nx-jsd-version-type: version\r\netag: W/\"1080d-uB5K/9b4efMtYCfkBM9HcldmPDk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220147-FRA, cache-bma-essb1270067-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 34908\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL7fIbZNdCrOyWOFNnbtVqYcO%2BjL0cfUGwwYjjjMfzwt%2FdyfGpNxK%2BoOmgGA9y3msMGUH3ARAkexbbHDdPIV0uwD4HcO5t3Hr1sh2UWbhGfSN2RcVxbkNvUyY2414aVrEso%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a177b97f6c26712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67597,"size_decoded":19374,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42473)","md5":"0c0de18caa00c8ea26099fb8cd50b05a","sha1":"b81e4affd6f879f32d6027e404cf477257663c39","sha256":"1cea8f5e200fcfc0e1d1b0797151f138faa548d850f9dde66a43424eb93f9450","sha512":"87f86a1120219010ce81cb71c7925fe5803abd4bfc9dcbdbbd39e0e9ec3a44ecd95ad8186bbfd823b0ae80d38ce5c7c13612dd1aa54de9ae9e0db11425e13f4e","ssdeep":"768:LaCDIKBK6bAQ14K2PkXuzZudkndA1dyKW9RuRFmPu4uqrH3CVdewQLwqcGc3BfwX:LaSBrL4K2NgdkdALdWaRFfsEX9wCO","tlshash":"f163f6857a403123a6ab417968ebe309b6b5a542fc330c54f129d0944ffbe8f1573bb9","first_seen":"2023-03-08T15:28:13Z","last_seen":"2026-07-15T06:23:04.52964Z","times_seen":2793,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":13,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/pics/img1.png","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.739Z","timestamp":1783436487739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /pics/img1.png HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Style/principal.css\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Thu, 14 May 2015 21:38:08 GMT\r\nETag: \"3453-516118b20f000\"\r\nAccept-Ranges: bytes\r\nContent-Length: 13395\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":13395,"size_decoded":13700,"mime_type":"image/png","magic":"PNG image data, 574 x 87, 8-bit/color RGBA, non-interlaced","md5":"906db49dfc03bd12500d5312ff7aeef8","sha1":"4061ce6bd48cc9e8e82f2686dca31451bcf32738","sha256":"08dc3311968394f1901452a2e9fda7839d8fa9aa9880d43a913bc22ad4281421","sha512":"f2eb6f85fe0b3d2a466676496b98e5e165e25720827998bdf3e01180f0b5ab387986c56a1857e9bf844036334f6a0c3b1e331c42453544ccca35e44723a55822","ssdeep":"384:bd80PkAv+H1qvFX+kjDnA2Ykt91L+JztOtNeiEP/Uk7SbaiK:bd80Pk61X+qDA2R1L+etNeicMFaiK","tlshash":"2252ceb9d3f2c1119d095c225d98a1e9a3decd6fb0c51ca6c829c6d5affd058c62b0c8","first_seen":"2026-07-05T11:28:48.35494Z","last_seen":"2026-07-07T15:01:52.046899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/processa.php?r=8196.457643992933","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:45.013Z","timestamp":1783436505013,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /processa.php?r=8196.457643992933 HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"action=G"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:45 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":92,"size_decoded":456,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9150a57b42e2049b23f6554bc84fc577","sha1":"4e852ec45e528ec521f98658a409a3b6bd3b2264","sha256":"4091038f6882de3c87baab30f614ab930ca0f5b6ab4f77c31ee93ee7210add73","sha512":"7f2bf40cc7391d925debe33002d1f58f585e1918a07b2970956666d9b7192046da43f43544c922c5427982de22ca611f381ac2552b2cd47362ddafec658f7818","ssdeep":"","tlshash":"bab012a394af80418e806dd405951ea1617416518834c64104cc8061928c4f4028e01a","first_seen":"2026-07-05T11:28:48.356298Z","last_seen":"2026-07-07T15:01:52.040186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/function.js","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.576Z","timestamp":1783436487576,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /function.js HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Wed, 