{"report_id":"63251c61-a06a-4b45-990e-8963719072b0","version":0,"status":"done","tags":[],"date":"2026-07-08T12:04:38Z","url":{"schema":"https","addr":"mercadolibreui.com","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"mercadolibreui.com/#/index","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"title":"Mercado Libre","dom":{"size":45834,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42298)","md5":"7bd0ef74a5d431809cf17e91e71e8886","sha1":"94f48fdf80774863a50e1edcb95bf0ec69b58232","sha256":"16311dde731367aa90697782999ab980afe236c1d33eb730d0e1dbca52c9fa9a","sha512":"8e198609528dd553e1e14b10feee60af56f0a1a3734f670a06a14fc16de6dbd4b1dfca1915bf7e6cebafde06714f310914c5095e1ab4f442c60aefbe9dadcd28","ssdeep":"768:TaBO7mROMi7OmIB+npSlj9c8RIoebMWrhjUOuRDdPSTAyNHM2hCirM:TaMzO9TmCxd1yhweM","tlshash":"1d23b5fa43388bac68834f69ff72a4b5931f91ed75d14a90543ecab452d35c8e58bc80","dom_hash":"domhash765f87abeb613903f10d84b15b2f0149","first_seen":"2026-07-08T02:38:21.528813Z","last_seen":"2026-07-08T12:05:04.845731Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mercadolibreui.com","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T12:04:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.axd02ww.cfd","ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2026-07-08T12:04:49.380192Z","last_seen":"2026-07-08T12:04:49.380192Z","alert_count":0,"request_count":17,"received_data":1709873,"sent_data":11619,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imgtest1.s3.amazonaws.com","ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2019-08-25T08:51:32Z","last_seen":"2026-07-04T17:34:04.96408Z","alert_count":0,"request_count":23,"received_data":3034023,"sent_data":12888,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"caishizai-tk-mall.s3.amazonaws.com","ip":{"addr":"52.219.124.60","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-06-22T22:15:54.268162Z","last_seen":"2026-06-22T22:15:54.268162Z","alert_count":0,"request_count":3,"received_data":3204420,"sent_data":1707,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"mall-test.s3.amazonaws.com","ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-08-11T22:28:16Z","last_seen":"2026-07-07T10:54:15.107938Z","alert_count":0,"request_count":22,"received_data":2522963,"sent_data":12261,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"mercadolibreui.com","ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":372,"request_count":62,"received_data":5854030,"sent_data":30672,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/dummy_5d3f0a53b9bd6940adb2b9539c5d7d6e.L08RzbJv.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e60032e6beb9ce09115585747452d979","sha1":"ebef60981c0b0449ceabfa851d8a217db4bac688","sha256":"db26d6ba37f1ec5c088768eb769288d9cef1801b37aace30df6069bfdafd5676","sha512":"9ad9bc81c1a799761a154e7d977054d66cfad0bf4ad528cf089eb19191cc6d76950516ecae5d213fa19c0c35f447407a54fca4e184a9fdf8a3c51ebfdd36decf","ssdeep":"","tlshash":"e6d05b1973761948cb2e509605cd3117b0b389cccc6ac1c5116d95f1052b1cfc9d3c8f","size":272,"data":"","first_seen":"2026-06-17T23:14:52.64168Z","last_seen":"2026-07-13T22:30:05.377295Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/IYSEMY2tiIUM.c5d7cfef.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf5cb6d9c29c2c76e350762330767e8","sha1":"2527fe9b4d3181c2ea9696e8e55fd78f8e02145a","sha256":"8b3e72120bd162cb455a52bd9bdc60c9db1f149d47652a1636b7904f52973b7a","sha512":"95d09ad9e8f7686a01cf1f3bbe7ff45a56fc66b683a721f3a1f1bda177cc9e6e1a2b8a7da8b411c96aa194ffac8bd6b507dcb2718f15c38f2309c7f959d499b1","ssdeep":"3072:/ihmq4OdTCp/SMSgVx4jSDwgPHDXez+F4SQ:/ihmq4Cu/SMSgVx4joBDez4Q","tlshash":"e8c30b8cb3957ca93d2fe4a50a2f008e712f6ec4a40d8560f177e8972658dd4f217be9","size":123272,"data":"","first_seen":"2026-06-17T23:14:52.662938Z","last_seen":"2026-07-13T22:30:05.388174Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/chunk-58b68d71.f50b954d.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2279284cb64def3f112505007aaad241","sha1":"9d4011ece5e236608b695d209b016fe5f540ec07","sha256":"bbf4e6d6a787a0172dc4a5d7593fdf735d7b8c5c81439183523fe38ba78a551c","sha512":"61bf2c5ebbb07299a833bc9643d5027aa8bf40e94d659809ab51e1f6d89ce987b0a02507d08729960ccf2adf5946a539a723441a512f2ba99fdfcbfad5adff66","ssdeep":"384:gZsnyX3KsgI4iOTGMElAiXoc3/ZrykhpY83g3:8HKqDOTGeQ/8ky3","tlshash":"af92c84ba482a87c59577296341b2369b0363f85d442cca6b17cdce4d2f8a74732fb6c","size":21169,"data":"","first_seen":"2026-07-08T02:38:21.536896Z","last_seen":"2026-07-08T12:05:04.870248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/chunk-452824fc.c50e769f.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"31cd253eee7cecfe97b2001ac3420b1f","sha1":"f2dd66c197e450795ed2b52deb63436158ba8799","sha256":"a0dda66392e8e101566798f08a778c7b33176bf3afb52b8b59dacccdd7d7bc07","sha512":"51ff1cc9d2ac1bc8fbf5a93468d2418b93da1b4ff56dc22528efe8e621fc39854b5bb06eee0ea390ece25bac840749ad3ff7d8865f97254514c9c890b8a9df85","ssdeep":"192:PnCjfA6isHsuDmLDYRRHEX8bMuMOOme5xqzcictjAfNeNF/BPsGCYC:qfjisHfkX8bMKGm6vPe","tlshash":"365294e6c470a4bd895a92722045f1e0fb643a28d106514ffa7cec9a72ed424333e77e","size":14060,"data":"","first_seen":"2026-07-08T02:38:21.614885Z","last_seen":"2026-07-08T12:05:04.926202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/runtime.ce51e0d5.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd0267b889f522b4b0ec9cf9b9746aa3","sha1":"2c1a3fad0b1f3205d05dff5adc87fcbd6d4124b1","sha256":"b70cb9db555f34d517952b58f88192b24331cad25b1c8212b64235c18757b264","sha512":"d96217cfbef8fded1e5d77da1c4b27c9ede2d332ea98f0592fd6d18733122d36a235e5ffd48621b1d4743021539ac41b9769e4ebfb4d604e1ab50826c31727fb","ssdeep":"96:sM4DUqZUCjOpeBVRVDlo501kIjCnU5R4xNYc9W:sJgqzOpqbNlKMCU5RKW","tlshash":"5ba193ed7399b5b16663b470443fd50b713b2572280e58b1e70be8a7bd388895017fd8","size":4656,"data":"","first_seen":"2026-06-17T23:14:52.688078Z","last_seen":"2026-07-13T22:30:05.369247Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/preload_helper.674b2ac2.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"59df994e508d36d2b04ab0e4ebccfe37","sha1":"da2d730b17ed7ec340f33946360aefa0adea51b3","sha256":"a88a06edac50d4d5405a15d2d795e0adcbea4376e108b43661ea4746fc1dfda7","sha512":"8779aa3230660b50e3d5ddb8cd2da00a94a55fed4d608183ac7972fe84c3d3b43706d5cfdf445d5ea7e2162f6a6897a88ccad4b825f22cd830deac77417b32ac","ssdeep":"","tlshash":"5b31766e76115c68aea52859800f1282717f1b832f05c475706bd8d80e39fc87723d2f","size":1492,"data":"","first_seen":"2026-06-17T23:14:52.674448Z","last_seen":"2026-07-13T22:30:05.329745Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/zlzajfss83f.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7876d0ab7dde46612a4b720973e46c0","sha1":"ee1c2cb1d1cd35d06c64b10c68682f7513e679ee","sha256":"f7b18818be99dd228f1306819a8457d5c0f27ab504ce16f9a7304e28bcfdab71","sha512":"7a150dc86672465f9eee41a421c267930205105b9aa2e8d5df6cdb660764c1e5d91da03acdbb7deb59d37192a2ab4d293cd51cb9f7c4ace4a170c011ddc83a2e","ssdeep":"6144:1UtvO/LpPn4MWzEkEhlcG2oGsFOeOZ+PjZcekEUPQcgCZcBdWMSuOTLzmBw56l/H:N4iNhuqZOZycDq5WMk/Uw5cjpdUe","tlshash":"5a5539ccb2e670954a9221a0cc3f580fb9366e55800cd835e7bee8eabd745099177b3d","size":1336150,"data":"","first_seen":"2026-06-17T23:14:52.696979Z","last_seen":"2026-07-13T22:30:05.423783Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/dummy_0fe6675a139bf4178277a0e2b2bbe5e0.INDqO5TE.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"162dc3232064e37c9ff63cd1fcf0533f","sha1":"dee090aefb5d3dbc7e7c00622b8d76438d0a70b4","sha256":"775cd91cf280dd10c31e7dac45bc16069226c2542013495757324ae3399b1da1","sha512":"f14ca3d797b81481356b39131dcb067687a595f79c9765fbd45c1067a123273c788aad080cd1747dbd1684735c8bd7cf9721416045046e5db46d9dc3ebe146e6","ssdeep":"","tlshash":"45d02e26f1f0204c038a90a6886f0226e0236d800d7e8180822e86180e3828b8101c8b","size":242,"data":"","first_seen":"2026-06-17T23:14:52.661152Z","last_seen":"2026-07-13T22:30:05.387547Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/IYSEMY2tiIUM.cd5d738e.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8067aceb9507f908e49ff939be93035","sha1":"fbbe444eaaeb6041b7a86828f5d52a288d401b93","sha256":"aba689fa775c95f9d0bb811f783c18a94594102de671cb7e09e643779c17cc9b","sha512":"b3a7cb19195e2558d26b39cc784886924fcbb1d61855cef9cb26570f188170cd58f81ab7be8a2b193b3a58657758802ed9fbfdcfd3f188690903632a50fda5ea","ssdeep":"384:BHrFImCa4S2yw4P2CGRARHI9fOZJ3wkxSo7zyBiO61Fr+N6a:BLFx4S2n4eFApAOZJ3wronyBit1t+NH","tlshash":"9242a6b470d2f051877710f5c03f500ae23a38b6785c91a0a2aadce939f555dc677aae","size":12873,"data":"","first_seen":"2026-06-17T23:14:52.661988Z","last_seen":"2026-07-13T22:30:05.339523Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/IYSEMY2tiIUM.2a5affd2.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5edd5fbbd5c81cc271b81eb8bc416afc","sha1":"4c96b21bcb5ddcdcbaeeafe5d18b17e21bd96620","sha256":"baef72d5d1e0df4431e93d77d4d5ea00eb6ae51aed44b8aa5500f6388e5bb199","sha512":"6223498ea547ad382ebad824c54bcb6691ba1515420c00f4c72ef9f7494b0fe2ff43b463111e9e7b1daf6166b750ddb1abe4017beefa3ffbcabe79f06e867791","ssdeep":"768:fSFqLO7OLsi4fmxY+DAOAilRInRkl0dhJO3RDdCwT5+NEZHypwOXd+sgBOrfiBTf:fSFCTtAs+vIdT+6+xPg2fiTM76","tlshash":"32430afe53689bac7c834a79ef37a475a31fa1a539914690207eca7012d31dcf24bd80","size":56170,"data":"","first_seen":"2026-06-17T23:14:52.692589Z","last_seen":"2026-07-13T22:30:05.415467Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/vendors~app.febc367f.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e0fa42648eaf09698aef156d310cfd","sha1":"83fba1c1859ea4ee5027eced2292d813816d1eb9","sha256":"f6b7441c742afaf83daf3230c7a019b4898c4eea58d0f099fe55ba7bbbd12d5d","sha512":"68f41c2c05c21046115d2ac6c367c35b470b302cd2b614f01993b3c298ec14d28dfb2ea8be7840363a2c1010cc6e97e32754bcc80ecd8e1ea6d04a5d6f7c3e61","ssdeep":"49152:cakFQaIVX0IIdfUzPM7U0/FEvmzsEAqKia0T8nzThZ/ACHY/31px:1kFbypPM7U0+mABi783h+CHqjx","tlshash":"3ef5b35c364af340915ad0e7e43b3c49d26ae589a40b00d07f7187f31eb574ae7aee26","size":3538267,"data":"","first_seen":"2026-07-08T02:38:21.787086Z","last_seen":"2026-07-08T12:05:04.945752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/app.ed91c719.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f2d45522afdc26cefb6f7e2f5503628","sha1":"2a10af788e3a22ae4a5859656e5040fb41a4bd03","sha256":"1cfe925b3e5ceba8600134131995be09bd57b1838467968ba047a1d5f98f5c6e","sha512":"ae29d1a4e032bcd06e80c770f8be13d533ed705ca74d3a8e20f40fade127916b29dfe25a00bbb4f8476849146bc540ec203ecfd295a5015289f7ba9da52b2462","ssdeep":"24576:mzBbUulA5rtm6O7NopE2Z/cz9aBSlBsvYyVmsZ04dbuHAipuAYrI6ijOmMHKhP0i:mzBbUulA5rtm6O7NopE2Z/waBIegWZbw","tlshash":"29458edf67e973f808984653a04f397922dc1cb9fb96f4e008edd61922e5d85c213b29","size":1271673,"data":"","first_seen":"2026-07-08T02:38:21.788375Z","last_seen":"2026-07-08T12:05:04.946832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"urlParamsmap[actor:server1.conn0.watcher14.process8//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[autostart:map[configurable:true enumerable:true value:1 writable:true] channelid:map[configurable:true enumerable:true value:4259ff95da004ee2b1fa932ff01afbff writable:true] from:map[configurable:true enumerable:true value:iframe writable:true] isback:map[configurable:true enumerable:true value:true writable:true] params:map[configurable:true enumerable:true value:{\"role\":\"buyer\",\"source\":\"buyer-web-monitor\"} writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://www.axd02ww.cfd/chat/zlzajfss83f.js","line_number":28,"column_number":44570},{"level":"log","text":"startSessionmap[actor:server1.conn0.watcher14.process8//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[autostart:map[configurable:true enumerable:true value:1 writable:true] channelid:map[configurable:true enumerable:true value:4259ff95da004ee2b1fa932ff01afbff writable:true] from:map[configurable:true enumerable:true value:iframe writable:true] isback:map[configurable:true enumerable:true value:true writable:true] params:map[configurable:true enumerable:true value:{\"role\":\"buyer\",\"source\":\"buyer-web-monitor\"} writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://www.axd02ww.cfd/chat/zlzajfss83f.js","line_number":28,"column_number":26862},{"level":"log","text":"pollingEventMsgs:map[actor:server1.conn0.watcher14.process8//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[interval:map[configurable:true enumerable:true value:5000 writable:true] signal:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://www.axd02ww.cfd/chat/zlzajfss83f.js","line_number":28,"column_number":8645}]},"http":[{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B0BMQ8WCNF/91fTDjI24bL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.131Z","timestamp":1783512252131,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B0BMQ8WCNF/91fTDjI24bL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zAE92dCDrbZKN31tKL9yLzTFjM25GEE1eAgWTB0qChQ4x3YLn6Wuul2q3W7M4uO5B/JqYbksM/0=\r\nx-amz-request-id: 6M5RFX677QK0RWTH\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Tue, 21 May 2024 22:38:25 GMT\r\nETag: \"d97df150aeb10281fef09028e4d07108\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 720fe80f1335b908e06827689e13021992f6c937ea3d4677e68ba28730e529c2\r\nx-amz-meta-s3b-last-modified: 20230414T110922Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 414495\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":414495,"size_decoded":415026,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1229, components 3","md5":"d97df150aeb10281fef09028e4d07108","sha1":"a7606a2e5b733d842b2af8379dfdbd82c216311b","sha256":"720fe80f1335b908e06827689e13021992f6c937ea3d4677e68ba28730e529c2","sha512":"878e28a4eb570611bf54e4287cb7ff3cf5a039ec4459d4364bb632410fc0e182941f7120f2a9b6852732a68d31748fcebf9a948e656b87eed226b8f9cb4d284a","ssdeep":"12288:S5A9jNzghSx78Ew0WXf/sJStZ50HN2kYH6aXvFhI9:S5+0ynWXnsJYzo2kYTXvTY","tlshash":"db94238d1f8ec82ce01f6db3bc6134d0112d2fd97659dad5dae56f46005e2a49ccf2a8","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.971482Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":1366,"timings":{"blocked":780,"dns":0,"connect":0,"send":0,"wait":125,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.704Z","timestamp":1783512252704,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6W58BPfvWqzNo2R19OKElNU59zG5oGtqhMM79nQ/3jD28/j7ffTcpTLVftCrWVXrjyFSh+morgI=\r\nx-amz-request-id: RKACP9YMWBC02E9J\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:02 GMT\r\nETag: \"8c00ff5e70d17f3ad0a9b1b85f0ca0d1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 41631\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":41631,"size_decoded":42028,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 647x1500, components 3","md5":"8c00ff5e70d17f3ad0a9b1b85f0ca0d1","sha1":"821b82e6b725f4a90aa36d51efc1a362e33b53cf","sha256":"41d72946e6b8fde800f2bb6b1ce9f6be2b286f437f1abdd23595a144bd5d1427","sha512":"7bbf0279cc137f96fd2c7a6976af80334de90ceda385bdd26da2215dc52f96f5fee9a68428c5883c7a2bf21755b6c01597c8aa9e40e971de13d550c31027793e","ssdeep":"768:1qE70EERqK41pSmdbAENaZKhNwJ/qdLbSY11ip73BTkEyF06n:770FNGQcbrMZGgCdVip73wB","tlshash":"f813f11b3b62a61ed1dbad36d45b72018ce0fb1b33c1848f6e62346135c6fd40b97695","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:46.011048Z","times_seen":2369,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":534,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/css/vendors~app.37854dba.css","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:04.376Z","timestamp":1783512244376,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /css/vendors~app.37854dba.css HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:04 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"248557-1783448003228\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248557,"size_decoded":43051,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9debd22fd10565e10cdfe3e5eac95963","sha1":"bde0977a2f504da24ed747f5d5ca662de8483717","sha256":"bba434151e1650888222995665dc13b2e1237c0e52dad3fb4ac79fbde65cec9a","sha512":"996403e4e4a314d5e24a26c2784f9056411e59c682ef4163abe966a2d307a64babf7609f4a554cbb269785a0f41ab91316001622fac7a1a91efaeaaadc3e6d68","ssdeep":"1536:n728Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/eU:AtKw/27eDLL6ob6v7f65WCXkb","tlshash":"ed34b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2025-08-17T01:17:52.90845Z","last_seen":"2026-08-14T10:59:45.946447Z","times_seen":33,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.581Z","timestamp":1783512251581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:12 GMT\r\netag: \"6a31f7fa-2b1\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\ncontent-length: 689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":689,"size_decoded":986,"mime_type":"text/html; charset=utf8","magic":"HTML document, ASCII text","md5":"3d2e15cb242f9441737480678201ada9","sha1":"8b7c66c04c4087c80d6fd09a08ee8e46e88ea9bf","sha256":"3710133a54d0ce5fffa5c78e86710deb676cb0d55d7ddb891f5f180f59030b67","sha512":"f00ca3c6406f407a4921a4ead9a0f7cbf474f8d73ad1f5f7cd328dd34818c01ebc06d20554ba7fbae1efd158a3dd0dd3c2f4106740f940c44e5e4443ba611477","ssdeep":"","tlshash":"7b019e83acd9c59d02101d9955f4f10c878b6ecd9a82c8219af4a2774e76fc88c53d28","first_seen":"2026-06-17T23:14:52.635593Z","last_seen":"2026-07-13T22:30:05.419741Z","times_seen":29,"resource_available":true,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":275,"connect":268,"send":0,"wait":275,"receive":0,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/home-icon6.7e4a52f2.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.646Z","timestamp":1783512251646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/home-icon6.7e4a52f2.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 475\r\nConnection: keep-alive\r\nETag: W/\"475-1783448003201\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475,"size_decoded":756,"mime_type":"image/png","magic":"PNG image data, 50 x 54, 8-bit colormap, non-interlaced","md5":"7e4a52f2b954e5eb39950e443b8c4b8d","sha1":"8632420c4f38d0639bd0cd502f62af7389ae7098","sha256":"83b5eedcf36a1a9723a1a84461644293a756df9642597ef56eaa8d80723b9a4a","sha512":"fe153cee5fdab5da21b128cb7f58a2899f52aca59629aa2d63886b93147a57aa85492fa24981825c5a60a6f89a83ab4e925c25970f298beef586d4d613df695e","ssdeep":"","tlshash":"25f0ab4127902610e80c3324241122acef753ca8653607aa38eb7452e0be15524ddf75","first_seen":"2026-06-29T00:53:10.730911Z","last_seen":"2026-07-08T12:05:04.850302Z","times_seen":4,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.909Z","timestamp":1783512251909,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 44\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":357,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T05:14:19.490252Z","times_seen":7392,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/api/chat/visitor/getSessionMsg","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:15.680Z","timestamp":1783512255680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"POST /api/chat/visitor/getSessionMsg HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 92\r\nOrigin: https://www.axd02ww.