01 Jul 2026 09:06:47 GMT\r\nETag: \"13d9-6558902da37c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5081\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":5081,"size_decoded":5397,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"95b73850476024e88c2689148f85f7e9","sha1":"7542da429ff76a3a753e638d1e540911f09f80ab","sha256":"0eb76cea9a89d803d5142fd4a980940638aec00b3e3ed87702d052173368e101","sha512":"017ca5426cd58bee8c8525885f9e704ed0f3dbb6c977c0fef3a972c05acaf9b9d511591136b9e27f7671fe5685af30aed04d1346808f1510c6158739c7641e22","ssdeep":"96:VxSf/Nsy/+NQujo2q3DDmXRmmJofpTJEol2SiTQxmrpZ3moSISMmZ67:VxUNujo2qsyfBJbl3iMxmNNhSISMV","tlshash":"dda15580fa8f33ee57f21131007d1286de6ed532c7299ab9f4764082f7b1b1a715aa4d","first_seen":"2026-07-05T11:28:48.350995Z","last_seen":"2026-07-07T15:01:52.049434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/j0yhVl0.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.597Z","timestamp":1783436487597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /j0yhVl0.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 14:44:44 GMT\r\netag: \"edc6226531c6378484e0b0dc790cb07b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Bou4vFee2FLuEQzPKs2YR10XXV0ZU6laR1EHVwuhb0y83Zmjg0kVng==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 605804\r\ndate: Tue, 07 Jul 2026 15:01:27 GMT\r\nx-served-by: cache-iad-kiad7000116-IAD, cache-bma-essb1270024-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 16, 0\r\nx-timer: S1783436488.744972,VS0,VE3\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 543385\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":543385,"size_decoded":544143,"mime_type":"image/png","magic":"PNG image data, 1641 x 1199, 8-bit/color RGB, non-interlaced","md5":"edc6226531c6378484e0b0dc790cb07b","sha1":"7ea49f07e2398d206c70edb1e2be48a74933a8cf","sha256":"5d5e233c23c66c449add8e77338b781f6cce555503ce9bf4e7294885559b092d","sha512":"c7279a340ba5960d55d5cec2d2704bc374c15d0badc2c1704a20a3eaa6729e6b93ebcb64190228ede4a0edd07613c333303944bde0c27c41a38d024d7c08fa1d","ssdeep":"12288:B7cssQsWpl8MQRjlmEbSrcXCmQahcqTG46spIm2t1Bvhrhlk6Qg:OEskTQRjlmEb/hcuGewhrhlRT","tlshash":"4bc4234d046f4d3ddadb7d3a9b0e8789ba027100560b18b197f611cbfe57b281a1d2ee","first_seen":"2026-07-05T11:28:48.367714Z","last_seen":"2026-07-07T15:01:52.051751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":107,"dns":0,"connect":9,"send":0,"wait":12,"receive":35,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/pics/fundobotao.png","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.741Z","timestamp":1783436487741,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /pics/fundobotao.png HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Style/principal.css\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Thu, 14 May 2015 21:38:14 GMT\r\nETag: \"e31-516118b7c7d80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3633\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3633,"size_decoded":3935,"mime_type":"image/png","magic":"PNG image data, 150 x 87, 8-bit/color RGBA, non-interlaced","md5":"38f3ae222fcf78fef3ad78ff3d860a80","sha1":"d3dba4fb85bea1336c965f529b2005a97fe5e3f3","sha256":"49c90b894e14f638503f5db315dd197389a12c07b5c6ed8349ee0c9a39d5c66a","sha512":"e54616aaabb19608b44d5afba61c6c6cf50a1da2d682fcb603f6e1e35a1b046278cbe512f52cb8d6b13b6fe8f874a0ee51359891f184ed7f4b691b7002324c35","ssdeep":"","tlshash":"b2715d1568cb79a43739eb80463c7ebbd43b70c8be1258e0605148122cdedf097743d2","first_seen":"2026-07-05T11:28:48.363727Z","last_seen":"2026-07-07T15:01:52.053678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":131,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/processa.php?r=5078.461925928799","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:34.645Z","timestamp":1783436494645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /processa.php?r=5078.461925928799 HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"action=G"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:34 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":92,"size_decoded":456,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9150a57b42e2049b23f6554bc84fc577","sha1":"4e852ec45e528ec521f98658a409a3b6bd3b2264","sha256":"4091038f6882de3c87baab30f614ab930ca0f5b6ab4f77c31ee93ee7210add73","sha512":"7f2bf40cc7391d925debe33002d1f58f585e1918a07b2970956666d9b7192046da43f43544c922c5427982de22ca611f381ac2552b2cd47362ddafec658f7818","ssdeep":"","tlshash":"bab012a394af80418e806dd405951ea1617416518834c64104cc8061928c4f4028e01a","first_seen":"2026-07-05T11:28:48.356298Z","last_seen":"2026-07-07T15:01:52.040186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/processa.php?r=2249.544446553639","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:38.101Z","timestamp":1783436498101,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /processa.php?r=2249.544446553639 HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"action=G"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:38 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":92,"size_decoded":456,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9150a57b42e2049b23f6554bc84fc577","sha1":"4e852ec45e528ec521f98658a409a3b6bd3b2264","sha256":"4091038f6882de3c87baab30f614ab930ca0f5b6ab4f77c31ee93ee7210add73","sha512":"7f2bf40cc7391d925debe33002d1f58f585e1918a07b2970956666d9b7192046da43f43544c922c5427982de22ca611f381ac2552b2cd47362ddafec658f7818","ssdeep":"","tlshash":"bab012a394af80418e806dd405951ea1617416518834c64104cc8061928c4f4028e01a","first_seen":"2026-07-05T11:28:48.356298Z","last_seen":"2026-07-07T15:01:52.040186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Inicial.php","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://itauempresas30horas.likescandy.com/home.html#150126.shtml-%20KWjx60mn#*IrV$hWNkkMk%B5lZEf*srPTVmb1S0EKBdpcBcDDpcOx84LKJpmJGyw0E*w3IwSNMN#42dGZDzPrRb-f#bM1qmlxjduF#Vz#Z1FfMOlpUWTVjeqmYn94sUh#2PSWHm*afOx!w*35Sa9KaZRm$$@pIdebEYLFwGz#ChtvN8JLIeUBro1HbkG2zYb!UjF575@57*qFWWNjRBo1R0o6NkuRNoV10izrQ*8-FVd9oh5jAQ$Pb7nf4mbWrJc4gAo!QRVgE*aD7On7Z6$aPbiDQ-j#K#MszVZfYmblWMZ","date":"2026-07-07T15:01:27.157Z","timestamp":1783436487157,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /Inicial.php HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/home.html\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"SweetAlert2:9","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":3457,"size_decoded":3821,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (656)","md5":"16ee89e55010e32f950f4b6a5e4a3b2e","sha1":"1ce8ed4338cd28242749ca209f0f80d043f5116f","sha256":"209cdcabf5b7549e6048107de33d238ced6099e9af4e933eb0a7a713b60b9a23","sha512":"b09d600fd6f40ed24bc68f8eaa6847b4b7d43a6fb966d6273b2d7b28b85257cb208d3bbde77405163a40e02833f1a00f0f99b2e0eb0cdd3f3053bb28d8fe4357","ssdeep":"","tlshash":"9e61862a695846166073339074fbaa8e3677d30bc605cdac71ee11a29f4eafc4ca2594","first_seen":"2026-07-05T11:28:48.3415Z","last_seen":"2026-07-07T15:01:52.055882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Style/principal.css","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.302Z","timestamp":1783436487302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /Style/principal.css HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Thu, 14 May 2015 21:37:28 GMT\r\nETag: \"3da-5161188be9600\"\r\nAccept-Ranges: bytes\r\nContent-Length: 