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":92,"data":"{\"userId\":\"520ef0bcdd81485e9729530cc6600fa4\",\"sessionId\":\"852c2fd009eb4fcc8a81367fbaa34634\"}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 12:04:15 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":244,"mime_type":"application/json","magic":"JSON text data","md5":"90ab6048b40c0aace9c01433a5da002a","sha1":"92e83ee8b816f9acea246e40f0953091e0d3c0bf","sha256":"10321ae3bdb51bde0e06da79bae2083fdb81d9f5700cc68b8f72573227688588","sha512":"5f46dd013ba83a0439888acc007a1e6432a61ecabe4456a4f29bbbd4b61b59f4d167f98cfb30757bf36d62d40e90f018635879ca327f4b6ae756fbf724715b60","ssdeep":"","tlshash":"679002502d14ac242a034045610e954404a4205445502165089892256640a209402924","first_seen":"2026-03-01T01:55:36.673799Z","last_seen":"2026-08-11T09:08:26.562308Z","times_seen":37,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T12:04:02.333Z","timestamp":1783512242333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:03 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5441-1783448003219\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5441,"size_decoded":1654,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5441), with no line terminators","md5":"2a1beb009aa4b09f5a5ecfaf465e84de","sha1":"b35303a2f87c178c9e5590b1de914643a9036613","sha256":"18a53e62ec86bb8ab1c87a332d5e3f71c749f694f6ba4ff05bfe27fda2df9707","sha512":"e218f561984e6f0314934328ad7fa809e9b5f6431fb177e4642f73c628fc554d979f84cf0a50112356b32ff7486b0f1e2a85912b2969c1f38ee21cfb8543db7d","ssdeep":"48:/WgzQ9sQiE6Sru8HbgLTGxu7zSZM0uJENubhd3GC2eE7G1A8W:/WMQ9sQv/077zSJy+2La7UW","tlshash":"d4b137b9da44648fa9f0de879e28f72be9cb8d7b1430e040d554d84fd868fc4166b893","first_seen":"2026-07-08T02:38:21.594573Z","last_seen":"2026-07-08T12:05:04.85214Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1802,"timings":{"blocked":-1,"dns":703,"connect":280,"send":0,"wait":282,"receive":0,"ssl":537},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/favicon.ico","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:07.207Z","timestamp":1783512247207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:07 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 103019\r\nConnection: keep-alive\r\nETag: W/\"103019-1783448003219\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103019,"size_decoded":103309,"mime_type":"image/x-icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"0acd9d87293ed7964d517da4019e8a93","sha1":"38944a038f76d60fcdc9f220027c37ebe0aa51ed","sha256":"89650bfb7e86ac688e28996f1065cf87660796cdff61ee9a4750fd8b7cfbe89b","sha512":"b9e92b66b89ec9494760c301a9027dea413f930a0a479a1dcba3a2c260e0e282d8dab84393562d26a25591440ba6602a7f631402960daba897f118d26fe650b3","ssdeep":"1536:PJLWuR/H/ps9ZfBexXb9BVUx0kqoRYJHEseyiAg4t2T09GuyQfS7kcIDnNPQhS8v:RJHSQBDgTqjHERydVyJQfS7kcqhk3","tlshash":"75a302a4ed0f29b2620f3fc1ad6c0c79987d43a6d87d925ada40d67d3985ed38c20f11","first_seen":"2026-06-29T00:39:55.464423Z","last_seen":"2026-07-08T12:05:04.853779Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":760,"receive":572,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/tw.ad794073.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.622Z","timestamp":1783512251622,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/tw.ad794073.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1128-1783448003195\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1128,"size_decoded":1460,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"ad79407353cfa0673a8e81707d171685","sha1":"598f39d333ed1b825b6ece8283259774b1816b70","sha256":"eb4c8ba083d9e669dbb1c2ce6417db8065ad1ac5faaa304e61e9d6eab9d03c0f","sha512":"9595d2f2ff12b162d5eef05429a46165428543ef2a60f8eb6dbc9e03344688fba88adce657607fc4256c647e632668442ec44fb297beec4b21255d20c007dc06","ssdeep":"","tlshash":"4a2189d266d1d871df9ac136ea4d1602a357fc373212e15f3d6048830d40ddda5dc194","first_seen":"2026-07-08T02:38:21.609606Z","last_seen":"2026-07-08T12:05:04.85472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2272,"timings":{"blocked":1992,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/home-icon2.fd9126ce.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.640Z","timestamp":1783512251640,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/home-icon2.fd9126ce.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 554\r\nConnection: keep-alive\r\nETag: W/\"554-1783448003196\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":835,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"fd9126ce97db53f353c3e9ba384fc9fc","sha1":"55862549c728d731514073114c8d1bdfdce11ff8","sha256":"eacaa2efa38b625e69832a195dcbaf5c22577ffc260e099f2e4b5bf504c2c937","sha512":"39135d04c5d59c5cec93c29d9cd9d988325928557b6c2ea598d2be3d05740fe470861152955d87397c2992fe256d986743362d5b9001be99775eff7d2bbc591b","ssdeep":"","tlshash":"09f0d4d6ca2aed218136ce3bb481f5c9dc0f5c0770e56376160abada6e7a014656f3f0","first_seen":"2026-07-08T02:38:21.620076Z","last_seen":"2026-07-08T12:05:04.85581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.976Z","timestamp":1783512251976,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YSaJxdcbQr+8fAStR2GGLHK6PKQnYW0XyqTjvjv7DJfe8k1aEKbae4HvJ3xXsSOqZztz+UkXJMk=\r\nx-amz-request-id: 3AXFZ84ACEGEEJ29\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"0527d1653d7ad2d9fce0c6e3e6ff3f8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 17300\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17300,"size_decoded":17697,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"0527d1653d7ad2d9fce0c6e3e6ff3f8d","sha1":"96f83c2be0860f8d33bda1e5955d2f69e1947cce","sha256":"91d6492646ed09c0cd914e6d6b5756d5e5ce01c44334b1e4fe035ead232a3f00","sha512":"a52945f8f23f05aedb2288cf6da590d9cacdeb9c07cda2e165f751c8f5eab3a752061e605e778f3c374481c4b1661d99be9d5fd8962d30e5cc3e4f5f007f2a61","ssdeep":"192:Gdel8vIA3KMvActt7vDzEu/L38lmmDOTORDpUcQws5kXMwAjdMubITDpgO67jTf:GdSnq/tt7vTLAnyO5skTAjGJTt67","tlshash":"ce7216179d089dd3616cc3e5bf060eec7f9a5758e8063def90a10fd93b206878d8946a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-14T05:14:19.477217Z","times_seen":9957,"resource_available":false,"data":null}},"time_used":2325,"timings":{"blocked":2207,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.977Z","timestamp":1783512251977,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: H8p3A9tD3XFNOjBgI2Qx0ce9hLM34INfv5UQ8RdQ7QTiqIr/zlA5wrnMrPeVTaVmrwys9kdI2Fw=\r\nx-amz-request-id: RKA975P6296696E8\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"6a85f34af56b3c034d5137d4ec807895\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 49034\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49034,"size_decoded":49431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6a85f34af56b3c034d5137d4ec807895","sha1":"75fd4cec7f44e8b8f20655dfdb165720d7223bd6","sha256":"67488643bc9d3ae11bd5cababff694c1f7a131c289d81eb79e25576f78dd4fa8","sha512":"d827fa0cf605ede5b060c72333d4552c1a930b0d8eec8052ba78949ea5e54a58bf0addbef05e024159a196589abbadef866f8c4d5f3c34722ebe1d9757563f9c","ssdeep":"768:G6O88eZQudaEcS6tJCXfvmmxmxwc3ndr/8wP/x49gE3bjt1Txv7ZJ:G6OYAESJCnm2IF3t/8wB49giPdFJ","tlshash":"5523e18725805ee3352fe3f6ff065ae80f088f64d1263edb21e54f98b312a238595428","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-14T05:14:19.415691Z","times_seen":10073,"resource_available":false,"data":null}},"time_used":1729,"timings":{"blocked":1612,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/home-icon5.8180c58f.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.644Z","timestamp":1783512251644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/home-icon5.8180c58f.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 674\r\nConnection: keep-alive\r\nETag: W/\"674-1783448003194\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":955,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"8180c58f8891dbf60a78fb243a99882a","sha1":"49e9e1a01bb3a54c190cbbace85106e7591d2468","sha256":"ad2a78f98c80412854c7ae5f459a38f81c01995c1dd38b72d8998f478c78b63a","sha512":"c77eb5fd4300695a6040de1db019a747d8d54e7c1f3fb180c6c55f29f0783080fc2f5457e56366f5d199eb8fd3e5a58eafe8622dcb31c098282f606a893f7ce5","ssdeep":"","tlshash":"b7010261adc0467e2dd6121ba0c9a4d0fa68ae3c8039a45f91827c54afb6021e944e9c","first_seen":"2026-06-29T00:53:10.708493Z","last_seen":"2026-07-08T12:05:04.857946Z","times_seen":4,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caishizai-tk-mall.s3.amazonaws.com/type/2026-06-02/22592bd7-2f04-40c0-b420-112bb0a704f6.png","fqdn":"caishizai-tk-mall.s3.amazonaws.com","domain":"caishizai-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.124.60","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.911Z","timestamp":1783512251911,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-06-02/22592bd7-2f04-40c0-b420-112bb0a704f6.png HTTP/1.1\r\nHost: caishizai-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7TKoQbgMpm+BEGtijo+u952wmQomDYelEcjor90QxCN6Sw8/jsODS31N/lCrYGuYZpI4FAYke9A=\r\nx-amz-request-id: 6M5ZX82G2E6TSGT8\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Mon, 01 Jun 2026 17:04:32 GMT\r\nETag: \"5f04f24bcfb30188f8542d346e4032ba\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 1687519\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1687519,"size_decoded":1687956,"mime_type":"image/png","magic":"PNG image data, 1340 x 912, 8-bit/color RGB, non-interlaced","md5":"a16d64ddb5950963d04104cfb2980c94","sha1":"0eeaf0f7e04fc2b81ee7f7f8c8c2e40ff63602e1","sha256":"9111900835ded6f7a2074264b2e203e804b919932c71ede045e3056069c58b27","sha512":"1be144df544c17de13bf73e4e9980187e52199b33edcca95be50b9d956e60b8dc08bd71b7de4b4ba8eec2828ed399c8a042b5148f3ab277744a6f3e90f799441","ssdeep":"24576:QUfUq0ulo7AD8bxTHz2xne+MPkbvXU7BKIGRAnevpDLCl9z1:QGlW0DgxzWeZPUCKIGTDLCb5","tlshash":"d42523cae8c1f3f7c4278cfcef6c8fa96573380749b516904989a660ad792d5c92436c","first_seen":"2026-06-29T00:53:10.749009Z","last_seen":"2026-07-31T06:32:59.663808Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2862,"timings":{"blocked":96,"dns":0,"connect":270,"send":0,"wait":331,"receive":1624,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.971Z","timestamp":1783512251971,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mh1ZXyjpw4GDXl95c7ebZr+nSNoBGQGnKSYQzHTvzyqBbLaYA1lwLiO/5LTpku5885Mkx1VZmE4=\r\nx-amz-request-id: 3AX37WDHQC8XEB2P\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"74ce2539c3d1d018eb92f94dd3b9bd23\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 40407\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40407,"size_decoded":40804,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"74ce2539c3d1d018eb92f94dd3b9bd23","sha1":"1ed07808d60d8ff4965899591136f4f1ccc880e3","sha256":"5a3f2be7dd8069790a3bb5098aa704996a51c1c689459abf286b29a0a99a3d26","sha512":"2b962643ae9c9c3aec2caae066500f422473d23eab84cd3dbf14dab1b1bcd25fa0cbf8914f6a540b724b78fef89f4c952873cc2de3e733886f9fe03a57aa3fec","ssdeep":"768:G26vbkDR8P2NFi0uyoJ6TlcoZVJixSS/+Q1irAGMk8P2x9rzcXyz:G2kQM8Fi1yZTlZVMxSmwXM5gcCz","tlshash":"a203e027dd508ec7b10dd3fc7faa7db8839d5a01a58473de20f51c96332584a4e6b458","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-14T05:14:19.406463Z","times_seen":9926,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":1972,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.699Z","timestamp":1783512252699,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: bKrtaM9goIiggGNED3gvmPyLsjvMTPZHJMQnhWtmySx4vLbzkGoNKZNiboMtUl5lVnOBsVcDZO8=\r\nx-amz-request-id: RKAFGFFSQGM0BX29\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:21 GMT\r\nETag: \"5eb7c18e0164431bc4ebd5432142d478\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 62006\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62006,"size_decoded":62403,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 992x798, components 3","md5":"5eb7c18e0164431bc4ebd5432142d478","sha1":"0e7463b4754fba04259090a3e6c70865b6acde18","sha256":"c8e8e1655371e5817147fb849721d215226bb8f03e99bee89e9b3217f91187ba","sha512":"0dfacb79d468692bb1e777bfc2311eb6ae4f4de8d4f1d4f273a6e918a7538cc7f7450c577a7978b281b8c7c8a8f1cd224675df0ed5af052e11f82ec4acbc3af5","ssdeep":"1536:VBqvv4Wcx0q5rQdsUVr80gBJB0t+QZb2sG1/:wv4Ws0gUyUVrRgBJo+QRGR","tlshash":"0c53128569a9b165db633ab88e06708efc0f2ca6eef70074210dd3d93074af1bd4a45c","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:46.026353Z","times_seen":2474,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":473,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/api/chat/visitor/chatStart","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:15.345Z","timestamp":1783512255345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"POST /api/chat/visitor/chatStart HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 230\r\nOrigin: https://www.axd02ww.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":230,"data":"{\"channelId\":\"4259ff95da004ee2b1fa932ff01afbff\",\"pid\":\"\",\"params\":\"{\\\"role\\\":\\\"buyer\\\",\\\"source\\\":\\\"buyer-web-monitor\\\"}\",\"userName\":\"\",\"userId\":null,\"email\":\"\",\"phone\":\"\",\"groupId\":\"\",\"adminId\":\"\",\"previousUrl\":\"\",\"challenge\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 12:04:15 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":267,"size_decoded":405,"mime_type":"application/json","magic":"JSON text data","md5":"08eec71cb2be10010b6703abff1030a2","sha1":"217fb971b0261c3db8b30c8a5c60605340e10505","sha256":"38a383e10265cddcd25e8aa9884dec87cb3b5350a26c899128801ea4916e09e8","sha512":"a2f42e427fc79d9bac424dfd12ebbd4f5c02fbfaa68801481c7bb23f2dd62d3b1903500780f630ee79fe5669be4a55edce1d4cc6b2bfb6f3b548439c47985112","ssdeep":"","tlshash":"3fd07580a82d4c3532430071010e0a440f1c10a7f88c3ca6c3fd0f2495dc5e8c340c30","first_seen":"2026-07-08T12:05:04.860174Z","last_seen":"2026-07-08T12:05:04.860174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/ja.db66ca62.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.627Z","timestamp":1783512251627,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/ja.db66ca62.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 647\r\nConnection: keep-alive\r\nETag: W/\"647-1783448003195\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":647,"size_decoded":928,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"db66ca6209964d988f1c7ffaf85b780e","sha1":"c8ba5d9e4e1cc973e850510227aa280bf05f70cf","sha256":"6e1b8a7f5fae77a12cdabfb9f078ea0811b6618b5072f8f245a5d6a737fa2570","sha512":"ca3b923561ff4dfb031097649906e23f218afd1834cb638a6e346f025db297a67f5c70ae4591662705f3b4349fc8bc1ea86427255692c64d19934b5bdb5d5e17","ssdeep":"","tlshash":"e4f00c2ee587523b417d2a8a4b83784648305cbaaa31c5c6e590f3ef463116cf5603b6","first_seen":"2026-07-08T02:38:21.540533Z","last_seen":"2026-07-08T12:05:04.861326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2359,"timings":{"blocked":2076,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.983Z","timestamp":1783512251983,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: moG2DcrB/WQzwW2aYt/+0KUn0ptzdxG5/3okVdQh4Il8oOoe1IWBvVSTVkc4VyOWYuA9VkQFW8I=\r\nx-amz-request-id: NAPTKEFFJMWZKSGS\r\nDate: Wed, 08 Jul 2026 12:04:18 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"3fb702f913ff64c272d67742c3fade6d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28164\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28164,"size_decoded":28561,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3fb702f913ff64c272d67742c3fade6d","sha1":"9d59af9b1418caaf57ed3f938074958affbdbf5c","sha256":"effe7b76be1c47da3ab9aaf81e6542743506dc40affd341687094417a4feea49","sha512":"1be15380d11c4c57f3ac922aa8d945afa256b4fda813b5254fe3ec2fd8b01fc242c8f9faf79a25245626438240e63d8c68bc1e3dc6c8ae1569b363e28f99c817","ssdeep":"768:GkLEEqGMducsX2FbPZlrPr0YFveH2fzquxgfI:GZXvducmObPZlrPoYkH27hl","tlshash":"3bc2278b59484ed3a46d93e5be970e9c6f453b4ce88229ff10924fd77f202664c4d02b","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-14T05:14:19.531836Z","times_seen":9936,"resource_available":false,"data":null}},"time_used":5551,"timings":{"blocked":-1,"dns":0,"connect":107,"send":0,"wait":127,"receive":279,"ssl":5038},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.118Z","timestamp":1783512252118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tn6vtEHmYwh5dy8CXy32YfCWGCyAFDgpTyCzvvNGeBcDKN0m2schN3JojMkXq1tZ7S8waRfAnis=\r\nx-amz-request-id: 6M5XDQ44N6MD9NH0\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:44 GMT\r\nETag: \"cfcc313a94dfb8530acb5ecfe5dc53af\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 132447\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":132447,"size_decoded":132845,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"cfcc313a94dfb8530acb5ecfe5dc53af","sha1":"4ce68057416501691588568831526f3f621377e1","sha256":"616cefa8fa49014d34e31d96d913620bf5252ad75654db3924f71a05834202c6","sha512":"fc051b5d6e2a87267ee275655fb446499cd4f41eca27a43c7e3666fedcb37364e65086055b0668434a8e8f0c9ca176c4f9570de51dedeb85e37304804be91846","ssdeep":"3072:ErQx7WJnVeTJWMRXz15rKYLbYeZu4G+gqg44O0wZfeN7yC:KQOnVMgeyH+Q4WWfeN7F","tlshash":"28d312c06b111bcbe5c83fb5227a928237e772399493fd323981d26e59d1c78a237d42","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.953627Z","times_seen":2401,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":234,"dns":0,"connect":95,"send":0,"wait":135,"receive":278,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0842PRXT6/61tbbK8RkHL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.133Z","timestamp":1783512252133,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0842PRXT6/61tbbK8RkHL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HtnCrR1gh7Z+APuPUWsM8985E66oEQHu9wsRkk2k4wZymEuYeS8858OgPLmNQo6EVlEPjUuc+ds=\r\nx-amz-request-id: RKA62SZJ3PFQAYDE\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 02:59:56 GMT\r\nETag: \"63e2fd337fbf2929ce3fe246e90ba31a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 2fb50a8c3ba54fbd84dc3342532f989e76ca7540832b7c4931d8ca33db55213c\r\nx-amz-meta-s3b-last-modified: 20231026T124629Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 75594\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75594,"size_decoded":76124,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x687, components 3","md5":"63e2fd337fbf2929ce3fe246e90ba31a","sha1":"bf2750fce56ef9ad51e4a5d8a50abdc336c058c3","sha256":"2fb50a8c3ba54fbd84dc3342532f989e76ca7540832b7c4931d8ca33db55213c","sha512":"64a18a9024eba918294bf2bc6d7ba454fe08f1f1ce6dccf2b30f08dc6d2b0a81eb96f47bfbf99e0a74c50180b9c4b0ed4d657a38da176ba2106c81b49b808e01","ssdeep":"1536:Ub+La/D2TkPb7Jg4T9L9KLKTs2ZWvPA8UJIIZcbV2JUwgrDx1Gxz0:FW20Sgsys2YI87jMJUt1+o","tlshash":"867302b3fbb063b5d52498b121054e29bf939a38f8c09ab3a962873734e4ecc58c5595","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:46.030239Z","times_seen":2274,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":832,"dns":0,"connect":0,"send":0,"wait":120,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/api/chat/visitor/channelInfo","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:15.037Z","timestamp":1783512255037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"POST /api/chat/visitor/channelInfo HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 41\r\nOrigin: https://www.axd02ww.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":41,"data":"{\"id\":\"4259ff95da004ee2b1fa932ff01afbff\"}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 12:04:15 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7780,"size_decoded":3355,"mime_type":"application/json","magic":"JSON text data","md5":"a5bb4da8556d6708aa4fe5bb738aeba5","sha1":"93b254474b8a3a4e7b2adfe32eb5a11d971c506b","sha256":"7f0ffe176591d76efb94527b4aa1b32502911ee24121de2be28036176380dc7c","sha512":"e95c87520e89145ebe83971fbaf44e6c23aac8ca7d6990af28fd57a53d6fb9c74b742c8a04a7de45122f5edb34feaafa0bb2705c5c60c2ba35614a122893ccdb","ssdeep":"192:G5uSZmYue539gdg9U6dgBg1spt5Q3utqnnlLnrBu1:GdwnQ3u+LrBu1","tlshash":"8af17485912ccc6a6212189f02ff3d1ac56e936bec816f6cc55def6603ea4785b13609","first_seen":"2026-07-08T02:38:21.683447Z","last_seen":"2026-07-08T12:05:04.865045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.995Z","timestamp":1783512251995,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BPP3iR3+Yuy5iLpzomFMlphTLu7eJ7DOKdPzPvvU1hMUkN71D023w5NmCNjgBeI6H7dKnxqnkpc=\r\nx-amz-request-id: XV8R7A7QB55GQCZJ\r\nDate: Wed, 08 Jul 2026 12:04:16 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"1e463b0bfc58cbe93de38ad62f2ac7ee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 21173\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21173,"size_decoded":21570,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"1e463b0bfc58cbe93de38ad62f2ac7ee","sha1":"ae83334518cc12da8587ae98f78a5dd7de9b7a98","sha256":"de1fc345b3fe2ed5fbac321243e8814cd39a37a5554fa0d6b665284da90a6e28","sha512":"e29d51e79e7609dd12e1477a117b2af83259505557ba520681172019687275acc73b92129559a74a03b0f5fdd649c169f5301acbab3c599515ff1a89c1cc4afc","ssdeep":"384:ADUu/oKRfXu/25fNvZ4ZpZKbPzjApEZWZ7CJTa/kKfwu:96b9fNvZDfAEWjvou","tlshash":"0d92d01ded906352d745e472b7e7daae1d0c09d8a31c98286af1cc0b98363193f774c6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-14T05:14:19.407866Z","times_seen":9503,"resource_available":false,"data":null}},"time_used":3154,"timings":{"blocked":3032,"dns":0,"connect":0,"send":0,"wait":120,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.115Z","timestamp":1783512252115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cemSRDXElYR0zAEq8W+aMpRbYmDX9e3JX+LgJTQtRe5+TNdJoIdveYmOBtu477TrBGAoXW+sZOo=\r\nx-amz-request-id: 6M5TW9C692A115WE\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:09 GMT\r\nETag: \"963cb56e987f75139a4206e2853821e6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 234396\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":234396,"size_decoded":234794,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"963cb56e987f75139a4206e2853821e6","sha1":"ce71e1769f7261cd7b9a24961ad20fb7a59020af","sha256":"ca1da66523d750de307c04335a1c1c6a4a5984b6e18740d6a9b5d05328a83eb3","sha512":"32b60068394c931060c1753e698783852cf5287a33a02520531964297d9f7c9b2a075a104400d58371a38b39e90f79349952df52f99ce456d4a43da248fba813","ssdeep":"6144:hEAd94lqhbTQUovlU065PNq7FHQpTmsx/:hpd94lEE/Nc5w7Fwt1","tlshash":"de3423f953a91d48d25c2b303153934d7ebd68f3ebe22b319440240b0efd590f55a5ba","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.980609Z","times_seen":2495,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":210,"dns":0,"connect":93,"send":0,"wait":117,"receive":298,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishizai-tk-mall.s3.amazonaws.com/type/2026-06-02/50c22d97-9b12-4c5a-ad1b-af2d0890a1ce.png","fqdn":"caishizai-tk-mall.s3.amazonaws.com","domain":"caishizai-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.124.60","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.908Z","timestamp":1783512251908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-06-02/50c22d97-9b12-4c5a-ad1b-af2d0890a1ce.png HTTP/1.1\r\nHost: caishizai-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: uYIYmixj5oqAaVOKhUC73gvJ1GJ3GM1VypHToWY2WtcxUxGsYcCGCm6nlpaiBeA41gnbMYe0mXw=\r\nx-amz-request-id: 6M5HWV2AD0XCGR6F\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Mon, 01 Jun 2026 17:04:07 GMT\r\nETag: \"d3691afa5322874c67e3acd9d86f82ce\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 616244\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616244,"size_decoded":616680,"mime_type":"image/png","magic":"PNG image data, 1192 x 671, 8-bit/color RGB, non-interlaced","md5":"d3691afa5322874c67e3acd9d86f82ce","sha1":"1e509d90332a9534dcb2814ff102898b23a05c36","sha256":"24ea509d73cc4fd3641b213dd5d4c7c4d1dc6c4f673fad579755644d1a9b690f","sha512":"9e7aacab1a8a2b8bf75b2cb8b00718d5b7ce8c8677c66a5e1c9c257c5024b8a6f01d0d53746b9f2d6c8c7da6ecb29d0f7d2f36a0a31d08a2f7e69d7664292605","ssdeep":"12288:i/OLOeGL6mrGwl1c2wgQaf1J62VSzQDhMsT59L8XJ+Z1vn06RG:rOgnoLwgQatJ6waq/L6+Z1vn06RG","tlshash":"45d423fdcf4973b5695b9acdc1b6e000ba365964fb70d7a50e8242710b2e169acc0f4b","first_seen":"2026-06-29T00:53:10.668508Z","last_seen":"2026-07-31T06:32:59.708608Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2465,"timings":{"blocked":-1,"dns":2,"connect":269,"send":0,"wait":295,"receive":1352,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.981Z","timestamp":1783512251981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: MBczb6I+mn8d7Gnxg9Fq0Ajx29qP+vk96V5KGllG5qijvfCY0f8WAxFfjuj517QzbET/h7lqWbQ=\r\nx-amz-request-id: 3AXEHVXXWHQFNDTJ\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"3cadf1789eb8f8d80a12e5ad0e19ea67\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 26582\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26582,"size_decoded":26979,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3cadf1789eb8f8d80a12e5ad0e19ea67","sha1":"90a7bb2b2bf9588a95f5895d19564e8e0d7a1b01","sha256":"4a1e05ded030983d325fa2a293dffeb39ce70d4948634927f6752dfc6d2f1dbe","sha512":"9236112d6c6dad19ae6b463f258f73caf2470a6f375251a68b7a2f36df53573861a75fe032c86ce6494978e164f514ffcc85e2b20fd04896b014b9a038397a06","ssdeep":"384:G0IuovjpguMrZYtx3ebUIAN+sXub/t4fgq0i9Iun1k2ij4i71P68:G5uoLubd4Ub0AM24ecIGBiHc8","tlshash":"cfc2bf834a448f837859d3ab7f631c408fce49ad85d5b8df11e74243bba673a008e96d","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-14T05:14:19.498395Z","times_seen":9929,"resource_available":false,"data":null}},"time_used":2442,"timings":{"blocked":2324,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.993Z","timestamp":1783512251993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9oS4RsZymwXgmSCMeuyn5rsO3RSeBHR1RqCh5SGnU7nNlYP/0LUlRJWqOYKYwzMIauAWX6XtnO0=\r\nx-amz-request-id: 3AX0DPG627C89FB6\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"8d6323e7fdd7e06d404af122b2c85f3f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 22652\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":22652,"size_decoded":23049,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"8d6323e7fdd7e06d404af122b2c85f3f","sha1":"a5d01f7b4ad71db23c48fa3f117f7cfcc444e189","sha256":"8e2b0eddf8d540aaa3b2076eefe4ba494c7acabed1f15431bafffe5bd3513f72","sha512":"6fc93fb49c82210ca205c6d6dd0831f9016eb24e3a5fbd5072106d5f2b44adb98d39c7df922da930f53d2cbfc28176810e7f2692011d556155f4785c8b314c19","ssdeep":"384:g1oAebo8+5LM5Y3W9rtPwKbJO5Uq6/ECRgQPifCiN:g1o39+dMmKrtPwUqSyQPmCq","tlshash":"eea2be61f8803733c585636c4cbea112585584f288f9e8aba674cee9f2d4c879c49ce6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-14T05:14:19.430136Z","times_seen":9876,"resource_available":false,"data":null}},"time_used":3032,"timings":{"blocked":2917,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/api/chat/visitor/getEventMsgPoll","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:16.440Z","timestamp":1783512256440,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/chat/visitor/getEventMsgPoll HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 117\r\nOrigin: https://www.axd02ww.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":117,"data":"{\"userId\":\"520ef0bcdd81485e9729530cc6600fa4\",\"pollId\":\"b25a9e216ee0471a8fdde6730bf99276\",\"lastMsgTime\":1783512256174}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T10:52:00.014682Z","times_seen":17885186,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/chunk-58b68d71.f50b954d.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:10.620Z","timestamp":1783512250620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /js/chunk-58b68d71.f50b954d.js HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:10 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"21169-1783448003215\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21169,"size_decoded":5586,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21145), with no line terminators","md5":"2279284cb64def3f112505007aaad241","sha1":"9d4011ece5e236608b695d209b016fe5f540ec07","sha256":"bbf4e6d6a787a0172dc4a5d7593fdf735d7b8c5c81439183523fe38ba78a551c","sha512":"61bf2c5ebbb07299a833bc9643d5027aa8bf40e94d659809ab51e1f6d89ce987b0a02507d08729960ccf2adf5946a539a723441a512f2ba99fdfcbfad5adff66","ssdeep":"384:gZsnyX3KsgI4iOTGMElAiXoc3/ZrykhpY83g3:8HKqDOTGeQ/8ky3","tlshash":"af92c84ba482a87c59577296341b2369b0363f85d442cca6b17cdce4d2f8a74732fb6c","first_seen":"2026-07-08T02:38:21.536896Z","last_seen":"2026-07-08T12:05:04.870248Z","times_seen":2,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/de.dfb88cba.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.611Z","timestamp":1783512251611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/de.dfb88cba.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 474\r\nConnection: keep-alive\r\nETag: W/\"474-1783448003198\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":474,"size_decoded":755,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"dfb88cba30309e0d01d0f1975b1176fe","sha1":"a476803cc8c2cdc42253080d0bde31f3caf96329","sha256":"1ac5e390a1eebd4637731aaf06feb7d6ace04943c04915ea1c24e2354a61f5cc","sha512":"e1f0970bf1a5a0a209a83d3c09a76191d5f059debf6acc5759ffdb7dc934dee270ab6d03ac62e955e7b34c9d57c095941c79c897106dd2ef39c842ca4e1d28a0","ssdeep":"","tlshash":"30f05c4ef960a8d4e697c0bb162dc6c3c847b7775520d513790488656b6c5253f982cf","first_seen":"2026-07-08T02:38:21.711508Z","last_seen":"2026-07-08T12:05:04.871433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1794,"timings":{"blocked":1514,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/ru.e6e96a4b.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.614Z","timestamp":1783512251614,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/ru.e6e96a4b.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 114\r\nConnection: keep-alive\r\nETag: W/\"114-1783448003207\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114,"size_decoded":395,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 4-bit colormap, non-interlaced","md5":"e6e96a4bbd445de18b24aad38aa687d3","sha1":"213680717861f92a299720254502ce0ffcdcafaf","sha256":"9a65f25d5699dc026ed1fb77623f7e27d08de74515e10a9b0771075c34c8b543","sha512":"69c9901d2265b1a0f0077a793a770cebaa59badb5d60d67f5740d1fa738fd1a64e07e6b7605bfa1ef5ba1b58f217a673c581a049125d25a6b956174ece6d1a0f","ssdeep":"","tlshash":"2cb012e3ebf57c3acb0f01275b294121e41458191c205f0fc033d614a6b0945e1cc7d3","first_seen":"2026-06-29T00:53:10.725043Z","last_seen":"2026-07-08T12:05:04.872479Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1927,"timings":{"blocked":1652,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.996Z","timestamp":1783512251996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: F9GrWv6L0us5UmWG3yqFs8Q8NcupeF3gNmDbneNxU2uYFteRtp/vcELmMylSikrcEoMEcmtOUeA=\r\nx-amz-request-id: XV8VQJ8F2D6TQGEP\r\nDate: Wed, 08 Jul 2026 12:04:16 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:36 GMT\r\nETag: \"57fc8f526d4275ea03d2bdbdc5576892\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 170933\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":170933,"size_decoded":171330,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"57fc8f526d4275ea03d2bdbdc5576892","sha1":"648d7e45b5f40cefb1d18bb9c726fa2194627313","sha256":"5b08dd67e7ff0eb29804f686a825a0607fcfad5e509780a30adfea265bc26d6d","sha512":"046bbf2c489dd817458bb078c2a21eee87949f983e0924087800414acb782c41e1e777873e9bf43ad90c456a764044b9a142646b88ca61a2589c90e0a31b860b","ssdeep":"3072:uZZZCa4TScGLIk8FhGOovWdjezklGcjjltrXy2zm423z7LOOCAr:u3knH9GOusjezklGGltri2zm3fLNr","tlshash":"a1f31238ed7ef755a4fad15f910cada0a0f877204832a5813e37d7d437c98a192eb249","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.989929Z","times_seen":2520,"resource_available":false,"data":null}},"time_used":3272,"timings":{"blocked":3153,"dns":0,"connect":0,"send":0,"wait":116,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right2.25e8da4c.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.273Z","timestamp":1783512252273,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right2.25e8da4c.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6980-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6980,"size_decoded":7256,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"25e8da4c4b1263171fbf7413200e71bc","sha1":"3e1fb68f1cf14cbf55be70f0e6dc594dbf65329d","sha256":"3ebc5071b1ab7f3a8af777c3bafc8f92199e1a4a3371089479f6a309c64ee09f","sha512":"da4e8bcb866441475ac17723ca3c9aa8ce2be55120f65fc1b49ddcf5d1372c361496dae3ef874f2a8c26e050f64d62a6cf1c29d41cb3e6bc688b3fad293c8af5","ssdeep":"192:EGIAChhHACQc4X2g7B0WiYHgv+YLX8RrI9GMftmR:4ACPHACQcBg7BUYHgv/Qt","tlshash":"0ee1adacdfc4a976df2da13f45613a1a36236b0bbfd39bbb65486d20dc55cb012d0050","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.973636Z","times_seen":419,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/ph.307f4f48.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.632Z","timestamp":1783512251632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/ph.307f4f48.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1555-1783448003198\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1555,"size_decoded":1864,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"307f4f48bfe4c1b874159945e5505b79","sha1":"c8b1fe7034cc9a76510953b082e0067797085bc4","sha256":"abfc3686c303106e549c4267499c07dfd39ab2014510a02d0ead4ca2c9a6ce1e","sha512":"85f31dd56a53670c5480af36f47bcf65e3ac2c2c7c41deb6ee56059cb187c029c39b7e7ffc6c789c5ea895899685ca46d3e0d768a9c899481dda4ed4f3fae83e","ssdeep":"","tlshash":"f931b773d66440728b6e651751dcd1e88a26783339d678472c7892241b3fb1aa371e35","first_seen":"2025-05-28T12:12:11.644779Z","last_seen":"2026-07-08T12:05:04.875558Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2538,"timings":{"blocked":2258,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.951Z","timestamp":1783512251951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GC2nIFmd4uVbgLPJgI2uwycjTOfdYElIxtcLu4/FGRUQMYrf7ODW/dib3PIpPmf2QbaZNulQuzc=\r\nx-amz-request-id: NAPZ63NYA5EY2EC9\r\nDate: Wed, 08 Jul 2026 12:04:18 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"ad3bb72e6cf979df37c56cc70e70710c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46207\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46207,"size_decoded":46604,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"ad3bb72e6cf979df37c56cc70e70710c","sha1":"f0bff01c9d923ad55250ef7de41afae41cbe3f90","sha256":"50294b071e29cc9e8afdac176dd2fbc62f4c36265d5f494d96a7ab2908c1a643","sha512":"1fc3e1b07a86c34fb8c9720f8ff8c2a584cfb6dfe7b4e34d53f2f0555e558fe95f5a62bad4a6874a64e081cddae0defe530870d76dcf1551ca45ee570b582ce8","ssdeep":"768:GOSu2YQp+gujkfsasYaYtu/tgiE/c1tcDkV2FynHs5d4RX3S6cqUrolLoDzT6S51:GOt2YQVujkfTJaYg/wU1SYSJ4JcrsLo/","tlshash":"4f23e09b86804fdbf03acbc53f272d985b41fa0944d0b4fbd1e986af1f65622285c48c","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-14T05:14:19.411004Z","times_seen":9926,"resource_available":false,"data":null}},"time_used":5735,"timings":{"blocked":75,"dns":0,"connect":94,"send":0,"wait":122,"receive":467,"ssl":4977},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.965Z","timestamp":1783512251965,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: y1qbsUAmhvASISKr3AakKIT0pZJna8l1ryPMPtwa9CY32u26W2o/5o28tBGTvrvQGNWV68HYM+4=\r\nx-amz-request-id: 6M5NKHWXSNXAWNDM\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"e1d0a17b2eb5865bccc7dff6330f6562\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 147078\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":147078,"size_decoded":147475,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e1d0a17b2eb5865bccc7dff6330f6562","sha1":"c956ae8ac7dc2720241d709e92d963ce814550bb","sha256":"9d0495f4e08deab21e64eb8cbe00de00a937aba37d3ff7a3714f30e551f978e0","sha512":"a6c80898e0109f3b6887861ca36e8bcbad9e7091a24eb9d49e55051ebeacbff242ecf0b192cf45d318948b90d660b97dc520cf870d5d651af386a4cec7553456","ssdeep":"3072:0bomG8J7r42I27eo7oPi6T3gKWN4+ogF1Ejq76Cui8MuXK/vDJMKC:0brr425eo6WUgRuC98M7DJMKC","tlshash":"f4e322ddc9c8a380c8003df5fd1699599a347ea34db476461f637adc7b19648ae1bc0c","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-08-14T05:14:19.56517Z","times_seen":9422,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":113,"dns":0,"connect":97,"send":0,"wait":129,"receive":280,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/shopAvatar/2023-11-23/1e60a570-fd75-42c1-b3b9-3c040b0cc19e.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.210Z","timestamp":1783512252210,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /shopAvatar/2023-11-23/1e60a570-fd75-42c1-b3b9-3c040b0cc19e.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7wqdky2iluRhHZ8gjcRfKhRflmwCk+QSxHz00vwaPWIotDoIllvs/z8ocd7+Ylp6am7HEE1Ku+Q=\r\nx-amz-request-id: RKA90JBTVMZ8XE2E\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:32 GMT\r\nETag: \"3224e47c70fef9289898672d8fa26d2a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1521350\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1521350,"size_decoded":1521748,"mime_type":"image/png","magic":"PNG image data, 936 x 936, 8-bit/color RGBA, non-interlaced","md5":"d4ad8c8f28bbff0552707fa501cf07cf","sha1":"6dc1348a98aa7efc61489e2bc7f95cefb44f4a09","sha256":"a8c5a04357bad806ad855cef0f92ef998bfc2e0cd8a390818df436cf40d6efde","sha512":"9ca2c9b123ef136a260b5bc2a1a0a900a29e45034ea01184e89ddae6e0a302812fe0c74771958d398cc59a9ef13737429aa37297fbfdcde96293f608ad42d367","ssdeep":"24576:wp4vxIrg4fman4ZmBk2/MqGj9jKKxrijvB:wevxZ4frBkA2QKMB","tlshash":"75253315d425b107fbc79a75d98617833cfe1421b3abb04d0fe48a1af972e726898137","first_seen":"2025-07-28T06:58:14.003726Z","last_seen":"2026-08-14T10:59:45.987826Z","times_seen":439,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":859,"dns":0,"connect":0,"send":0,"wait":165,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/zlzajfss83f.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.131Z","timestamp":1783512253131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/zlzajfss83f.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7fa-146356\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1336150,"size_decoded":390566,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (32186)","md5":"874f43daac04430ace2a76b4c499526f","sha1":"210277ee4624a07a178a26d20826cfe4feeb6e5c","sha256":"8a7053f2a2470fa6e014c252ee54592ce25c79c5125f6b864c76d0d2e9da9b37","sha512":"c523d5fa1fc955dd68e703a320c215a5d877e980dcf7ea73dc919a93b90bb634b2730631e007fe324f3bd8531295ab223fe7f78b5c4703e81b43265f830585de","ssdeep":"6144:1UtvO/LpPn4MWzEkEhlcG2oGsFOeOZ+PjZcekEUPQcgCZcBdWMSuOTLzmBw56lU:N4iNhuqZOZycDq5WMk/Uw5L","tlshash":"2c253bcc72e67056469221a0cc3b290ffd356e54801dd93ae7bde9dabe6440881b7b3d","first_seen":"2026-06-17T23:14:52.646222Z","last_seen":"2026-07-13T22:30:05.340043Z","times_seen":28,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/shoplogo.355c19ce.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.607Z","timestamp":1783512251607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/shoplogo.355c19ce.