986\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":986,"size_decoded":1286,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"98ec89dfcda06a8e93c6e90d61d72116","sha1":"adf9968d05792761f2343d170fa0c0828518359a","sha256":"054127500a44125856df6924bad9c2270d3225ea2f71d77bf5948d317530fa7c","sha512":"f0bbec508a713b2605fd660f4f238a523d7ece86288a0ea4feb5bb8b49857bd795013206571b53fdd7956534f0b615c7545726cca0c797adc04ce9a4874f403d","ssdeep":"","tlshash":"78110ba4da5b344dfb11a5f5b7b12a2c2c45c44b660b460275f0b878e24596c3c311cd","first_seen":"2026-07-05T11:28:48.342902Z","last_seen":"2026-07-07T15:01:52.057522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/Style/tiponormal.css","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.304Z","timestamp":1783436487304,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /Style/tiponormal.css HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Wed, 01 Jul 2026 10:00:28 GMT\r\nETag: \"17db-65589c2d6c700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6107\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":6107,"size_decoded":6409,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"0dffa6ded4355607195271d65cb26393","sha1":"b16505778e89ae4d969c4146f617f5278d5128ef","sha256":"c546fcb341ab32f45040795573fab6de246b82e21a5ddf6c029428c36ae2c817","sha512":"1b1cbd1963f81f9bd0400fc0eb5589c47dba47d93dae05687ddf3b3d3a031d6b49104ad10e64237bf77e07ed28c6d0d6b38c6a4cd02b36b0a0540cce7c5e1bba","ssdeep":"96:YUm/ezHbZKAuJqZLNC4I8LYD3cN/yTT/KYKt27z32uDvlHd6PrMsIqPVjoE8J+8a:YUm2zHbUhspNCzUYDM5yf/KYKt27z32X","tlshash":"25c18c54de9e240af612b4b6b7f12f572d498c47365b8212b4e1f928e2c192d3f612c9","first_seen":"2026-07-05T11:28:48.346616Z","last_seen":"2026-07-07T15:01:52.059454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":131,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.573Z","timestamp":1783436487573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33434\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 16:09:53 GMT\r\nexpires: Tue, 06 Jul 2027 16:09:53 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 82294\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":95786,"size_decoded":34417,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-15T13:42:51.698327Z","times_seen":54432,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":18,"receive":42,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/jquery.mask.js","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.578Z","timestamp":1783436487578,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /jquery.mask.js HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Thu, 12 Dec 2019 17:23:04 GMT\r\nETag: \"18ae-59984ff72ce00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6318\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":6318,"size_decoded":6634,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (532)","md5":"3b5470c70d12e8ac4f31d995c3c027f6","sha1":"f92de41b26d5e744f6335660c2b0d10d21bee210","sha256":"3b775d6e0b0f5cff98aca4daaa7f27a7c3678f39d1f5186776bb14b63cc2f625","sha512":"12881df4695c0b599acaaae46724c38cda703697b5010cb713a7e25f178088ee5b720482f1f432d2f00e970d4274d478e5b83dac6880d2511f00730ec3f5dfee","ssdeep":"96:AZa87Yu4Evyymrdew8UjXp9PZiUZK5QaZuBIiE07Z2myAeKJevlK7ZXO83:P87cxrQwz9kB5QaZuBIiE0GAecev/83","tlshash":"d0d1c7d931c5b06363b364a900bf414ad3b7e7d119de0809e65a95d1be74f8e0163e3b","first_seen":"2023-03-07T01:16:07Z","last_seen":"2026-07-13T18:41:52.736066Z","times_seen":401,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/pics/fundo.png","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.738Z","timestamp":1783436487738,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /pics/fundo.png HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Style/principal.css\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Thu, 14 May 2015 21:38:14 