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"16126-1783448003194\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16126,"size_decoded":16432,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"355c19ceb18ea554286e4ac3aa0bcd6c","sha1":"a009e65429f6f10bf1cb3179fbdaba2f197c9851","sha256":"3e1f7f79ad665210b3c4f9435724577b9ef45fefec4be33fa71258d811c67b03","sha512":"57f30b7afa6c3574e787eeb365e16fa052cef1f3c0e60ad2a9d3b43aad79d2f43df665cc1313698969b6aeb62e6345f4b49366c1f9b6ef6311206db22ffcf20b","ssdeep":"192:MLnkgbEFVT85vUZzjhzDkmVoA749+4SKRUF1BhNPFWEFVvvfjVrJvnNKvXZ+92e:uf6o5WhEuoS4o4VRWhNt/VTVl/NKx+Ee","tlshash":"7972d005eb426c9c76e2ca5ab00b13c66483e3e4e929e1003cb3dd55e596ef2724ced8","first_seen":"2026-07-08T02:38:21.708827Z","last_seen":"2026-07-08T12:05:04.882568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1989,"timings":{"blocked":1415,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.967Z","timestamp":1783512251967,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xIZMscAdTzpuCYluwPw1zhlxOqqSUUD2epk9+22MHNqTA43cU17dZ3i1lZTLofO3zQtrUtT8Klw=\r\nx-amz-request-id: NAPXBD87V4334ATX\r\nDate: Wed, 08 Jul 2026 12:04:18 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"46155632d481869cb9c3e853c7832bea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 39527\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39527,"size_decoded":39924,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"46155632d481869cb9c3e853c7832bea","sha1":"988a2fdc538ca57eadd8730f028800f736e1ee86","sha256":"1e4dba5d9d5fae2a3aafe91ae59ff2f9f938229ee17b6af825d3d7ae78a93913","sha512":"6a93dfe70a2ee1089d7a1137043494795f98bab7533792b6e736c25439b4c871437a83103e1f02c58b32e7af94aa20e67db51929d945869cff4485b6840c2255","ssdeep":"768:G2faHY+HPhvSyz/eZculI+Pl9UTnIbrimLDGEFK6hbrysiU1JL4:GogPUGkymLDGExSsiE4","tlshash":"af03d0472804ef4b762ce2727e9b1f681f819b4ca8c672cc4a530dafaf657b9491c41c","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-14T05:14:19.576845Z","times_seen":9988,"resource_available":false,"data":null}},"time_used":5794,"timings":{"blocked":97,"dns":0,"connect":101,"send":0,"wait":115,"receive":373,"ssl":5108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.988Z","timestamp":1783512251988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: CWp+pv0HLnOma7rZDZR9wPZLiW6Z+fwalel+D8phWhrx9jpDcBWK1FuHSFyTQyVvTlrf46dpMtU=\r\nx-amz-request-id: 3AX5JD2VKMVT9S0X\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"d88ae54a30fed8843621233e2c13698c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 20191\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20191,"size_decoded":20588,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"d88ae54a30fed8843621233e2c13698c","sha1":"9fa542e8677ab97712a7fdc7e1250e36536ec3a5","sha256":"dbe475f26aed9df934e9dca6ef2115b5d0968f312174dfecb9da3ddd3c9640bf","sha512":"606629525b62e056825a3dfbd8ca45e0f84740cad1cfa79ee8dc3e7a34658e951b3aa72bc8bdf276c294912a38d839dd6c2f864791c9038dc395b7d12d08385f","ssdeep":"384:EUsqD+1BG8DGQZl9Y4PyXpFmx82oEu1W3454xOKeq0ooJRImy+90lh:5V2G8RZHP9oEt3454heq0dRI1flh","tlshash":"fa92d1e1ad0a233de68685f6b7f6e2b304f412919bd19d3b53730c858d88261de396c4","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-14T05:14:19.536758Z","times_seen":9890,"resource_available":false,"data":null}},"time_used":2799,"timings":{"blocked":2679,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.702Z","timestamp":1783512252702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6kvdJ3jJYlP1mgNzxZyvh4bSGQBrTiybveF3kTgycT1Sah6/4nb/2MwCgm7Jp1a1zibi1UVqhLI=\r\nx-amz-request-id: RKA2DYE6YYAA45TB\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"0cb226a4c24b62a8027c524333a66d1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9972\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9972,"size_decoded":10368,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x1500, components 3","md5":"0cb226a4c24b62a8027c524333a66d1a","sha1":"bcd930afabd37e41dbff70ff18d3164036810ea3","sha256":"cae70bc988ba3c3472e4161ca54422d0e54923f5b26ee7e7e34716c90c97c2aa","sha512":"0182b799ed0ad9230c5713f54e77dec912e6873d55c491d41e30db98575b93ece455e58effcf4b52a2f1e5ec5638fa27ac16d8319119f1aa3ff0f1fce499789f","ssdeep":"192:1I49RvIJWdElnZFHjjtCcYjtGDCRxXEZJHMcf:1IKRvAZFDj0cOt4CR9EZJf","tlshash":"3f221ae391d3585f9838efdb9b5886e7d82ac355df6a3102204b030677e9f50ce3945a","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:45.981457Z","times_seen":2534,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/dummy_0fe6675a139bf4178277a0e2b2bbe5e0.INDqO5TE.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.119Z","timestamp":1783512253119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/dummy_0fe6675a139bf4178277a0e2b2bbe5e0.INDqO5TE.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: \"6a31f7fa-f2\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\ncontent-length: 242\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":242,"size_decoded":551,"mime_type":"application/javascript; charset=utf8","magic":"ASCII text, with no line terminators","md5":"162dc3232064e37c9ff63cd1fcf0533f","sha1":"dee090aefb5d3dbc7e7c00622b8d76438d0a70b4","sha256":"775cd91cf280dd10c31e7dac45bc16069226c2542013495757324ae3399b1da1","sha512":"f14ca3d797b81481356b39131dcb067687a595f79c9765fbd45c1067a123273c788aad080cd1747dbd1684735c8bd7cf9721416045046e5db46d9dc3ebe146e6","ssdeep":"","tlshash":"45d02e26f1f0204c038a90a6886f0226e0236d800d7e8180822e86180e3828b8101c8b","first_seen":"2026-06-17T23:14:52.661152Z","last_seen":"2026-07-13T22:30:05.387547Z","times_seen":29,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/css/chunk-58b68d71.30de73e4.css","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:10.618Z","timestamp":1783512250618,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /css/chunk-58b68d71.30de73e4.css HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:10 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"10909-1783448003215\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10909,"size_decoded":2745,"mime_type":"text/css","magic":"ASCII text, with very long lines (10909), with no line terminators","md5":"baae36c12f7121bfe083d582dbc6f8bf","sha1":"d903c3564848b5b7a4c654a3167ff673bad67fe9","sha256":"abb16ef1a6e2a2ac26a769e93d8c03c781283975a81ac036212739d5aac52aa4","sha512":"04431a8bda18be3aae11bc44fe39048bb4ecbe241c134959f933b1c82bbc61cf3b9806c2940602bffcb69d092dc207cd62ca90e07dbfa5a1a51b36f6cb8cea1d","ssdeep":"192:ItfIX1gkV0vzX5rw/C0SNXcjd7+ZGzunJzCI:m41gkV0vD5rw/CVFcj3I","tlshash":"3b3231f271646229b2f7d66a3590d4ce7082e613c55346bda98eb61ccccb2d3227234c","first_seen":"2026-07-08T02:38:21.604446Z","last_seen":"2026-07-08T12:05:04.885999Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/seller!list.action?isRec=1\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.604Z","timestamp":1783512251604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/seller!list.action?isRec=1\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4407,"size_decoded":1614,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d2f8e3dead256572b275b95782137c","sha1":"8fa9ff5c032e1e1752ef7e4ce728bb5dd987bafc","sha256":"d77f65cc228a832a7f49da6ed481e5b2e05a85fe6a607b7c869aef8c9c9d07c7","sha512":"7be30285cbc8cf3ab96b6f4f25762ea1d45bb1b8a213eb1d30e2c82442ede479ed4c8c06756d7043bf9d9a129a31a3a34415049ac184e1aa5f9863794f29937c","ssdeep":"96:5qmP93vEdNqK/X3iIIq+Vrv31eupoDnIq+a:5q893smA31IB31NAnIC","tlshash":"0a91518425a83eb2479a4e527c477e46c2ae11df5c07deb096cccf180afdab4671b420","first_seen":"2026-07-08T12:05:04.88699Z","last_seen":"2026-07-08T12:05:04.88699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/cn.17cfcf2d.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.608Z","timestamp":1783512251608,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/cn.17cfcf2d.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1393-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1393,"size_decoded":1667,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"17cfcf2d1445ab317ae4b1adad75351b","sha1":"d44d59c4069ac3d2226ae412f9ecf40f16fe55c8","sha256":"78e46272a5d37dfb137ea7bbfe1ef804993b7fe1df40538f9e4644e2c8730568","sha512":"472d2fd935f809844af758aa206fe7e858f307f7a858a2e024f35774731c14d284997236edaba961e7b78207eb7d8e61245cd067709fd6cc90af33ce7a9667ec","ssdeep":"","tlshash":"7621b887c79e775fe2a8b67355fbb086cc14c4297a2150f28af5cf2c62c8da0d498561","first_seen":"2026-07-08T02:38:21.66794Z","last_seen":"2026-07-08T12:05:04.888271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1709,"timings":{"blocked":1430,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/en.b7c283b0.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.609Z","timestamp":1783512251609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/en.b7c283b0.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1940-1783448003198\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1940,"size_decoded":2277,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"b7c283b02c6bf093ad5c1afe47d07524","sha1":"378071427e7173ee9e266a590f00646736ce9321","sha256":"ace15d8f6cb2c853ba1222c5496eb62d9e59315baeb4aeb2476e940dab6d2aa8","sha512":"2d97aaa9eee4377dbf06d63d4650572b9d6745a2792f42bfc65bdc38b8440645ddc83399cbb02a31a715cd59b55206981cdd092f9fcfa4334977de64bae2cd93","ssdeep":"","tlshash":"1a411bb5e0ec99f99b9e4f94a845fecec1c91924d24dd14934c8e26e5289d3872f043b","first_seen":"2026-07-08T02:38:21.733821Z","last_seen":"2026-07-08T12:05:04.889196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1755,"timings":{"blocked":1476,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/4.673c13f3.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.651Z","timestamp":1783512251651,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/4.673c13f3.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1857-1783448003195\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1857,"size_decoded":2194,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"673c13f315fd5fbd84e4ddb3562b555e","sha1":"a662e7cc34dc59843e6aeb827adfb92c5ba96f27","sha256":"ed398f229b641c226bf1490249475daf3fc6276d2bee2ab3fe1f6a48d6a86233","sha512":"49a3be8ecfe1d5982086e01302b12596d6722718c34ef23e795489424a6d7144b8c54c168e8b555c02902f269c368821bd0a115f8f3c9c30e43cec23b4886aa1","ssdeep":"","tlshash":"ed310bc6f3dc6557c532806f4c698e76bb8018661f07114efe8917641ac8589d0d354d","first_seen":"2026-07-08T02:38:21.664712Z","last_seen":"2026-07-08T12:05:04.890061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1509,"timings":{"blocked":1227,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right6.d31ff0c9.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.281Z","timestamp":1783512252281,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right6.d31ff0c9.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5088-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5088,"size_decoded":5313,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"d31ff0c92e1350ed230b476c5a6abe57","sha1":"f522efafd87db548b2668b87aba1275611d020ab","sha256":"e751d8d2c37716c80619a6134d0e39db5b9fc5584cc790f28760e8cccad3ea23","sha512":"e8a0c93d1ea07f200b6df3d93b57c80597cfdfa78e66e1ebea084b50f859d5438f3f7e2d0000727b1d33b080f31d6afdd2fd9c0c0fd61257aee09a076e7fd6d1","ssdeep":"96:Whx3YqBhBnFMEKYhu/hCbjftpvzaHZx+RxXP+1VHaWccmRAi5sx:EZdn2E2+nba5uZ+1VHatN6","tlshash":"c5a15c81f653a917db8292b095a47f100b116c372be277ba9a02581c1887ef21439b96","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-14T10:59:45.967717Z","times_seen":423,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/IYSEMY2tiIUM.c5d7cfef.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.417Z","timestamp":1783512253417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/IYSEMY2tiIUM.c5d7cfef.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7fa-1e188\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":123272,"size_decoded":43439,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8bf5cb6d9c29c2c76e350762330767e8","sha1":"2527fe9b4d3181c2ea9696e8e55fd78f8e02145a","sha256":"8b3e72120bd162cb455a52bd9bdc60c9db1f149d47652a1636b7904f52973b7a","sha512":"95d09ad9e8f7686a01cf1f3bbe7ff45a56fc66b683a721f3a1f1bda177cc9e6e1a2b8a7da8b411c96aa194ffac8bd6b507dcb2718f15c38f2309c7f959d499b1","ssdeep":"3072:/ihmq4OdTCp/SMSgVx4jSDwgPHDXez+F4SQ:/ihmq4Cu/SMSgVx4joBDez4Q","tlshash":"e8c30b8cb3957ca93d2fe4a50a2f008e712f6ec4a40d8560f177e8972658dd4f217be9","first_seen":"2026-06-17T23:14:52.662938Z","last_seen":"2026-07-13T22:30:05.388174Z","times_seen":28,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/syspara!getSyspara.action?code=show_video\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:10.635Z","timestamp":1783512250635,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=show_video\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 52\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52,"size_decoded":365,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"33878fb83944a3d98e0ae8fbb3688401","sha1":"95cddb60c569b28c039a3982e1a593a9c9b75411","sha256":"05ed22d88cd80fb42cb476b3e2826110e2d9c377c9104929b9b5ee381971db57","sha512":"91c65dedfad117e4715750c3696fe2a76e51de20406b1314da92f025f323586806c7467c01ff03e092e4cf9bba824e57487f9cc9608feb66018c29f5aea10dcc","ssdeep":"","tlshash":"2790220000080832000380283c0c3200808c0003008083088c080a2000ec0a00220028","first_seen":"2025-07-21T20:07:50.133523Z","last_seen":"2026-07-31T06:32:59.70664Z","times_seen":68,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":275,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ce21709d-d03a-485c-bd1a-0ca3c11840fd.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.129Z","timestamp":1783512252129,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/ce21709d-d03a-485c-bd1a-0ca3c11840fd.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tcFDxG/TLTgupZiVRa3TKeo1/4PmhBiyKKhfyAsu9Nle+Jy5nIIk+35d/F/W56ezsqrF8LoIYw4=\r\nx-amz-request-id: 6M5R6ZESQGGCB3FZ\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:55 GMT\r\nETag: \"4d6bad8f76dccb096768ff49cc7cf445\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117061\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":117061,"size_decoded":117459,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1410x1423, components 3","md5":"4d6bad8f76dccb096768ff49cc7cf445","sha1":"de7037cff667ef30de1bfd8e6b7ceec7c69dfc42","sha256":"0d98b6495a5e33454e197017e474fc8e00ea09e9d3e72d6bdb54ee943ed1fb40","sha512":"8bd3d378f9633511746f337bfc2cca32278fdbb5458cb2f7d23d9f3167a6372a172196821b864488d9f30f326785276baa112893754bad58dfd10b15ad0a2cc1","ssdeep":"3072:iypv8tQzm4aYSV7OHP76tr4EbClnokN48XL:iyp0SApOHPsrfbbX8XL","tlshash":"1fb3121b9b295d27e3c7537156210310963cce652895ee3678457f8e3caf3aee88c98c","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:46.033457Z","times_seen":2442,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":273,"dns":0,"connect":93,"send":0,"wait":119,"receive":198,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/dummy_5d3f0a53b9bd6940adb2b9539c5d7d6e.L08RzbJv.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.130Z","timestamp":1783512253130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/dummy_5d3f0a53b9bd6940adb2b9539c5d7d6e.L08RzbJv.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: \"6a31f7fa-110\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\ncontent-length: 272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":272,"size_decoded":582,"mime_type":"application/javascript; charset=utf8","magic":"ASCII text, with no line terminators","md5":"e60032e6beb9ce09115585747452d979","sha1":"ebef60981c0b0449ceabfa851d8a217db4bac688","sha256":"db26d6ba37f1ec5c088768eb769288d9cef1801b37aace30df6069bfdafd5676","sha512":"9ad9bc81c1a799761a154e7d977054d66cfad0bf4ad528cf089eb19191cc6d76950516ecae5d213fa19c0c35f447407a54fca4e184a9fdf8a3c51ebfdd36decf","ssdeep":"","tlshash":"e6d05b1973761948cb2e509605cd3117b0b389cccc6ac1c5116d95f1052b1cfc9d3c8f","first_seen":"2026-06-17T23:14:52.64168Z","last_seen":"2026-07-13T22:30:05.377295Z","times_seen":29,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/css/app.f29bdbd6.css","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:04.372Z","timestamp":1783512244372,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /css/app.f29bdbd6.css HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:04 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"236707-1783448003207\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236707,"size_decoded":40685,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2a8a7bf77d8fbc3fa37465a56d8e0fd2","sha1":"cc120f28d03a25edd4fdda219f3289ce28411f09","sha256":"a53a5f8e148d0c2596d50fcc500a4cf1b6a037c5ec8f7cf0b60b79cb12bc538e","sha512":"1f44c238fcf6212af18b48b23f113fb5621f6c2fb21664b567865acf77f57d9858353ab89cc6f0aec5b6bb7bd5ab55c3232109f600596b3a3fd7b64a451a5c48","ssdeep":"1536:OSyjk6l3X28Y7SrWfYeWXA1u9w4HCeKl4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvA:M8SJWTPL4Q+05q29e","tlshash":"e034b610db17213b222be66d75c0ba896f28c323d9725b7bfd95741ccae64891163e0f","first_seen":"2026-07-08T02:38:21.584667Z","last_seen":"2026-07-08T12:05:04.893536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/home-icon4.9b266041.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.643Z","timestamp":1783512251643,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/home-icon4.9b266041.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 477\r\nConnection: keep-alive\r\nETag: W/\"477-1783448003201\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":477,"size_decoded":758,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"9b2660412d63654147344821bd3ba321","sha1":"c07ab2ddad28bc490e03ef6bdbeb8356dc963c4e","sha256":"d3efa6267dc682f330ea0fef1fcde2f383514ecd82106c09611f2cbe29c1f033","sha512":"f7bfef36f9d38f685be72138c939a7319f6667759cc0bab460ab7b9c42b4b351d086e7780013f7010be13435a9b2f7debd0979bd2ca6a645d6efd12eeabfeb6f","ssdeep":"","tlshash":"d0f023d48a0db1384e1a5031e4910c40d4a21c340a83f289e29570b7d53e10b42cc788","first_seen":"2026-06-29T00:53:10.699118Z","last_seen":"2026-07-08T12:05:04.894491Z","times_seen":4,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.949Z","timestamp":1783512251949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LtGrpA/dSKsJ156jwXf24VVMz+tCG2NbGDwpKq5tlBDFlZG7j7ymMbTlOl5ZQ62eA/rHA3T70eI=\r\nx-amz-request-id: NAPYMH2FBJXFZXR5\r\nDate: Wed, 08 Jul 2026 12:04:18 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"b367a1a2939abed5721ba1cf5fd272ac\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43151\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43151,"size_decoded":43548,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"b367a1a2939abed5721ba1cf5fd272ac","sha1":"14494a7fe1017a29f9fed7421f7d652257490203","sha256":"46d322495677c8a7c5394e265b4ff29491e138ca470aa1ca2d8abf364db9cd21","sha512":"2952940e26d548ef1b5caaff6ed0f6226a5fe3333be792544289621e428353943df8b2c80303329041e0b0308b6fd4961d0805110e5d74bf4bfd3808f3c71117","ssdeep":"768:GAnBvnXpOznCDoX5cNyXgGjFLhpx12yVa6+kZL/4FIpV8xoeKzHMkLFr3:GAnBvZOzCe5cNAgGjFNpb2R+4gixovLF","tlshash":"4b13bf87ad198f936454dbb87f530c396bcc1e1ce8463af910a52ed72f582094caf52a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-14T05:14:19.513117Z","times_seen":9577,"resource_available":false,"data":null}},"time_used":5785,"timings":{"blocked":64,"dns":0,"connect":97,"send":0,"wait":121,"receive":373,"ssl":5130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.986Z","timestamp":1783512251986,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: d9xlktlWDbcHsWGj3L8abFXBPoGJMfr9fOl1yjnElTHGkVimWaS+jkZtAPg10eFQE64Nc2ISV2s=\r\nx-amz-request-id: 3AX9BNBVFYRY9FR9\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"dbb5460537325e381060d6a696bdabba\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66319\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66319,"size_decoded":66716,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"dbb5460537325e381060d6a696bdabba","sha1":"852c6ea174a0fcdd7e7351b5bc5c1ddc309d87a1","sha256":"3ff029feb7f2d1b0a7bffa8d5060030474f569524abd014585f373a17fc09695","sha512":"404f949ebbad69f94ae8b173c2c1d8807599df69c51675e3b0e06bc0953f94f95a51914abd77bf684dc3c5ff42249defe6152bf148f4aa8c1515fb8d29879374","ssdeep":"1536:Gi+tPxNX6ucnz4Zw7vPYpNuirA5gmQGo1CISuKbKNiI:F+tHKucnz4Zw7vPYxUpPHIS7KNh","tlshash":"cc53d0a31a450fd35629e3e67f0799284fc65b8d94e039ee11d358e37ba13b3680e11e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-14T05:14:19.40701Z","times_seen":9943,"resource_available":false,"data":null}},"time_used":2679,"timings":{"blocked":2558,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.205Z","timestamp":1783512252205,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OPH/1oumCubNJiVqrSgfP/wfI6A1kd1pXzJW1UnC90gG7nqZLQyVZP3FL3eoTP0XrAiQ1thoA0A=\r\nx-amz-request-id: 6M5KA7BGSXBYSCJR\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Thu, 23 May 2024 01:44:49 GMT\r\nETag: \"097d83a8f1d7e6cddb5185b4a4ba2535\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 268274\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":268274,"size_decoded":268672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x1280, components 3","md5":"097d83a8f1d7e6cddb5185b4a4ba2535","sha1":"ab81671e01e6eba67a4a834fa72186151180e0c5","sha256":"0ebd81023c36c931438eae38509e5b57f99193ae7b3441fc53f4001596980a4a","sha512":"c42e6a86e572eda0c00d6aa31142246d151b0e43748c4854f1cee9b6b492a38d5a982b841afde99c97dd641846fdb8333c355929821e5cd41cb4d62829f5c854","ssdeep":"6144:0AX0jPj12+Y21EFnxnB/NZZ85wy7z2pTEabsv:0AX0jb8r2mnxBVZZawy7zoTEabsv","tlshash":"7f44235a4bc2f0a0ee7eb221cc58d94d32c7f8bca05e985917461c6cfac90dc5a5366b","first_seen":"2024-05-25T22:56:10Z","last_seen":"2026-08-14T10:59:45.965192Z","times_seen":969,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":113,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp13/B072P17XY7/71XaaByITlL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.708Z","timestamp":1783512252708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp13/B072P17XY7/71XaaByITlL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XDEIoL3oCdxCPtiRiGcUOaU4DO5aoTuSCoX0tP43Yb/dKZ6AevItvzRQ99qbTLWzrbr6K43WxD4=\r\nx-amz-request-id: RKA2H50Y0GRK0R8K\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 11:55:37 GMT\r\nETag: \"c07031c87ba3f296b2a29ebb53a76efd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0f0b3c3fd5b39cff700214dbb4d052faa05dd997f97c50e949ff2ff957d9a07a\r\nx-amz-meta-s3b-last-modified: 20230429T135853Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 50291\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50291,"size_decoded":50821,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 546x1500, components 3","md5":"c07031c87ba3f296b2a29ebb53a76efd","sha1":"8797c19f69bbb48e4c42bd372747c9f72a59424f","sha256":"0f0b3c3fd5b39cff700214dbb4d052faa05dd997f97c50e949ff2ff957d9a07a","sha512":"65595c1eba2b03cf51675d61a3973bcf1237d19c85cefa96919172f3a54a7ed6dbd32877ccf384acc924349de486e770d07272aa2bf59eacbfdf8afa1d589ad0","ssdeep":"1536:+XiOB0fBqBhRvoS/ImRQ6o/Ka3yaegiBC:+SuvBTt7Jo/KW6C","tlshash":"0a330122c3c962f4f8011fbd0d03a1bb54991908570a9b3b376a6ab2c7641496fc7f6f","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-14T05:45:08.741567Z","times_seen":2423,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":624,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/p__app.60ee96b0.chunk.css","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.415Z","timestamp":1783512253415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/p__app.60ee96b0.chunk.css HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7f9-ab9d\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43933,"size_decoded":11742,"mime_type":"text/css","magic":"ASCII text, with very long lines (43932)","md5":"c0fe51690f8161137f8f9f13bf41cf3f","sha1":"2e66234450532ef823933fbf6faa4e9634aaab85","sha256":"05dddfbd7266899d90bab0f75df2f90cc56540f6a465642d4289209c545c6bf6","sha512":"1b073b13f2dadbb6a290d26832be4e4d98ec39536749a42da9f1556c73ff79366e05d48afac0a6f78a9a05d0aa3facf0241f3b5e94e698517428dabfd75b8a10","ssdeep":"384:qWKfxV04XGqa0s/N+RFKz/NPlyoOr3OJCSFV5RRrTL0FIj6T9RS/DQyyepHONIlA:42rrTEYHpd1O2abBjk/fo4b4","tlshash":"28130975190e213cf2a3413f35cc938c8526e552d9262abae107a2e3eac67d337b5f45","first_seen":"2026-06-17T23:14:52.691608Z","last_seen":"2026-07-13T22:30:05.377846Z","times_seen":28,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.963Z","timestamp":1783512251963,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hApfb8Quf9N+u+YQINuCk37+srWGeGQklBd+T6I7DFJWXo9F4DSkaQfq8Z7Mef5/68hZY0P78Ks=\r\nx-amz-request-id: RKA00WSVY3270G56\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"60e10d77ebe5877fc1c9385748e2cf72\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 180465\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":180465,"size_decoded":180862,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"60e10d77ebe5877fc1c9385748e2cf72","sha1":"77082da3f7af090dbcf9ac692bf2ba4e0d699aec","sha256":"f1343ddaa389f3aca6568d15637793f510925e7f88d13a6ff93591a326a66c48","sha512":"1a4999d20713081b41425f1f82ed3e7b5003e8f7024b18986a6f1e759e0cc797f7a0003c2d0e208d14261df253681ebe2795836541ff4ebb82b8763fbe5ce182","ssdeep":"3072:TrvxlqyFWPMUAy9v42Jxd3BDRnD748ezoCrW4rlfBoKamBYuWhNJwhi1nkx:Tr5AxXZvDJH3bnn7etB5fxzYhJb1nu","tlshash":"ca041269530c763929af82bccfdac921eff0210d0a74d75911cbf8e90a7a0bb91f2515","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-08-14T05:14:19.531221Z","times_seen":9694,"resource_available":false,"data":null}},"time_used":1860,"timings":{"blocked":1742,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/fonts/iconfont.0080bb9b.woff2","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.587Z","timestamp":1783512251587,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadolibreui.com/css/app.f29bdbd6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 5212\r\nConnection: keep-alive\r\nETag: W/\"5212-1783448003199\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5212,"size_decoded":5496,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-08-14T05:14:19.44713Z","times_seen":8166,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/banner_01.e23b7a7c.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.154Z","timestamp":1783512252154,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/banner_01.e23b7a7c.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"91493-1783448003198\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91493,"size_decoded":91856,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"e23b7a7cc6d7d8bfaa1cec5747f0862c","sha1":"c6388b01594f67eb9f1f561b821df9848101407b","sha256":"b6d1b7d90f8205cecf78fa0a94fd7d31847eda157229997dc4fb5f5f9e526491","sha512":"4ea7f413ed07bc58d2ce7ca00493a2a0972eeeffe2952850c7f7be77705049126763df94f13fbaed4959dbadc44f5e67c4bcf37b9754e2be1258284c65ea5c2f","ssdeep":"1536:IYQIVEwRipHkXpFnEe4omEhy0N+raXOhqrHR0i:vL8qd8oJvUraXQqrf","tlshash":"529313808b123f6d3bdf864ab75b5d78b27d6d2d97138cf435443a518eae94068c1e38","first_seen":"2024-11-30T11:36:36.761101Z","last_seen":"2026-08-14T10:59:46.036326Z","times_seen":85,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":292,"dns":0,"connect":0,"send":0,"wait":300,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.700Z","timestamp":1783512252700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BSDSOJ7nuf+3Kn2E02akpKC9dohTVTbaY+p9tzmVPno3YfhdM9j5jJJNJhkIvtXvKCsG5xAd19Y=\r\nx-amz-request-id: RKA4KZ4189GXX3KV\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:40 GMT\r\nETag: \"c5a47705795cdbc1e8729597ae3590c0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 116736\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116736,"size_decoded":117134,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x890, components 3","md5":"c5a47705795cdbc1e8729597ae3590c0","sha1":"dc331981dd3aeb0e2ef49a5339b9de6fc874a6b1","sha256":"2c4fb62978884f281072fa2aac50acd32f422cd139a6e8c703c644263f3cfefe","sha512":"64b217eb462365a15e408992e9f6cafc4da3aeff8be47a4a0d9cf1eec22ae84b8c49db9e0bde58eeb4c3218d3503147fa72fb222e07dd10f09e08108934f491c","ssdeep":"3072:5e2yg9EXZZEXO06Ae3UYn/HFkdOQRC+p/o:ZyeEXmO06AuUYnNkkQRC+p/o","tlshash":"82b313ed627148c6e96c04b5587ec05c8a31138bb6d8af6f30fe1d221bcda512edf549","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:45.98433Z","times_seen":2435,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":495,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/api/chat/visitor/getEventMsgPoll","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:16.046Z","timestamp":1783512256046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"POST /api/chat/visitor/getEventMsgPoll HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 105\r\nOrigin: https://www.axd02ww.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":105,"data":"{\"userId\":\"520ef0bcdd81485e9729530cc6600fa4\",\"pollId\":\"b25a9e216ee0471a8fdde6730bf99276\",\"lastMsgTime\":0}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 12:04:16 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":185,"size_decoded":350,"mime_type":"application/json","magic":"JSON text data","md5":"940a6d59e638d915adc250df1d22689e","sha1":"6f759d48bd95c5a8673bd3f47a5fa72cd0d49b20","sha256":"0fd6fa6599892c077ed7ae22b392d41d8e22b36d8b634904aa41abcd68856957","sha512":"64b71575e8b4c58dc99a849e3228fa0e6c9ffd89ef7dcbd4dfbbf259212d0827c8e2a5a2435d0ff5b4db479d25fea68946306eb4f434b6e230972f55915befb6","ssdeep":"","tlshash":"9cc080839e3495311fc7540d11574a502f766944bc05bf9ec47d5e3b11d59ad9302571","first_seen":"2026-07-08T12:05:04.89978Z","last_seen":"2026-07-08T12:05:04.89978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.598Z","timestamp":1783512251598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 946\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":946,"size_decoded":1260,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f856cd9ba10bc234b569e3e84197cde8","sha1":"11d56d4bb96476bef2961dfcffc81d5bc533ba57","sha256":"2ba302473d4ddd762a3686f9a5fd2815b91403ac97f2388536087ab5e7a6ed19","sha512":"07c1a2c35eb9bd4012a5a447cd82c89eb1b4fb23a17b76624f3735dfd00b5c423ea25f0815453b6b5ac3539cb2377e56d1c69f103b21c7683390170505296735","ssdeep":"","tlshash":"0d11e10a1b88d0a81d44bb80d8ddfc88d0ac370bacb58a42e98bdd480a15f34243e352","first_seen":"2026-06-29T00:53:10.741261Z","last_seen":"2026-07-08T12:05:04.900756Z","times_seen":4,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.605Z","timestamp":1783512251605,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 71\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71,"size_decoded":384,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c4654fa4ff81d11b3c8d322ec628880","sha1":"080c15bfaa6d03e4ccdd092630344aaf1f003c47","sha256":"1f9573c145cceac2e7ec7273293953edd53fd282aca6e50acd9334f59f34a5fa","sha512":"61d2d5a60435f554ef05dcb0e1b1c47875ac6610289e4d3ea66013244a25a7b1b720d3927649ce420575cc00929d9350f519524350066508593ad659aacb79ed","ssdeep":"","tlshash":"b9a012009c155c150c03c244a84d260641c8210246404e180d041928017d43c21000b0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.982199Z","times_seen":5764,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/ar.67c3c531.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.634Z","timestamp":1783512251634,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/ar.67c3c531.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 838\r\nConnection: keep-alive\r\nETag: W/\"838-1783448003200\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":838,"size_decoded":1119,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"67c3c531d69c484303de6466d69e0101","sha1":"da79578a1a2d8719c49477b91201bc1c0c7b1c19","sha256":"852865fdddbe20ec89bd8d3743c81054ac7669b9be86d41dfaab26ae7d8175c4","sha512":"9dfab4c2b5eebbad44b3b9b1aa35d8cce377748d1a251d6f231f3fa51a45815d833f0bc329a711f186621928c6075f9f3ae06a7ab5b16f203f4a7cd3cf95981c","ssdeep":"","tlshash":"bc019cbaf616856dda1722b4cd44c05d680abdd561591b7730cf7fe3d8b022511d4b11","first_seen":"2026-07-08T02:38:21.611839Z","last_seen":"2026-07-08T12:05:04.902333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2547,"timings":{"blocked":2272,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/IYSEMY2tiIUM.cd5d738e.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.413Z","timestamp":1783512253413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/IYSEMY2tiIUM.cd5d738e.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7fa-3249\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12873,"size_decoded":5336,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (11064)","md5":"f8067aceb9507f908e49ff939be93035","sha1":"fbbe444eaaeb6041b7a86828f5d52a288d401b93","sha256":"aba689fa775c95f9d0bb811f783c18a94594102de671cb7e09e643779c17cc9b","sha512":"b3a7cb19195e2558d26b39cc784886924fcbb1d61855cef9cb26570f188170cd58f81ab7be8a2b193b3a58657758802ed9fbfdcfd3f188690903632a50fda5ea","ssdeep":"384:BHrFImCa4S2yw4P2CGRARHI9fOZJ3wkxSo7zyBiO61Fr+N6a:BLFx4S2n4eFApAOZJ3wronyBit1t+NH","tlshash":"9242a6b470d2f051877710f5c03f500ae23a38b6785c91a0a2aadce939f555dc677aae","first_seen":"2026-06-17T23:14:52.661988Z","last_seen":"2026-07-13T22:30:05.339523Z","times_seen":28,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/app.ed91c719.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:04.379Z","timestamp":1783512244379,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /js/app.ed91c719.js HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:05 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1271673-1783448003207\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1271673,"size_decoded":334799,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59934), with no line terminators","md5":"a4329c829b4d064935c57a87166cc52a","sha1":"d26febc207390d7f707e8c60571d73d633971d54","sha256":"3bd7d221eee8b5337b003d055b4a615bfe359251567cf2a24e39a43d56ad6970","sha512":"8d5ad824034a8787f8a670b8a7e3d5a62e29a3db9befd2a44c3d84d3d6a9b6a3878284b5c2b79dfd97dd1c080181ce9218985908482125166e7c3edadd7f5854","ssdeep":"24576:mzBbUulA5rtm6O7NopE2Z/cz9aBSlBsvYyVmsZ04dbuHAipuAYrI6ijON:mzBbUulA5rtm6O7NopE2Z/waBIegWZbr","tlshash":"f7359ede67d977f808988253a44f397932dc1cb9fb96e4e008fdc61922e5d85c213b29","first_seen":"2026-07-08T12:05:04.903717Z","last_seen":"2026-07-08T12:05:04.903717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4381,"timings":{"blocked":-1,"dns":0,"connect":278,"send":0,"wait":680,"receive":3134,"ssl":288},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.603Z","timestamp":1783512251603,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38125,"size_decoded":12459,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ba34a7e758aefacf42712c18d2744b47","sha1":"ba67236df9efc51d8d3e73cc84a3776ad830e1ff","sha256":"6d85abda7af9ae4173861ddd762fb433b1c7eec1d1b2892e9f543a86e8248bfb","sha512":"24fa342f07e96dae0ba1f0c970166af81fcf72b97bbeaf29729458163457ed055f3ce5065f55608eeb68bdc386d7e0e03e448b4d7b097bcb9ce793690cde1be4","ssdeep":"768:fnqyPT9yYvqmmd1S7t1JTcK90PNGs26JNdUg6pgV5:fPPhvvqqdQNGUNdcU","tlshash":"ef0309a1cbb85a690f5c01a244523a8ee4fdc21f9eb34f75896cef2059fc8b63b4541d","first_seen":"2026-07-08T02:38:21.616897Z","last_seen":"2026-07-08T12:05:04.904584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.985Z","timestamp":1783512251985,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xeTYD3QQ02TQ6LfKscGko0awvwgcKJiJcxHMN4TkuZ5no6LPMWYmVcbJPCPCukSmUsa+KIMpa6U=\r\nx-amz-request-id: 3AXCAVB5HNVB6S7H\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"1b8714109ac1c300a6848b18f4b10531\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27057\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27057,"size_decoded":27454,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"1b8714109ac1c300a6848b18f4b10531","sha1":"1c40a9917624327dcad395e8d0a9a204e24d73d0","sha256":"952d26075b0ffa3fd64c6add8791e566a5d7010f52382b468a3f1672c5496320","sha512":"4a5388c14a734141ce576fb7e988c90418774f74d2641dfda2714951ce30264714baaa6338374f69d053de8e232efa6e658ff156ac04412adcfa3d6c41a3b94c","ssdeep":"768:G7DH6SIfn5ChIqflgQY2z+CR8hUywK3cD:GRIRCm3QY2z+nCywKE","tlshash":"2ac29d5348089fc7b13ac361bf031e6daf96bf09d495beeb10920ac7bb34655ac4d128","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-14T05:14:19.556317Z","times_seen":9746,"resource_available":false,"data":null}},"time_used":2558,"timings":{"blocked":2441,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/fr.da16c38e.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.612Z","timestamp":1783512251612,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/fr.da16c38e.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 479\r\nConnection: keep-alive\r\nETag: W/\"479-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":760,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"da16c38e57a648dd2ae74dac1c33f5a8","sha1":"2790ba302a761dc4c2a9d00bc958c1fbe5d76be2","sha256":"38b39fa4c4813692e04aa52712d30f0416541f178fed9b96d14068d2aac5d292","sha512":"2d046741a684628b106f5c7a3cf63bcb793832e022f8159afb39acd649a5e1ecb30439e1fd99214324327f84e3ed13e8eeeece20770affa37f0bb157c420fc91","ssdeep":"","tlshash":"d9f09e63a662807c425b862afbb81467cd845933172ba5641e52d93750da7212725325","first_seen":"2026-07-08T02:38:21.618488Z","last_seen":"2026-07-08T12:05:04.905976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1809,"timings":{"blocked":1534,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/es.43057ccc.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.615Z","timestamp":1783512251615,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/es.43057ccc.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1392-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1392,"size_decoded":1734,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"43057ccc80af78b0dc8882d3e3ee6220","sha1":"8537bf3d8e2d333b487a87acdb23b6863f99b441","sha256":"43696da13f6bc214cbcd9666604d86aefda19d87cae63e2d58d6982a6147d92d","sha512":"8c56cb9c4de46cb6c4f367e2e6f7ef6b989f0c3add61d1642f46f2a310a93eb77900b112bfff336ee81b0317eb30a745c6bd983c3d8de1241b7ff654ef8b49ec","ssdeep":"","tlshash":"f321d8e58200bb52e8fdea78018c9d91fb2a6b490c05b46b3c9680b33e5a13c452bb14","first_seen":"2026-07-08T02:38:21.740175Z","last_seen":"2026-07-08T12:05:04.906805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1993,"timings":{"blocked":1709,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/1.ee9d78e3.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.648Z","timestamp":1783512251648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/1.ee9d78e3.