GMT\r\nETag: \"bd-516118b7c7d80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 189\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":189,"size_decoded":489,"mime_type":"image/png","magic":"PNG image data, 10 x 87, 8-bit/color RGBA, non-interlaced","md5":"b5ccfd78cc55c35374c32868e6bbaa7f","sha1":"982eb9831c8b49573000ce31d1666ddc12673b67","sha256":"4eb5c459efc4fca62a756244c3d3395c762f44ca7cb57f1ee27967969312230b","sha512":"bc487f168884a53e0e86a6246dbf3584161603435d44e8df1db878bbccaa6d9974a4c4ce10b7704a3a7ecc271c11bc0eab6ac01c31b03556aa30d50888132b8e","ssdeep":"","tlshash":"c8c022e7b7910ce8830662b2360b10809a234a0a9a2312ca104bbc2c3b53ad82804546","first_seen":"2026-07-05T11:28:48.353655Z","last_seen":"2026-07-07T15:01:52.062719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/processa.php?r=4812.381508253955","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:28.005Z","timestamp":1783436488005,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /processa.php?r=4812.381508253955 HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"action=G"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:28 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":92,"size_decoded":456,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9150a57b42e2049b23f6554bc84fc577","sha1":"4e852ec45e528ec521f98658a409a3b6bd3b2264","sha256":"4091038f6882de3c87baab30f614ab930ca0f5b6ab4f77c31ee93ee7210add73","sha512":"7f2bf40cc7391d925debe33002d1f58f585e1918a07b2970956666d9b7192046da43f43544c922c5427982de22ca611f381ac2552b2cd47362ddafec658f7818","ssdeep":"","tlshash":"bab012a394af80418e806dd405951ea1617416518834c64104cc8061928c4f4028e01a","first_seen":"2026-07-05T11:28:48.356298Z","last_seen":"2026-07-07T15:01:52.040186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/processa.php?r=6457.751242677434","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:31.188Z","timestamp":1783436491188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /processa.php?r=6457.751242677434 HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 8\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"action=G"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:31 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":92,"size_decoded":456,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9150a57b42e2049b23f6554bc84fc577","sha1":"4e852ec45e528ec521f98658a409a3b6bd3b2264","sha256":"4091038f6882de3c87baab30f614ab930ca0f5b6ab4f77c31ee93ee7210add73","sha512":"7f2bf40cc7391d925debe33002d1f58f585e1918a07b2970956666d9b7192046da43f43544c922c5427982de22ca611f381ac2552b2cd47362ddafec658f7818","ssdeep":"","tlshash":"bab012a394af80418e806dd405951ea1617416518834c64104cc8061928c4f4028e01a","first_seen":"2026-07-05T11:28:48.356298Z","last_seen":"2026-07-07T15:01:52.040186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T15:01:25.808Z","timestamp":1783436485808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:26 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v; path=/\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":553,"size_decoded":976,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (373), with CRLF line terminators","md5":"0f4c127864ff12a1bc706a886ad65d16","sha1":"c2ff5b7af8da5d3342bfeee280545473fcd39b70","sha256":"fd122689dd4d075f9b38e6f14b9de74d0a0b74f834b31c41ef7f5253e2b6c48f","sha512":"0c141560ed46176127e0fcd5a4917734622991c087df044ca1cbb193f4bad6a807446333b67b6392d0c4226bfa86129d7f3fea7aa651618c5b93f613f05b0aca","ssdeep":"","tlshash":"64f0209c02725e4882384bb764f3b7a7b4980f000752d042a448728798882c85ea1f9d","first_seen":"2026-07-07T15:01:52.064493Z","last_seen":"2026-07-07T15:01:52.064493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":111,"connect":131,"send":0,"wait":417,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/home.html#150126.shtml-%20KWjx60mn#*IrV$hWNkkMk%B5lZEf*srPTVmb1S0EKBdpcBcDDpcOx84LKJpmJGyw0E*w3IwSNMN#42dGZDzPrRb-f#bM1qmlxjduF#Vz#Z1FfMOlpUWTVjeqmYn94sUh#2PSWHm*afOx!w*35Sa9KaZRm$$@pIdebEYLFwGz#ChtvN8JLIeUBro1HbkG2zYb!UjF575@57*qFWWNjRBo1R0o6NkuRNoV10izrQ*8-FVd9oh5jAQ$Pb7nf4mbWrJc4gAo!QRVgE*aD7On7Z6$aPbiDQ-j#K#MszVZfYmblWMZ","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T15:01:26.974Z","timestamp":1783436486974,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"POST /home.html HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://itauempresas30horas.likescandy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Wed, 01 Jul 2026 10:00:20 GMT\r\nETag: \"30f-65589c25cb500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 783\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":783,"size_decoded":1099,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"9d3316e3a7eb231fc51255d22933015c","sha1":"31bca9725a67536f0fdaee20595936670a06d598","sha256":"71170033556e48b58e894b1286fe87e4ab09e1dbd2c775d264082476b3c0de48","sha512":"87e3d598e6de13814b092ddf66d3dbba205aaad89bb92709efdac397b2731f3d5856ea4888ab95d80cc0f3d3247cf9574bc47ad2c690146cb4162a643e6e41c9","ssdeep":"","tlshash":"4201b1987d52cd1ca36203b949f4f14c5ab2f828d7e1eab5c05734977465f709c8316d","first_seen":"2026-07-05T11:28:48.357717Z","last_seen":"2026-07-07T15:01:52.065941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itauempresas30horas.likescandy.com/pics/ag-conta-dropdown.png","fqdn":"itauempresas30horas.likescandy.com","domain":"itauempresas30horas.likescandy.com","tld":"likescandy.com"},"ip":{"addr":"181.224.24.112","port":443,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itauempresas30horas.likescandy.com/Inicial.php","date":"2026-07-07T15:01:27.596Z","timestamp":1783436487596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itauempresas30horas.likescandy.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 07:28:25 GMT","end":"Wed, 30 Sep 2026 07:28:24 GMT"},"fingerprint":{"sha1":"55:3E:72:8E:96:56:2A:58:42:0F:AD:9B:5C:FD:7B:04:01:80:ED:84","sha256":"FF:53:36:55:DB:3E:0B:3B:64:4A:08:F3:0C:20:7E:CD:8F:AC:FE:78:69:7C:B9:E2:F7:98:31:1C:22:9D:8A:F0"}}},"request":{"raw":"GET /pics/ag-conta-dropdown.png HTTP/1.1\r\nHost: itauempresas30horas.likescandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itauempresas30horas.likescandy.com/Inicial.php\r\nCookie: PHPSESSID=uub8kijtrls1p2flssoau1r55v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 15:01:27 GMT\r\nServer: Apache/2.4.53 (AlmaLinux) OpenSSL/3.0.7\r\nLast-Modified: Wed, 21 Feb 2018 10:43:44 GMT\r\nETag: \"802-565b699e61800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2050\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.53","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:3.0.7","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]}],"data":{"size":2050,"size_decoded":2352,"mime_type":"image/png","magic":"PNG image data, 128 x 28, 8-bit/color RGBA, non-interlaced","md5":"57cd650e357dd8546233c07210534467","sha1":"5d288749126c35eea6fb3d158ceb94b910d081e9","sha256":"be316a5181d7322a8894372e6b86f301ada77ed1949b820f00fe4e1eb4af84ef","sha512":"1d4b49534893d4844bea02411e4e639e789ed6d23c274145a40d952b636a6b55644904617ef9106cf79244a56fbd3308a970ea0142691bd44cb134c4308c6361","ssdeep":"","tlshash":"43411a917442881c85084c7947622185a306e8b49f4cfad4fb425bbb912ac8ed12dcfd","first_seen":"2026-07-05T11:28:48.35922Z","last_seen":"2026-07-07T15:01:52.067518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"itauempresas30horas.likescandy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"itauempresas30horas.likescandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}