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1161-1783448003198\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1161,"size_decoded":1503,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"ee9d78e3b61b11c9c87b925e715be6f6","sha1":"03e38bdc6daa64f9e95bc29dbb85650340fe1ac0","sha256":"9c432269c3b19ef70f680b8064dc41b59402c0d362d78f5c7199f0ea26695c30","sha512":"89ce519b97e5d06592e8f0d14779c2b8c744145942b15b01c717b428f296d6d8832f24560ff6f02f15e65175d701197dfdf0366cc1a1d5c2e64c12bd6f6eef98","ssdeep":"","tlshash":"3b21a7460b066e50c0160126ceee59dad75784ec104462ee167dbcbeaac398d4b16a43","first_seen":"2026-07-08T02:38:21.599164Z","last_seen":"2026-07-08T12:05:04.908133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1075,"timings":{"blocked":786,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caishizai-tk-mall.s3.amazonaws.com/type/2026-06-02/94ed400d-a078-4580-9b61-1a61e8821f41.png","fqdn":"caishizai-tk-mall.s3.amazonaws.com","domain":"caishizai-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.124.60","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.905Z","timestamp":1783512251905,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-06-02/94ed400d-a078-4580-9b61-1a61e8821f41.png HTTP/1.1\r\nHost: caishizai-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BDuNKNlMJHFpCz85s37ltx3+OCaUXjADg2dmBPIsQ/CYw2WeFMpqRLJbWm92o2NmVRFvKnbYJOg=\r\nx-amz-request-id: 6M5PT3YFB5ZQEP96\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Mon, 01 Jun 2026 17:03:39 GMT\r\nETag: \"088edf88f59990003d8f3ee8836fa6f9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 899348\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":899348,"size_decoded":899784,"mime_type":"image/png","magic":"PNG image data, 1024 x 576, 8-bit/color RGB, non-interlaced","md5":"088edf88f59990003d8f3ee8836fa6f9","sha1":"f4c553abe70f0f0ebb077e5dc081abadf48ee38c","sha256":"e06b0f315d030a03393d96972fcce693b11e43c9c95b2a98b125b3b1d01d28fc","sha512":"54a330884fa342e4b62e7c2325e497bae71522490a9c9a24af22cccc517a5e4b93697459fe5dd6dcb68bdd5c9367e6d71310c8364dc685e2e6710aff1a66ace9","ssdeep":"24576:YP8vSk4GfwhTOC3vyM496ztYFYoEoxw0rdUEykPR9qk:YT+sTx3vyT9IpoE6w4CvUvD","tlshash":"e1153385624c5c36c907fc51e8513c22a6b93edd7a41a2ed2cf4e4892573fa37173aac","first_seen":"2026-06-29T00:53:10.755126Z","last_seen":"2026-07-31T06:32:59.734103Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8720,"timings":{"blocked":84,"dns":0,"connect":269,"send":0,"wait":330,"receive":7498,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.969Z","timestamp":1783512251969,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qFmfkkwxSLzICWobwhw57WsWepAfla2Tw8RiFhcZ9dUXz9xlW2w+2tPxJP10rgbtaO8drmsMHfM=\r\nx-amz-request-id: 3AXB6Q3KMAWXNPPB\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"882acb8a590986400f716b14ce87dbd7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27557\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27557,"size_decoded":27954,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"882acb8a590986400f716b14ce87dbd7","sha1":"69d9585cebff24ca05746278353d9723ac581960","sha256":"1c488a620a2342179fea9b5325ea4b5e0e450de64f3bc3383c67e3040242d1e0","sha512":"21cc314fbc6d011adc782475102dcc061e67ed01e1162a9046700b1375b1841701831af77286cc0fead58c997eeba79f5e1d141cdb124ed7881fbe71315c65a6","ssdeep":"768:GG5AJy9ToRwVbgiqHgdBAe9u4p58OsHIE7W6lWG:GGis9sRwVbgiBdieWHTlWG","tlshash":"40c27c039c854ad3b575c391ff468f6d3b8aaf08fc5672e710e11eda37a01424c9da6a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-14T05:14:19.411534Z","times_seen":10089,"resource_available":false,"data":null}},"time_used":2213,"timings":{"blocked":2094,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.213Z","timestamp":1783512252213,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39803,"size_decoded":13325,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"16177ed2844502c6f644af6cbb7715ae","sha1":"465898cfb39af3289407963154c4c31949aa76d0","sha256":"5e6895439ab9bfa13a64b7805133af5bdc75b9fdfca100bd54dd0588feacbc85","sha512":"b5e607a9dfaaafad142ce8262638eba298d99b97bc8b90324b7581d2a8429d413c4449b8d908f993acfcf4a5daf33fefcd320e3afbe7edc19c265aa19c88b63a","ssdeep":"768:Cn08bg4BJ7n7pG5wSH+/oBKBTOfkX4n3lnVvu0lQUyZ:C08MYz7EqPnFOfkX4n3zu0lK","tlshash":"0f03c762cbb945210b6c41e58957775ed0eec22b6e738f568a7cdf342cbc43a3a8141d","first_seen":"2026-07-08T02:38:21.751481Z","last_seen":"2026-07-08T12:05:04.909952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/runtime.ce51e0d5.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.112Z","timestamp":1783512253112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/runtime.ce51e0d5.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7f9-1230\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4656,"size_decoded":2472,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (2938)","md5":"dd0267b889f522b4b0ec9cf9b9746aa3","sha1":"2c1a3fad0b1f3205d05dff5adc87fcbd6d4124b1","sha256":"b70cb9db555f34d517952b58f88192b24331cad25b1c8212b64235c18757b264","sha512":"d96217cfbef8fded1e5d77da1c4b27c9ede2d332ea98f0592fd6d18733122d36a235e5ffd48621b1d4743021539ac41b9769e4ebfb4d604e1ab50826c31727fb","ssdeep":"96:sM4DUqZUCjOpeBVRVDlo501kIjCnU5R4xNYc9W:sJgqzOpqbNlKMCU5RKW","tlshash":"5ba193ed7399b5b16663b470443fd50b713b2572280e58b1e70be8a7bd388895017fd8","first_seen":"2026-06-17T23:14:52.688078Z","last_seen":"2026-07-13T22:30:05.369247Z","times_seen":29,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/hi.ae691827.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.637Z","timestamp":1783512251637,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/hi.ae691827.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 843\r\nConnection: keep-alive\r\nETag: W/\"843-1783448003193\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":843,"size_decoded":1124,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"ae69182791fb6a4eb86a02e20928d640","sha1":"f5ef4de23a1969ea53bd8d5a72d35a1a5c97e661","sha256":"5c2825a1fd2f933762e4d00a996fd3d4088fa63e1c318b5c64ce6fd6d4e9c607","sha512":"5822aef34a3294b2888977b5e667a7597a61b70c394b883514462a6ed5b043807e36799f0e2b63a48c09b9cee2dd5744a1b29c7bdf64ba4ca8b16be951086e54","ssdeep":"","tlshash":"0a0186b0cb502c48d6760fd8af1f1494ccaa3d79afb0d99e4265b4ba42358282bc0755","first_seen":"2026-07-08T02:38:21.759647Z","last_seen":"2026-07-08T12:05:04.911333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2631,"timings":{"blocked":2354,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.973Z","timestamp":1783512251973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yYJnPnhnnHDlLQ9awnkVFibpLjxd1tVQyvni0DeOXMh1vcD2cYvc/kkGKQUwoOxlGGZ1OM2Wlwk=\r\nx-amz-request-id: RKA979ST77FBBH58\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"87706f749b341f09c0d4f313a08fc43e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 29992\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29992,"size_decoded":30389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"87706f749b341f09c0d4f313a08fc43e","sha1":"1509845938ec37024267488237d11e718cde9f13","sha256":"b7fe2721d939005c3d167ba39f1512ee5ba880a08fe370ab93dab990ff0a914f","sha512":"862ad1c48221a29e8fbeeef1be46b06d77617afd44de9e63598e0f746aa0277ef3c79366454df627aa6c12f465440d729d9157ba768922c90a574439df2d195c","ssdeep":"768:Gv6RenUljXtCiU+uKMHNDBp56HJJg0+Fz7P:GVnUlJFiuJ6FfP","tlshash":"67d2ad27aa50afd7b448d7a2ff030d862fda522c41d439de81d76b436b18b77480d1ad","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-14T05:14:19.488511Z","times_seen":9960,"resource_available":false,"data":null}},"time_used":1971,"timings":{"blocked":1849,"dns":0,"connect":0,"send":0,"wait":120,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/85c9fa3a-9c9f-44f1-aff5-1f72797dbdb2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.126Z","timestamp":1783512252126,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/85c9fa3a-9c9f-44f1-aff5-1f72797dbdb2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: KcoxKDN0TT3gM/idL/b3tf2kqzVEiTPDqZPOO87va8XqgImOWsVULBouBRps6BF72Kag020EGRU=\r\nx-amz-request-id: 6M5Q9PTV63BQSEXJ\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:16 GMT\r\nETag: \"b8913d9e5154ba64e3fe7bbb1e357d39\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 115039\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":115039,"size_decoded":115437,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1214, components 3","md5":"b8913d9e5154ba64e3fe7bbb1e357d39","sha1":"099900879ee6c6ffc46886c6c7a51deb002620a5","sha256":"323c53514398146cf826ac3c7492cb33fdbf76048efb002dd7245cac6ac00de5","sha512":"1b3d93f1860985cf5a4523f0f637f212b67d23dc4083d74b905209fc50179efceef7878dc86d5f0a19a3e8fe499a5989dcb47f76445872f1551296dda4935dc6","ssdeep":"3072:tnAsQmUqLtgMVlm8Bq1u7PqMQq8+5AsIBYbu2ILf3rQX:BAq5SYlVg1GP50qC2ILDM","tlshash":"eeb3128b8363f8c8ff17a0b56f84b712e516042539b136840eed1614e27ea6f7d47e51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.98508Z","times_seen":2466,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":735,"dns":0,"connect":0,"send":0,"wait":117,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right3.7d93ea42.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.275Z","timestamp":1783512252275,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right3.7d93ea42.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5498-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5498,"size_decoded":5714,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"7d93ea42b0f3ec512403c4f5978e034e","sha1":"81ce6087a121e350ec95dab1e386f3804b83cbe1","sha256":"e854f7ceccd5259b486859db7cc270805b11a1762a11f1a74ca43a02bfd2fac9","sha512":"925345e3c5175fbf16314f08470e1191eb4d4a7c33aa15c20ed8d9b78d370effcd49c53f7144b4e0b2428bd0509ca05c83009c41bb42ace995857808ee10415a","ssdeep":"96:Wh4GDfN2qrFHk8A3CrwfOIngvJlMde582vqxe2CjEploBUs3:EZ7XFHk8A39QhDQVoBX","tlshash":"d0b18e9fb6cb3d90f766043be4ca1d5922d67b0614d067fc80a87a0f98bbc714e10868","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.961889Z","times_seen":419,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":334,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right8.5abff5d8.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.283Z","timestamp":1783512252283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right8.5abff5d8.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"4947-1783448003196\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4947,"size_decoded":5214,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"5abff5d8ec10911dc3627af31bb816f6","sha1":"78f48e00671ae49cb966becdca71bc72d787958b","sha256":"8a4272a1d4acd3ddbe78a4f4fa3ce3a10b5b2768e06fbee04a70a0597b65eea1","sha512":"7b72c1c7ddf2338a698f0b98ed72712cc83ae066e97339ebe4fa192bc6f60042d07b450547f9945a4b43244622bae0bd4d7b3df1c97686c62c83fa495887e9d1","ssdeep":"96:Wh2/Ha1ZcZNczzMAMmrGxCMpAdWWxzq/SVbFNXJakuuHcPL8z1UlmXexHgvMjH:E2/0ZNMYMpfWZbFNJuu8PYz1LOxHMoH","tlshash":"7aa16dcdbe242d3bef1181b2b946172b1a68093468a8c77d219d3e28691fd710e79c66","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-14T10:59:45.948125Z","times_seen":422,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.696Z","timestamp":1783512252696,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jh5EZnVW2OO2DslKfzKnwMfDSlip7W0NGEvtZomxeT8pkCyIm49hJ4vCCmg47SBFtx6TmlVWiys=\r\nx-amz-request-id: RKAA3V169N42EQM4\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:54 GMT\r\nETag: \"07f95e174804bff3d97c5b13f915cf7d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 157447\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":157447,"size_decoded":157845,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1261x1459, components 3","md5":"07f95e174804bff3d97c5b13f915cf7d","sha1":"fd90a34dd34b37bf7d1c3f62c563c35d2ac8b82a","sha256":"872dcd22912f0f77f949b0642a505d3955f616d070da19c652f4312243eee5c4","sha512":"33010f75dbb816564d931260fb29a588407a9367f82140ccc3bfc33472a049cc8015a5a955832192affe139118dae18a3d5d2a4395227feb2cb0223b7dbc705d","ssdeep":"3072:UUwHcs93dkA8nkSsanKc4hUm1wyHhJ0qmz2WBJBrDymn8hKB1HoT:hs9tkXbsanKJOqCq85D58MB1IT","tlshash":"a0f312537850ac65dd7a4332a3266918bcc0e364dcbdc988417b9d4b87a811b6dbfbcc","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:45.992711Z","times_seen":2481,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":413,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/layouts__index.aef6f5da.chunk.css","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.419Z","timestamp":1783512253419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/layouts__index.aef6f5da.chunk.css HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7f9-55a9\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21929,"size_decoded":5820,"mime_type":"text/css","magic":"ASCII text, with very long lines (21928)","md5":"1fae21a22d98352131d559dcdf4c462d","sha1":"6d640c783c96a55a4587655a0ec5676dc1cd6ec0","sha256":"bf0e7fd9f1309f91385a0931da81906dbe427b7ccb89905301d70321ad655f6a","sha512":"2b1b24ca45f5ddfa85193391e37852a8b1cebfe52dc2a4c9711d3a27f77375e90df11894b4e1fafa300687fb3d689da3e1b36c527aab9ef3fb774b806b2dcbdc","ssdeep":"384:dUrbc0UUxJW/FsG9wmjW9QbBzuH8NSGQd4gVt2/X8aOVdWoSsggjK4TMcDZ:MbcMKI9Q44gVtdyIDMcF","tlshash":"dfa2e8313d4c6038f66a419e35cc9784a519db93d13799eae182e094ffce3d32b58b49","first_seen":"2026-06-17T23:14:52.64753Z","last_seen":"2026-07-13T22:30:05.391639Z","times_seen":28,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/logo.355c19ce.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.647Z","timestamp":1783512251647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/logo.355c19ce.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"16126-1783448003201\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16126,"size_decoded":16432,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"355c19ceb18ea554286e4ac3aa0bcd6c","sha1":"a009e65429f6f10bf1cb3179fbdaba2f197c9851","sha256":"3e1f7f79ad665210b3c4f9435724577b9ef45fefec4be33fa71258d811c67b03","sha512":"57f30b7afa6c3574e787eeb365e16fa052cef1f3c0e60ad2a9d3b43aad79d2f43df665cc1313698969b6aeb62e6345f4b49366c1f9b6ef6311206db22ffcf20b","ssdeep":"192:MLnkgbEFVT85vUZzjhzDkmVoA749+4SKRUF1BhNPFWEFVvvfjVrJvnNKvXZ+92e:uf6o5WhEuoS4o4VRWhNt/VTVl/NKx+Ee","tlshash":"7972d005eb426c9c76e2ca5ab00b13c66483e3e4e929e1003cb3dd55e596ef2724ced8","first_seen":"2026-07-08T02:38:21.708827Z","last_seen":"2026-07-08T12:05:04.882568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3062,"timings":{"blocked":2474,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07V3DF1QP/51G8uW4FLLL._AC_SL1010_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.005Z","timestamp":1783512252005,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07V3DF1QP/51G8uW4FLLL._AC_SL1010_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ybgyh3niW7udt2t258XMHnvhai324cuLXuc2wMgPpHvb9wj+g2hqxZ7MpA5XcqquPNmVp7BVDdo=\r\nx-amz-request-id: RKA68HTA3VTBZZN1\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 02:20:51 GMT\r\nETag: \"933feffc6f87b5e835ebcefde5c5c67c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 8680fdf2f0e12092efe3d61a6df35efeeb6658f49e10a7397687c7f378021bd3\r\nx-amz-meta-s3b-last-modified: 20231029T132225Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 45111\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":45111,"size_decoded":45641,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 499x956, components 3","md5":"933feffc6f87b5e835ebcefde5c5c67c","sha1":"b4961dc6b0b61aaf05cc9e4ffc4318eaaedd60a7","sha256":"8680fdf2f0e12092efe3d61a6df35efeeb6658f49e10a7397687c7f378021bd3","sha512":"1fe7f9b5dcfa651626616464fe7b1c25946eb77d2fb4d6739bb2cd9e9c5012feef50e8928dbc6ee5a125570949760b702b647bd4ed73ea7cde3b4cb853a45bf6","ssdeep":"768:ygg6D3BnJNDyRk1XT3cR1EHhRToTNw8sDd+TnRrJq/TEdjBxT1:y383hPSk53cRiraNw8sDy5dFx5","tlshash":"0113f1cb2eac3597f1ae313bf24150414b9aebd1a8b0da71752380441435b7f6de746e","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.952624Z","times_seen":2437,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":993,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.120Z","timestamp":1783512252120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XSkke6CbZNFg2JkNwqJVP1vWeSvjGs+PTFyU8BUq9vm0Y5k8iHjwBSoP1Hyu3Qsbxhqjrq7jzYY=\r\nx-amz-request-id: NAPMC4WQ9H8NQKXB\r\nDate: Wed, 08 Jul 2026 12:04:18 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:37 GMT\r\nETag: \"69ea9ab0655294c4e81cb9123f9b84ed\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117788\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":117788,"size_decoded":118186,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"69ea9ab0655294c4e81cb9123f9b84ed","sha1":"249e0e3b9f9c8ebb9d3c2b0e8f96db0bbbb96233","sha256":"49bd15612e8028f820eea86b82dafa4d5e439225445e527cf5a3232ed060d942","sha512":"4e05f275f9d9ccecc1ff61aaf45278811f0062aced05aac2d3d4c7648c4be9e1130cda1ec819a3a4503006a7c49b87fe94e1bc71657c2ad2708080425857f71e","ssdeep":"1536:3edS0foEyCuEPL1TVLKPXCTmcgFbbLmWEDBygAcq5qtlDRVtU+e+aPZl6ejI9li5:zCAEP/ICIbCWEBHAcq5ylFVBIuNuV/lr","tlshash":"18b31204277e7cc1c2f9a176c8b1567a57b5c74ee2dd9714ab5a3401cfe3a202e10aab","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.976442Z","times_seen":2417,"resource_available":false,"data":null}},"time_used":6224,"timings":{"blocked":-1,"dns":0,"connect":93,"send":0,"wait":115,"receive":1013,"ssl":5003},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B08GDC6BXT/51nqa1O5NVL._AC_UL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.706Z","timestamp":1783512252706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B08GDC6BXT/51nqa1O5NVL._AC_UL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ebJB1fcOrhsVNvfHSone3jzPri+ZN5am1hJfS129sjHigBTC4sS6Cb5WgcpzyFw1xxc/rs9uTd8=\r\nx-amz-request-id: RKA1QNF7ZDENK5JZ\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 13:50:55 GMT\r\nETag: \"cb24f33cb4ff359a439a0d73bb6d2752\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 35067\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":35067,"size_decoded":35464,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 650x1000, components 3","md5":"cb24f33cb4ff359a439a0d73bb6d2752","sha1":"c2cd25233de083ef231ecb1e99144800c46e6d02","sha256":"e0c66d00c9f5ac611d2f61f078eb40db018df1c3af4046bca89a51d4d4088a86","sha512":"d0ae7b1278b28519a69abd0b69d83bf426d16ef8e87f2008c2c3eeb5ec0c32dcd725f968a87a6285abeff6e855ecf59a4cf4891eb12abb14a2f62dc74fb90ef6","ssdeep":"768:1K+IIdonHnMKYMvOjEXpdfUbHHOXMG5NUnLlRFdHLebFEPslsnQrqXU2:IPI2sBM22obHHFacR+ZxsnQEb","tlshash":"97f201b39248d715c8684bfe18bf1ae7fa8c90e00daf594245300c52be5ff902a1b5f9","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:46.039616Z","times_seen":2302,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":611,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/css/chunk-452824fc.b91566ea.css","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:10.610Z","timestamp":1783512250610,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /css/chunk-452824fc.b91566ea.css HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:10 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6834-1783448003213\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6834,"size_decoded":2049,"mime_type":"text/css","magic":"ASCII text, with very long lines (6834), with no line terminators","md5":"f7b1de25905c81c373dba149d03c31f9","sha1":"862e37406535632dfb53a15f6a89c16efb3c94df","sha256":"e75dbd8d3fa49fec96c2b893018aed78a616974cb812b015636553d832881751","sha512":"5a2f0034e39196a38ce44b9d9cc46301069bf252b4f092c46db65bcd45a55ed05a6b53bc8241f14a5f5390b530394bcfb0ffea60b21c9262d0b669e07fd1707d","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MC2:Zz33lSD1v30I/LPxDWrhxuuz+","tlshash":"56e10ff2f231112f7426953be18389e8bc86b10dd3ffc656ff84b514daa9182063518e","first_seen":"2024-03-24T18:07:06Z","last_seen":"2026-08-14T10:59:45.972232Z","times_seen":2041,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/af.21a15b51.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.620Z","timestamp":1783512251620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/af.21a15b51.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1138-1783448003194\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":1477,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"21a15b510b52cd0b0294072d24ccb150","sha1":"6755bcc6254901c5d3ea8cda2f371ea320e17417","sha256":"591f5201cc1d93ce765c39c6e6b5c53d037050e5e1db0d8d496c9551d48b1c47","sha512":"837282154a6faa6a19c2bdf36edbcc9dfb5053734c995df0bff48ac90856e50054d95a1b9c605863cfdf95d76edd30a0293209a4e6372e8a71395b01ee98c13d","ssdeep":"","tlshash":"0721a778bcd61fb4d7160833829bf2ab65f296205d55d31405fd9a0e0b046f5401006e","first_seen":"2026-07-08T02:38:21.688394Z","last_seen":"2026-07-08T12:05:04.917339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2203,"timings":{"blocked":1926,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/fonts/element-icons.535877f5.woff","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.229Z","timestamp":1783512252229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadolibreui.com/css/vendors~app.37854dba.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: font/woff\r\nContent-Length: 28200\r\nConnection: keep-alive\r\nETag: W/\"28200-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":28485,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-14T09:26:19.638697Z","times_seen":29434,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":583,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right1.fa614e85.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.271Z","timestamp":1783512252271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right1.fa614e85.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"4805-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4805,"size_decoded":5070,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"fa614e8564bd8fa171946cee9c08504c","sha1":"5ad655b83ee431328fd0f99245fc9ba34f921478","sha256":"6679a46d4c1ad7d989cfebb329c48714ecb8b737239e33e05bbd07cf6a228734","sha512":"e8151e57150ee33a29e7c6a436556874696b187531be777b7ed2441f5ee927ac77d47c546bf5c8026f3a3ac6c64102ef9a5eeec7f17720bac2250e27be35f0e7","ssdeep":"96:WhS4TkAFMLFwDLyk6KPTLPwrAO824idlifhcL1qYIwEfRHNRXb9z:EdFMJiOklLLGvG83ELRXF","tlshash":"4fa18d4f67b66c5eebba8b7c042c8f982912dc1159321fb905a05c199d2fcfad9603d1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.944601Z","times_seen":416,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/favicon.acf96a0d.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.122Z","timestamp":1783512251122,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/favicon.acf96a0d.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"27930-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27930,"size_decoded":28152,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"acf96a0d7b571629ef3e4bb6f0db8294","sha1":"2d25deb0ed744d76278e127c3444ef8bd7c33c09","sha256":"b389845377938d4967cbfcd9bb80644acedf5f44be9d8dc16e300b7d0de7a659","sha512":"fdf2001126189f78cc241b9bcc1f8dc1c2cdbfd1d646fe5c3f8b364fe6fd9b89657cdc8a12b32c62f84c76f77759da95db572f49fa3f1a699e7062c885da4fd9","ssdeep":"768:k27sMuaXHcGb6Opz6iEOxzb63JQ7p0EDo:k1oH5REOt+3J00wo","tlshash":"f4c2f1f2e481de57f784a23653176366fbe2410918e9a46ddc23c8c2d96f25b2e1f4a0","first_seen":"2026-07-08T02:38:21.780147Z","last_seen":"2026-07-08T12:05:04.919112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/th.b2a26d2c.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.630Z","timestamp":1783512251630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/th.b2a26d2c.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 976\r\nConnection: keep-alive\r\nETag: W/\"976-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":976,"size_decoded":1257,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"b2a26d2c83e0f20d6f162a5394fea2ff","sha1":"f86c29c064062dbbefce545541816f028c2389e5","sha256":"dac13fa39bcc81dbd146f83c07b44a47ff6632ba52f6e77ce66c149e12444f2e","sha512":"98538f64af64c3a849519fbfa198dd9ae9f4dc43e4653236ec8d1167ee2fef55b3ad08a83ad829c0582f151da2453ff906e4d5af1aec2da579ce4c92c575c097","ssdeep":"","tlshash":"6311c89f0ad52e0df2541cf03c5f112a0b725d85c0003705879bbc211b75456e1c7bbb","first_seen":"2026-07-08T02:38:21.736054Z","last_seen":"2026-07-08T12:05:04.919991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2475,"timings":{"blocked":2203,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/vi.4ea3c3e2.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.636Z","timestamp":1783512251636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/vi.4ea3c3e2.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 790\r\nConnection: keep-alive\r\nETag: W/\"790-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":790,"size_decoded":1071,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"4ea3c3e29e344775b0c57b7eb31a3293","sha1":"1426aa06f366f2c3b9705de49e0e02a04039a9f8","sha256":"34efeedd4273b47b27c3911b3e886a298de7e5ea4ce4f728d741fac88676ee07","sha512":"11e7301ea49b73f447e2585b7ffb22094e986619663f35a5dc91ea0560314442cd935a300175c0dda2dcda896aa85a9402e3f54d321b73353412fb79dc7aad36","ssdeep":"","tlshash":"4c01816fd6600a0af85bb302830e0097ff430ac06120089d20902befe21e0e97710db1","first_seen":"2026-07-08T02:38:21.770849Z","last_seen":"2026-07-08T12:05:04.920957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2599,"timings":{"blocked":2308,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07XGP7HTW/81fwoaIeEOL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.003Z","timestamp":1783512252003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07XGP7HTW/81fwoaIeEOL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XpeM8gmBrnKIYe8VIVl7npq27bGnNDH97HzpywbKuZU8ELXNI2gvxT3JepNoPmG+pX+6ejhvHBc=\r\nx-amz-request-id: 6M5YWRSNKQKZGS0P\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 02:33:56 GMT\r\nETag: \"ddcaef2c6aac08fffa6008f8116d4863\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 805c8fc4de4d9c9903f475acad7422ecf82ac2ccf5bf0a442a1686d1f3fa2026\r\nx-amz-meta-s3b-last-modified: 20231026T130616Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 237068\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":237068,"size_decoded":237599,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x1500, components 3","md5":"ddcaef2c6aac08fffa6008f8116d4863","sha1":"5dfd62507f633aa81445a44811bb63809316c059","sha256":"805c8fc4de4d9c9903f475acad7422ecf82ac2ccf5bf0a442a1686d1f3fa2026","sha512":"95bef3e1700d32e6085d333d6564db07c4e9d6ca15f68db74153bfd184d8742022929332333565410ac220335e3cc373033aaedecbd28c5f7e9ac7fccc528d7e","ssdeep":"6144:p+zpCBaXboUhv83vTJMuOeo4q0l/l0yBsiaDkKhPbqTswCTh:p+pXboUhv8oe3lBBZcWoxh","tlshash":"933423f5eea10b8adb466b3489c02f21507e42e18d4dacb643f2e76245dd0d8d3ad672","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.99053Z","times_seen":2369,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":301,"dns":0,"connect":94,"send":0,"wait":118,"receive":378,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/id.31fcad96.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.638Z","timestamp":1783512251638,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/id.31fcad96.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 412\r\nConnection: keep-alive\r\nETag: W/\"412-1783448003197\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":412,"size_decoded":693,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"31fcad96c741bbec4cacb758d9b201cd","sha1":"13837593d8a440cfaeb6acbb65b78c4dc24136a5","sha256":"34e79d95f5ae64eaee55cb7e2c00cdca27b16a481ede94d28ed5468a8331e043","sha512":"86ed1dc943eb804fa05a80350ecafdd9210ac35bbf3d3343fd7887968ebb6baeac5fa3fb9990cc78a8ecf50d5d0a1643e223c81ba56f3e6038090621d770ed93","ssdeep":"","tlshash":"dbe06845f282ec24ca6c0532cd39c4fc25324d45fc71e0a3b10473af7531a00a091305","first_seen":"2026-07-08T02:38:21.623043Z","last_seen":"2026-07-08T12:05:04.922434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2641,"timings":{"blocked":2358,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/preload_helper.674b2ac2.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.116Z","timestamp":1783512253116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/preload_helper.674b2ac2.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7fa-5d4\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1492,"size_decoded":1119,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (1492), with no line terminators","md5":"59df994e508d36d2b04ab0e4ebccfe37","sha1":"da2d730b17ed7ec340f33946360aefa0adea51b3","sha256":"a88a06edac50d4d5405a15d2d795e0adcbea4376e108b43661ea4746fc1dfda7","sha512":"8779aa3230660b50e3d5ddb8cd2da00a94a55fed4d608183ac7972fe84c3d3b43706d5cfdf445d5ea7e2162f6a6897a88ccad4b825f22cd830deac77417b32ac","ssdeep":"","tlshash":"5b31766e76115c68aea52859800f1282717f1b832f05c475706bd8d80e39fc87723d2f","first_seen":"2026-06-17T23:14:52.674448Z","last_seen":"2026-07-13T22:30:05.329745Z","times_seen":29,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/home-icon3.242833bb.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.641Z","timestamp":1783512251641,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/home-icon3.242833bb.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 454\r\nConnection: keep-alive\r\nETag: W/\"454-1783448003200\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454,"size_decoded":735,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"242833bbcaa4b2e475441b77b9e14853","sha1":"b6f97c6936fb3954e4c0848498725536832b1891","sha256":"c50c70499461993add43c36c393a0dafc8c2e539af19db5125354a366cd36432","sha512":"4c06b0ec243ffbd9bfbb253ca8c3728a285f97c17c587c4076ef3643224cea203a964fddcdda7db9b3b9a06f645edf3064965e71656e303a9c7a96f2974121b1","ssdeep":"","tlshash":"80f0f1856200be3cc17a4f155df40292d7711e04a37657379d03789cd17326d94c1753","first_seen":"2026-06-29T00:53:10.728978Z","last_seen":"2026-07-08T12:05:04.923712Z","times_seen":4,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B082Q6RMD4/51LNp4aSxDL._AC_SL1340_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.007Z","timestamp":1783512252007,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B082Q6RMD4/51LNp4aSxDL._AC_SL1340_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: m5+aT6IgI0SZ5rqTqY90kbFRUkwVowx4UKSf+/cbpzuya0tZcrix2mAbUMb0wJwRzzp5LUJbQSQ=\r\nx-amz-request-id: RKA8QC5DV6CENHMG\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 02:54:04 GMT\r\nETag: \"8827b56e1c75a8cfd6be59a5b6d760eb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f63ce9701ef5941dd9ce6ac432a09e5636f1e0685ede2c4aebb39f96638eec8c\r\nx-amz-meta-s3b-last-modified: 20231026T124940Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 32549\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32549,"size_decoded":33079,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 431x1340, components 3","md5":"8827b56e1c75a8cfd6be59a5b6d760eb","sha1":"24f3ff786d1c9fe9e787bd9d1977b90aa1d9c3f1","sha256":"f63ce9701ef5941dd9ce6ac432a09e5636f1e0685ede2c4aebb39f96638eec8c","sha512":"233fbb69169772f8a86abc5ea61ae787e1d9b003148430041b7d3e38adf1257e53f1bbb07f31f7893dbda96679864f8d78d9587298deb69013ec2612f7a02d49","ssdeep":"768:dx2GWbs6oBwPJj88PBuMQmJOcjEiKyquTxPOKIjktU:Oe6zPJQ84vcjEinTxGKIjSU","tlshash":"7fe2f10582cbd7d1ed521c7225fb3336df24eb0ea5fad05d3b202b86951ba652683c51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:46.037695Z","times_seen":2433,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":1060,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right4.c4ebbaa9.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.276Z","timestamp":1783512252276,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right4.c4ebbaa9.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"4704-1783448003196\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4704,"size_decoded":4898,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"c4ebbaa9596cefc52a8ef83be74bddd0","sha1":"c9096ba4316dfecd3256cad10bc3433d830e2891","sha256":"a157b8c76a2827e6e363e939d4ca8fb9766460eddc3e78cdbd6e63bccdd1ebd0","sha512":"d2241a4f50814ec3579576085c9086059508f6b04dea353e9c00ff44168e820cb7f02d967a992f84de12caab31ee46d94509be798bca0d7f4d3be8f9fe81a4ee","ssdeep":"96:Wh+tAid+HAua4Aqt9u4F3DRBfO18AB/x0qaZIPdwR3ODcpOfxukRbnCRTVMfn:E+tJ+gBvEwgRyHSIPmR3OD485hn66","tlshash":"59a17e9bcffa688bff121f7bb124245975810e036a01eaf344014d7ab927c718743596","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.945609Z","times_seen":425,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":734,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/chunk-452824fc.c50e769f.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:10.614Z","timestamp":1783512250614,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /js/chunk-452824fc.c50e769f.js HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:10 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"14060-1783448003213\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14060,"size_decoded":4666,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14060), with no line terminators","md5":"31cd253eee7cecfe97b2001ac3420b1f","sha1":"f2dd66c197e450795ed2b52deb63436158ba8799","sha256":"a0dda66392e8e101566798f08a778c7b33176bf3afb52b8b59dacccdd7d7bc07","sha512":"51ff1cc9d2ac1bc8fbf5a93468d2418b93da1b4ff56dc22528efe8e621fc39854b5bb06eee0ea390ece25bac840749ad3ff7d8865f97254514c9c890b8a9df85","ssdeep":"192:PnCjfA6isHsuDmLDYRRHEX8bMuMOOme5xqzcictjAfNeNF/BPsGCYC:qfjisHfkX8bMKGm6vPe","tlshash":"365294e6c470a4bd895a92722045f1e0fb643a28d106514ffa7cec9a72ed424333e77e","first_seen":"2026-07-08T02:38:21.614885Z","last_seen":"2026-07-08T12:05:04.926202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.991Z","timestamp":1783512251991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zJwh8YkpouIQ7PISgTsBL4nqyElpHSpF3Kjxk+u3o0/heaPk4SO7uBXM4LeLYHdqbqaxiiZvUCU=\r\nx-amz-request-id: 3AXDDKSDFNH87689\r\nDate: Wed, 08 Jul 2026 12:04:15 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"a7d470fbe103fb9a6784c6e3bd450ccc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96012\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":96012,"size_decoded":96409,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 500x500, components 3","md5":"a7d470fbe103fb9a6784c6e3bd450ccc","sha1":"cef53fa7fec6b069bc298b96adc02886d48a2bd6","sha256":"4529834992120ae959682d5dfc40e76a46db199fdbe4b20fd77e5d1ce92accd0","sha512":"e429d8efffecef5f79cbdab092f84a5054126fb33ee4b22d8e50861cba8d10edc49b41b5d0b8d02d997428b0f661816cca586b58f15d10cab9629375de8ff737","ssdeep":"1536:Kvlkpltm3DoZ3IUr1vvliVOHylrocmmIqeWJ6BHlCJsSEBT+qScNiHoDqlSBvP:Kvl2tm3DotIUrxtiVaylroc0dPHQJlsZ","tlshash":"1f93f19fdd0acc318b46e0ea7a85c1a364b9c25354d0f97f5739d8b6c09c7b99802cc9","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-14T05:14:19.579115Z","times_seen":9660,"resource_available":false,"data":null}},"time_used":2917,"timings":{"blocked":2799,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/3cba5c51-596c-43b4-bb0f-801b2551a36f.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.128Z","timestamp":1783512252128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/3cba5c51-596c-43b4-bb0f-801b2551a36f.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gCSTu6SbFBdfyGWFiNrcCgt3VOD2M8AeoZM3j8XYUU6uojaBCXr94/ByuORtC1E9DPUSnB9Lpww=\r\nx-amz-request-id: 6M5YMD53WS9X28K3\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:38 GMT\r\nETag: \"d08309c8a906abec10902eb9239abe8c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96181\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96181,"size_decoded":96578,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1339x726, components 3","md5":"d08309c8a906abec10902eb9239abe8c","sha1":"aeda5384b198a7af5ef2e0b674dee8b5c8e9cd19","sha256":"56c0b42a383410b485eea554fc8466494ff737bb0ba87173a3d96078572e767c","sha512":"4a5eed14cffc98e81ee7c0c244ecd0b818e296d0f91384b50f84f6eaba25c4e0d9377123d66cf882eac33ff1cba8abe1666fc2b9be26d2d36bb5f45176b44f66","ssdeep":"1536:8187L7QI5Bqn/gHbTCESOzFpIqtIhH5v9TKWs73I4m7dR34F9ncu:j7QISInlppItH5lu3Gx1WCu","tlshash":"229312964b888a58c07c2a7e84ce130fb9b1ff14b511724b9bc116b87fb74da98ddc51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.970754Z","times_seen":2486,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":808,"dns":0,"connect":0,"send":0,"wait":121,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/825.cb3721c9.chunk.css","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.428Z","timestamp":1783512253428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/825.cb3721c9.chunk.css HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7f9-174e7\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":95463,"size_decoded":25871,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"19dcf05b32901271126100bf9ec61fce","sha1":"dacbfd7f9f47bcbf64e3eea190096b1543b33a31","sha256":"92e1c58af458fc2d3add64e72fc824e171a44bac6e57d0046e9e497dfbc45e01","sha512":"18ee1e1fb93d5cba2334eaa52cef9bdf875661918f69ff40b3975fd4d25073293852cb3bbcb0648d80f3b6da9b27d4e650fb83cfe8c1c17c1128c4ff9fc4627a","ssdeep":"1536:Y6uvJIQwdAlHNJqOVZxvR7GGYgAkdJI8ItyFoS:OqwZx5GGYcdJI8It+oS","tlshash":"0493193db90d9174ea27822717ecd7d8c01abf80da225697e04390927dcb7f32799789","first_seen":"2026-06-17T23:14:52.657061Z","last_seen":"2026-07-13T22:30:05.405068Z","times_seen":28,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/js/vendors~app.febc367f.js","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:04.380Z","timestamp":1783512244380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /js/vendors~app.febc367f.js HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:05 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"3538267-1783448003228\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3538267,"size_decoded":962544,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37841)","md5":"dda49db5c4b6267678819441b34a4104","sha1":"aeac6e1824b2c816bd68480360763efbe8a2e645","sha256":"796ff0f8a1729bc58e2fdcb943c03efa55913005311645b23df10f092fdb2d24","sha512":"5c6f0d4bcf89f550c4f2a9e82b7a1ac8a292a19fe313c026c8520a959d259a52078cf209b9fbf896e87ce0cced91789f3836db17262ca4a2644cded12ea843b2","ssdeep":"12288:cak9kefPYQNpsaAZVISWEV0+7nIdLqclabWD9RYzsERpUhJ+:cakFYQgaIV1V0+7IdLjPszsELT","tlshash":"0f3529cd7285b42253a37174407f250bb33a2959680e8458f665e8dabc7da4e633bf3c","first_seen":"2026-07-08T02:38:21.720627Z","last_seen":"2026-07-08T12:05:04.928568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5407,"timings":{"blocked":-1,"dns":0,"connect":277,"send":0,"wait":657,"receive":4184,"ssl":289},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/ms.c3a24ebc.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.618Z","timestamp":1783512251618,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/ms.c3a24ebc.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1689-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1689,"size_decoded":2027,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"c3a24ebc3a56986eeff27c5a3e5efef1","sha1":"b25b9729a5ad44f2417739b3ba28a7e58c622b65","sha256":"03c99fe5489e86fa594c452edab0f35e0bfc431f117c957c727376227e933231","sha512":"f3f9c537980de181c2d1b3684d22f46ce55a60721c7ef07c6b49daed522687e468fbf1aa7d53ce0e50bd976ec51407da8bb0e1235879cd41ee7d0e9cba551ab1","ssdeep":"","tlshash":"b531d6b15205aa3dd18dc138cd8ae532db2aa190130fdc5e9c99d2729a80711c35cfc5","first_seen":"2026-07-08T02:38:21.757414Z","last_seen":"2026-07-08T12:05:04.929979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2082,"timings":{"blocked":1808,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/2.afdee479.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.650Z","timestamp":1783512251650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/2.afdee479.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1138-1783448003201\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1138,"size_decoded":1477,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"afdee4793db3503800ef7df7b22818ba","sha1":"5b46c96ab91e739ccde03e2c424e154e209a0719","sha256":"6b94d997c0fce6adf29b565459fe074d904375441c1a62c6b1216e979404aeb8","sha512":"cac86bb9a3cf7744318ccc9a723d51649d616915f652277acbeb1e4fb60edf923fdf3a7708d2aac51c0015da82db1bb7974520c71737e92ff7a2a66dd4d938f2","ssdeep":"","tlshash":"3821b64cd99ef83e811bb3d08a98a0a69f12cde99c742ec9dd0032fc9d7285c01e6200","first_seen":"2026-07-08T02:38:21.544039Z","last_seen":"2026-07-08T12:05:04.931089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1117,"timings":{"blocked":839,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.961Z","timestamp":1783512251961,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DiENAl/DxvYXX3cFe5I8OWsgGPsr7eNXO4EjRPCDqfZjvVsQegzMRVapny8Ityk7IlrZKNl/HTA=\r\nx-amz-request-id: NAPSW95X3SFNB98Q\r\nDate: Wed, 08 Jul 2026 12:04:18 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"a5941f987a0fe015714bc8b8cde4baff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 44216\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44216,"size_decoded":44613,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a5941f987a0fe015714bc8b8cde4baff","sha1":"88c88146f9813942943df5777e08d4486db3040a","sha256":"41da4ebe3b85b5ca006db2a633baa60593618feeb72f3db99e110d74e1cbd918","sha512":"937d3c4add07ef443e201c34e73eef5cf558a781c5112a81719a989e4ff4c2cc29f2bf35739cec929988409694a4518fe862820b2fb6c18d71b4195954700628","ssdeep":"768:GTRG9BPKCHP1oTrfNz7uVdkyQ5CmHjrYaBsDTtk9GbLf+H:GT8QgP1oTzB0dkyQ5Cm7Bs/u9+CH","tlshash":"52139d478e489f835014d3fd3e079e6d6b891b0c59893aef19b31eab3f216521c8e54e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-14T05:14:19.396509Z","times_seen":9945,"resource_available":false,"data":null}},"time_used":5746,"timings":{"blocked":77,"dns":0,"connect":100,"send":0,"wait":129,"receive":468,"ssl":4972},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0BBN3YQNK/71JmApgdVAL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.134Z","timestamp":1783512252134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0BBN3YQNK/71JmApgdVAL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iEK6L+pZDjfgpeG/cvL6xZmicsE0cgfWP56MiK2RkyUgHkDSRcp1/6HUJF5ngjhTDno9O3DpEts=\r\nx-amz-request-id: RKA759EW9FSNVKT5\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 08:38:38 GMT\r\nETag: \"0f4cce1cc723e9f925010640e9160383\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 9169e20d3f597bd917dcf828b53045e7c31ce2687d137880cdf7aaee623271e5\r\nx-amz-meta-s3b-last-modified: 20230915T060118Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 107843\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":107843,"size_decoded":108374,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1082x1500, components 3","md5":"0f4cce1cc723e9f925010640e9160383","sha1":"26061d213f8afae16359eae39d295f69758aa915","sha256":"9169e20d3f597bd917dcf828b53045e7c31ce2687d137880cdf7aaee623271e5","sha512":"985da409670855669c845a9f36826cdcf2d6f2762cedfe49f907d6e77fa4e728da769069143411ad59dd98428f8082e391d9c473b50d3efef73adf76c82d1e05","ssdeep":"1536:U2R6KEPTEqfuefyBue/Ja4VCT1AXZyWGOsvv+9TPany3/2pzM1UoR/R0cNRz4mTE:vME5BuqAN4Zlcw/UUx/RRNSmT8rb","tlshash":"53b312f92c292e8bf94ad2fd28f213024245e5b8050f35f84ca45615c6cfebc9f62936","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:45.995759Z","times_seen":2415,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":856,"dns":0,"connect":0,"send":0,"wait":119,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-11-06/e2e57f13-bf6d-48e0-be0a-1a881b082e8c.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"54.231.163.161","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.207Z","timestamp":1783512252207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-11-06/e2e57f13-bf6d-48e0-be0a-1a881b082e8c.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tZKapwnkg43mZjgP9UrZ68bHMhnRbN7DkiOaX8XNhPj1yiQo1FEq6Zmby7SffJviTBNu3/DfKNk=\r\nx-amz-request-id: 6M5VDGVCYB5F1AKS\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Thu, 23 May 2024 01:44:45 GMT\r\nETag: \"292f81f90fe6cd140ff2e3d5ed135a71\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 91249\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":91249,"size_decoded":91646,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1078x774, components 3","md5":"292f81f90fe6cd140ff2e3d5ed135a71","sha1":"0f4330a32fd09325d535bfeb90e423a3ee421f44","sha256":"d88ba58bbf925231866abf29db5bee81900e5e7cdb49cca4509264528a7ee976","sha512":"ae6a21497015b12bf1b99dc4301fef11d5616d40ec3e1f4d12a011a89d59c7824ee3dc00d5963a78099f598ef715fd4389ce4bf9b23dbbbcfe1ba317a513c9de","ssdeep":"1536:Lnembrn6M4ZkHJgptZaGEISdc9sth3ZtAMOxh3W75UCerd:Lnembrn6M4ZcJI40Se9s3AMOn3W75eZ","tlshash":"4f93e2c532615903d39d4b7a1e8912d21210ff7d21c2497be9d64d2f2e9da736a80cdf","first_seen":"2024-05-25T22:56:10Z","last_seen":"2026-08-14T10:59:46.023142Z","times_seen":874,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":733,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/right5.66fbdf99.jpeg","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.279Z","timestamp":1783512252279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/right5.66fbdf99.jpeg HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:12 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5524-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5524,"size_decoded":5771,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"66fbdf99c05282d390579ee1e8a4c8b0","sha1":"d7bd65c2553bbf938ba2a7d982e1d90c1860baff","sha256":"847d339af1537664b4c0266c7cd4c84db1432f9174295f132e04e6b6b50121f1","sha512":"49bab24b6a8f47f7b099901a65868be194efe11047dfd9ade98b8fcac862b3bb59ebcbc76921ffe6c900aa91e675f11a9b64a42c418e80f02cc8ad1a43b98b45","ssdeep":"96:WhhUFvxHgld/rdM2oX1pfs1BBfcVq3CxmaiVFMbo9qJC1dwH2J34Rm1cum8lwoRY:EAxH+BqBl1kBBfc1xmnQ7U1dwH64AyuA","tlshash":"17b17e19a62ea807cb2aa9fb2d5c259661012a747f1c0bf246a121debd42cb1af15324","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-14T10:59:45.991159Z","times_seen":424,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":448,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.axd02ww.cfd/chat/IYSEMY2tiIUM.2a5affd2.js","fqdn":"www.axd02ww.cfd","domain":"axd02ww.cfd","tld":"cfd"},"ip":{"addr":"8.217.34.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true","date":"2026-07-08T12:04:13.425Z","timestamp":1783512253425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.axd02ww.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 16:59:31 GMT","end":"Sat, 26 Sep 2026 16:59:30 GMT"},"fingerprint":{"sha1":"16:51:11:13:AD:EF:B0:28:FA:23:BB:DC:D3:32:92:61:20:7E:58:7D","sha256":"E4:53:00:31:3B:98:AF:E1:B2:EA:C3:71:88:5C:15:D5:1C:46:74:62:D6:B0:0D:32:3A:22:5D:03:31:32:B6:10"}}},"request":{"raw":"GET /chat/IYSEMY2tiIUM.2a5affd2.js HTTP/1.1\r\nHost: www.axd02ww.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.axd02ww.cfd/chat/index?channelId=4259ff95da004ee2b1fa932ff01afbff\u0026params=%7B%22role%22%3A%22buyer%22%2C%22source%22%3A%22buyer-web-monitor%22%7D\u0026autostart=1\u0026from=iframe\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf8\r\ndate: Wed, 08 Jul 2026 12:04:13 GMT\r\netag: W/\"6a31f7fa-db6a\"\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-frame-options: ALLOWALL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":56170,"size_decoded":21002,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (56169)","md5":"5edd5fbbd5c81cc271b81eb8bc416afc","sha1":"4c96b21bcb5ddcdcbaeeafe5d18b17e21bd96620","sha256":"baef72d5d1e0df4431e93d77d4d5ea00eb6ae51aed44b8aa5500f6388e5bb199","sha512":"6223498ea547ad382ebad824c54bcb6691ba1515420c00f4c72ef9f7494b0fe2ff43b463111e9e7b1daf6166b750ddb1abe4017beefa3ffbcabe79f06e867791","ssdeep":"768:fSFqLO7OLsi4fmxY+DAOAilRInRkl0dhJO3RDdCwT5+NEZHypwOXd+sgBOrfiBTf:fSFCTtAs+vIdT+6+xPg2fiTM76","tlshash":"32430afe53689bac7c834a79ef37a475a31fa1a539914690207eca7012d31dcf24bd80","first_seen":"2026-06-17T23:14:52.692589Z","last_seen":"2026-07-13T22:30:05.415467Z","times_seen":28,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/fonts/element-icons.535877f5.woff","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.585Z","timestamp":1783512251585,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadolibreui.com/css/app.f29bdbd6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: font/woff\r\nContent-Length: 28200\r\nConnection: keep-alive\r\nETag: W/\"28200-1783448003190\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":28485,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-14T09:26:19.638697Z","times_seen":29434,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.601Z","timestamp":1783512251601,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9703,"size_decoded":3506,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b06b1f2f7d95cffcf78b5c10ad8c4158","sha1":"9ff9ea924bc5995722d556f6f0c408460aa6787e","sha256":"df8a68c495785ed1206fa79a88ef5aaa408fbf5c34fa17f87c7a28f90cd46626","sha512":"cbe834de110fe9fd18bdaa9c7c35f2bbb34722a750223394dda0613be3fd8e5599c8fe1165163c5ba943de00fb594c8bb94db9cd86249de8676d694df9cadfb8","ssdeep":"192:yx1Tdvo2NdTjQcEIT1fubLp41wAJesrlafMT3W6rL:Wng23EcubLp41wcMfYW8","tlshash":"8a128561cb680a2516aa41d508867f4fe9fe921b9e724f76426cdf3439fc4753f0a009","first_seen":"2026-06-29T00:53:10.759818Z","last_seen":"2026-07-08T12:05:04.934581Z","times_seen":4,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/el.4a563cba.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.621Z","timestamp":1783512251621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/el.4a563cba.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1239-1783448003194\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239,"size_decoded":1550,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"4a563cba0f73f73f0183feff0284fa0c","sha1":"30bcaffb320cc5e20d37ec56f07c4a7bb91ca401","sha256":"192257fd6bd2a92c03fb2365e0fe9d23435a4685dea79dfac5a423d4db26cbc1","sha512":"7e54cd037d67f66d9c9e1a9b0d38b4b07f9aed6a130537be5db601cdf157bf3f16b0881ddaac3fa807c3191c4614713e12ba0d44a1d043e8f1e6ef504542a9db","ssdeep":"","tlshash":"c221b7fd2ca44c76e7681e58512b3433f329665051ebd1681501dc4be8bc2c5c611c01","first_seen":"2026-07-08T02:38:21.655416Z","last_seen":"2026-07-08T12:05:04.936457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2259,"timings":{"blocked":1988,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/it.ce3ecf38.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.617Z","timestamp":1783512251617,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/it.ce3ecf38.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 494\r\nConnection: keep-alive\r\nETag: W/\"494-1783448003198\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494,"size_decoded":775,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"ce3ecf38c3a8726bec388c5cc6e5af0d","sha1":"ba56764b860a528f47bb48ba9e561990f69333e3","sha256":"7ed56ee47596d68da2e0484cc9a8640e01ad65fd3823afbf3a334c6a2174d344","sha512":"17787e87ef083fc0ab1f97bae334e4e99c69abd14506c454e0c9b47f5db6571f4bbe27c35a1038a354f319f44d59db1209e07dbbcdec380f4e30cce47585a793","ssdeep":"","tlshash":"61f0dcf7c3a4ed9ce0880886b4a9c554dca9be4fce78c37b3d09fd3e56700168814062","first_seen":"2026-07-08T02:38:21.557323Z","last_seen":"2026-07-08T12:05:04.937577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2076,"timings":{"blocked":1794,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/tr.695c3548.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.623Z","timestamp":1783512251623,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/tr.695c3548.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 878\r\nConnection: keep-alive\r\nETag: W/\"878-1783448003201\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":878,"size_decoded":1159,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"695c35489bcea36443c885857bebcc7e","sha1":"a20cad2a032ea4b13be2ba0391df326ea3a0afb7","sha256":"0ca29f5564a8df389fe6199eaedee92d0fdd36f9cced7f3f0db3a77f3caa7966","sha512":"549df8b667d4eae28de99cf23af145f00c0a751545e1de813731b21dc927527889848b31a408626216aa7d1401cd94d4f02c78ea4a7c94078c7ab12c37749369","ssdeep":"","tlshash":"c81163db734c5f3a88389394e54c8a48d5eac15454e299838fa274c1abd23e33144b29","first_seen":"2026-07-08T02:38:21.768211Z","last_seen":"2026-07-08T12:05:04.938474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2309,"timings":{"blocked":2033,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/ko.e0896533.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.629Z","timestamp":1783512251629,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/ko.e0896533.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1128-1783448003192\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1128,"size_decoded":1470,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"e08965330d5aa69c6235fa4f5eb9b099","sha1":"bb8b3418980753910930b46822bbb25a11a839a9","sha256":"e60ca690215d94691565d717110f2acc8921f0928d4333ecf4deca7c7f63ba41","sha512":"af9afc2000bf8d8867c592341de28ee194eca36ccc06e1eddbd73dead2bc6faaa45cdd3df47aabc48c3a68cbe19efce9878417ba9ef79d5c20460e894e63c069","ssdeep":"","tlshash":"a521f94b7a26713c31c715f3966841120071233db1dbcc9430cb5dc2931e0a794c8c7e","first_seen":"2026-07-08T02:38:21.696725Z","last_seen":"2026-07-08T12:05:04.939371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2354,"timings":{"blocked":2081,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.693Z","timestamp":1783512252693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AHiFoCbAC90ft+bSQZ21lrpKNhNhTtiJ5n9mGNNcADYnenp3yMBxLwg+QtFxZjAhOu/6CZ9PWGs=\r\nx-amz-request-id: RKA7VCC5NYAD2TC2\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:24 GMT\r\nETag: \"188e058e6f7fbe9ad0a5f77351993576\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 58343\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":58343,"size_decoded":58740,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 887x658, components 3","md5":"188e058e6f7fbe9ad0a5f77351993576","sha1":"5aa78ff88b30cbd54edb475d4275fc0d4218497f","sha256":"0c05def09a06513f1f4642a32933517dae2a570113bee37d42eb032886be835d","sha512":"bdf8a4a595692fbe4e7852b784846f1a76a87e36bde4e0a4d20eb190020965784572ee99ea2df88e46b3f22048cc6b2a04fd179d1796a7ab3b4911a699a230a8","ssdeep":"768:1708n17R4+OZnvTjYIoH3etV6CFmPxPoLsRkmVNIHEGjLF8asgzZ0vc/aT39Carl:d07BTjYfXet3mZPoLgknF8BgkB5rDZ","tlshash":"3643f260337882f3f1bbb8386b8d3a1a5b55b4975382cdef11126db2ab07a51745438f","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-14T10:59:45.956631Z","times_seen":2482,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/img/pt.102f325e.png","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.616Z","timestamp":1783512251616,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"GET /img/pt.102f325e.png HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1965-1783448003195\"\r\nLast-Modified: Tue, 07 Jul 2026 18:13:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1965,"size_decoded":2140,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"102f325e03082a6df8bc5174baf53b03","sha1":"84f324078f5d89c5b46bc9a8861f2ce53dc45021","sha256":"a61b4497b56894f4b6266fa09f25c0fb6e83f9c663833d49748f8db977ba0d28","sha512":"47bd5a6522eb211cfcbf2c6e563037e236e79c8af405d91d4fd332d4f2a66776fbc8c2dc59980793085d884b4cbb59a0333b9d6e0a2f043b1d0f50924b197879","ssdeep":"","tlshash":"91410b69f1ef57e5e2344eb004e44cf7a512be897fa54170c4e5302c6ab6760cf65b21","first_seen":"2026-07-08T02:38:21.590213Z","last_seen":"2026-07-08T12:05:04.941465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2033,"timings":{"blocked":1755,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.123Z","timestamp":1783512252123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tCOXF5rvOw0NJ5275zhVWYZFwOR+gWgpV2ThVqweXGTImAfvgUh00FBGiJCmUlroON23H9AP10g=\r\nx-amz-request-id: 6M5WGDQ899V9R35F\r\nDate: Wed, 08 Jul 2026 12:04:13 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:46 GMT\r\nETag: \"6c0d8870785f0488d0b7142263a15170\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117525\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117525,"size_decoded":117923,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1417x1500, components 3","md5":"6c0d8870785f0488d0b7142263a15170","sha1":"aba57b51e93b5fd1a624f84850eadbaa1c110bad","sha256":"3a90f757acc9d4e5d3088beb21be69f9542bd7e056d6a936d4b920ed7286b665","sha512":"04e4da2f923f15b3c32d6329c9e2f1cbe4ce58f8f09fd03823529da74504d1fedf8317083b1ed370ae9917cb5fade27933d50d4506c1b1e22f373e6d421c7551","ssdeep":"3072:FpBFO7JLZw6p1LoD9WiupE9nfmQXdxt+jm9p033qF:FpBFO7brLoD9WiUEFmELtZp06","tlshash":"f0b312f876a8e373cb7a3e3801d9e95e9c62d16e653ed4524c79144d30100f6c9ce9ae","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T10:59:46.032744Z","times_seen":2463,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":245,"dns":0,"connect":93,"send":0,"wait":118,"receive":185,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.227.217","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:12.705Z","timestamp":1783512252705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4VP1iOPAUMVYRTJaQAVRGNdGO1rdQUbpGMX+V0xO7f+jflMcPKrs7mw0FzKniwK4oza6SU2mXc8=\r\nx-amz-request-id: RKA5XMQJ0EQP7D8G\r\nDate: Wed, 08 Jul 2026 12:04:14 GMT\r\nLast-Modified: Wed, 22 May 2024 20:50:38 GMT\r\nETag: \"755beb0acc47fd21e538c3b25359b060\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138697\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":138697,"size_decoded":139095,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"755beb0acc47fd21e538c3b25359b060","sha1":"3ea9d8c04dc9f72448f2b72802065cca80a98b53","sha256":"9636ca3c7079d5e57d692b66104fd9c53854c54b9c074dc79c974d52fab6fc82","sha512":"9239457347dd2cc3f21401f59280fa233cf0f74d4d47415112e3666210e07410fabee8fd06346880890d5a0fa1211e3d2754bf6c7b83e7fd23e83d8af70cf2d6","ssdeep":"3072:EYIZstVjQOeoAYzeufLqX99sd9JGjY96eDdlswyo102lnkS:ELuBkoAYaKqX99sd9JDQeDd+wPnB","tlshash":"4ad3120e32b8b5bdeded11f0b19970bbbef5e15a4a830e4e1e8b650a57358457c4320e","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T10:59:46.016513Z","times_seen":2350,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":586,"dns":0,"connect":0,"send":0,"wait":106,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadolibreui.com/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=cn","fqdn":"mercadolibreui.com","domain":"mercadolibreui.com","tld":"com"},"ip":{"addr":"202.162.109.120","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercadolibreui.com/","date":"2026-07-08T12:04:11.599Z","timestamp":1783512251599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadolibreui.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 06:09:42 GMT","end":"Tue, 06 Oct 2026 06:09:41 GMT"},"fingerprint":{"sha1":"8F:0B:0E:B1:02:B5:70:5D:82:C3:36:70:10:5B:E9:CF:A5:D9:0C:BD","sha256":"7B:C3:44:A0:94:71:FC:83:B8:73:16:08:5F:2E:8C:6C:FA:02:6F:D4:76:D5:97:3B:E0:B8:EA:80:CC:48:47:68"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=cn HTTP/1.1\r\nHost: mercadolibreui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://mercadolibreui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 08 Jul 2026 12:04:11 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5999,"size_decoded":2857,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"89c4fa0e52f70bdd3870cd2c566ace95","sha1":"bf9a994a8530552d8aefeaebead8d6041e138f4b","sha256":"fcde47b9010812e5adbfe4ee5aabfc68f5d9db115a7fd7250267ebd582c95593","sha512":"2ebc29897b1f8128edf22e0bde4494c76f02416b97ed27ff4b73e37e8f07457fe99e5f44ad15de4a1258dd573a409ea6b53fd48c3f01310b16dcee66b950a900","ssdeep":"96:5VdPVWIx8ZsvJpkXNT0WRwlhVTa845gm6htm/9hbRt7ywrBG6L8XH8cbhRBem2Bw:5VxVzx8ZsvJpkXJ0WRwzVTf6gNh4/rze","tlshash":"8bc176ee6bf47dad07589af2008a368f90a4f13f5fe30dc528eccd5448e8ba21965150","first_seen":"2026-01-09T14:09:28.68224Z","last_seen":"2026-07-08T12:05:04.943452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"mercadolibreui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"mercadolibreui.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}