{"report_id":"6512b71b-ed3f-4fd2-ba9d-f6b218978959","version":6,"status":"done","tags":[],"date":"2024-01-27T04:00:21Z","url":{"schema":"http","addr":"goyabu.to/?s=crian%C3%A7as+lobo","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"172.67.158.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"goyabu.to/?s=crian%C3%A7as+lobo","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"title":"Pesquisando : crianças lobo - Goyabu"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T01:51:31Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"goyabu.to","ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2023-03-13 23:04:32","last_seen":"2023-11-11 16:59:26","alert_count":0,"request_count":11,"received_data":287670,"sent_data":5343,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2024-01-27 00:48:06","alert_count":0,"request_count":1,"received_data":92858,"sent_data":416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2024-01-27 00:02:10","alert_count":0,"request_count":1,"received_data":2304,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thubanoa.com","ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-11-17","domain_rank":0,"first_seen":"2023-11-17 17:14:15","last_seen":"2024-01-26 22:47:53","alert_count":2,"request_count":2,"received_data":436857,"sent_data":883,"comment":"","tags":null,"fingerprints":null},{"fqdn":"oaphoace.net","ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-05-04","domain_rank":0,"first_seen":"2022-05-04 19:35:14","last_seen":"2024-01-26 18:47:49","alert_count":1,"request_count":1,"received_data":62139,"sent_data":392,"comment":"","tags":null,"fingerprints":null},{"fqdn":"outoctillerytor.com","ip":{"addr":"139.45.197.236","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-08-09","domain_rank":71059,"first_seen":"2021-08-21 14:48:22","last_seen":"2024-01-26 17:39:42","alert_count":0,"request_count":1,"received_data":74160,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2024-01-26 18:12:05","alert_count":0,"request_count":1,"received_data":98178,"sent_data":428,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:55Z","timestamp":1706327995,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50830,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:55.921667+0000\",\"flow_id\":631598558679107,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":50830,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":29970,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:55.921667+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:55Z","timestamp":1706327995,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:55.937485+0000\",\"flow_id\":188244117114381,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":36838,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":33368,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:55.937485+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59868,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.035472+0000\",\"flow_id\":1436662261189264,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":59868,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":32147,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.035472+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41568,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.036461+0000\",\"flow_id\":1284394933128813,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":41568,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":47478,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.036461+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45991,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.039430+0000\",\"flow_id\":1891602377054726,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":45991,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":64234,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.039430+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38776,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.040178+0000\",\"flow_id\":239268328742130,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":38776,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":3913,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.040178+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36616,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.041894+0000\",\"flow_id\":1094160094176166,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":36616,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":64990,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.041894+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47878,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.226144+0000\",\"flow_id\":37321113957216,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":47878,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":7157,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.226144+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":57645,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.227484+0000\",\"flow_id\":763215684139164,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":57645,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":560,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.227484+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.280329+0000\",\"flow_id\":1963639716005641,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":49838,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":52921,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.280329+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49584,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.761948+0000\",\"flow_id\":840254512537692,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":49584,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":7262,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.761948+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-27T03:59:57Z","timestamp":1706327997,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45375,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .to TLD","source":"{\"timestamp\":\"2024-01-27T03:59:57.763075+0000\",\"flow_id\":279329636197571,\"in_iface\":\"docker0\",\"event_type\":\"alert\",\"src_ip\":\"172.17.0.3\",\"src_port\":45375,\"dest_ip\":\"10.5.17.17\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027757,\"rev\":5,\"signature\":\"ET DNS Query for .to TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":36766,\"rrname\":\"goyabu.to\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":69,\"bytes_toclient\":0,\"start\":\"2024-01-27T03:59:57.763075+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-26","alert":"Sinkholed","trigger":"thubanoa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-26","alert":"Sinkholed","trigger":"oaphoace.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-26","alert":"Sinkholed","trigger":"thubanoa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"goyabu.to/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-05T03:47:22.194744Z","times_seen":639986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,CiAgd2luZG93LmRhdGFMYXllciA9IHdpbmRvdy5kYXRhTGF5ZXIgfHwgW107CiAgZnVuY3Rpb24gZ3RhZygpe2RhdGFMYXllci5wdXNoKGFyZ3VtZW50cyk7fQogIGd0YWcoJ2pzJywgbmV3IERhdGUoKSk7CgogIGd0YWcoJ2NvbmZpZycsICdHLVY0TFpUMlhOSDMnKTsK","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"010eafca68674e60ae155c922bd87279","sha1":"4f08c11b3c02bfa37d99d8999a003dd2d3742476","sha256":"ecee173f8c5a1704eab37266c595cc93bf3d47b215dea00735cadf4be6ebbb00","sha512":"389b87d3dc1e4cd4e855ec71ebf7f6480e1e172582edc492349ea10e601e367b386e0b6e4bfa83d9afa07d8c2084c07e5bf6acedd4b813dde0de0fb9b255c009","ssdeep":"","tlshash":"19c08ccc610a0c7046b72f400b3fa900b002721098e128320d0a23044520e27eb54814","size":153,"data":"","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-01-12T23:01:50.947877Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwp2YXIgZ2xvc0FQID0geyJhcGkiOiJodHRwczpcL1wvZ295YWJ1LnRvXC93cC1qc29uXC9hbmltZW9ubGluZVwvc2VhcmNoXC8iLCJub25jZSI6IjVlY2I1MDc5YjUiLCJhcmVhIjoiLmxpdmUtc2VhcmNoIiwiYnV0dG9uIjoiLnNlYXJjaC1idXR0b24iLCJtb3JlIjoiVmVyIHRvZG9zIHJlc3VsdGFkb3MiLCJtb2JpbGUiOiJmYWxzZSJ9OwovKiBdXT4gKi8K","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"188ecaa19b5bfd5d48461bfb18c7b4f0","sha1":"e1bb255d35214dbac591b11818a6fc1c861f8b27","sha256":"506bbf9227061a3c6b963ccb5e71f3187ff2a5b09d2b346213ff8c9fbb56fc46","sha512":"976dc9e8a8758a1f7455038515453f58c27293602a8d288893abf4cfbf2713d19b703cecafd0639dbea691fbad90086accfe7bb7d42decb2a035a6a6494b3608","ssdeep":"","tlshash":"e9d0a7ddf256ea4ec3200e1c51b8fdb3b889e5cd488449279785c16706d387613d820d","size":219,"data":"","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.331136Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thubanoa.com/1?z=6871058","fqdn":"thubanoa.com","domain":"thubanoa.com","tld":"com"},"ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"08fea56d3dc184710a467a5cdeaab535","sha1":"2709befc7184a62e78d196c48f5c52ffb63222b0","sha256":"c2e669c6c2e08e5a49bba37b544612efa929d0b8169ef08140e8860517192164","sha512":"3e53f9d5ce2e004d0b58e98c0784a392760e498b6d7f4e5f83507c426ada3b562f1fe4536aaa8f20f431ab089afef69a3c834c2cb89f6ba80ec4675e1bac6884","ssdeep":"768:/glRVJ1v5/CQ0TGSTA278MyyY//iekORDyQlzKDDXi5:/YVwGSTEyy9yNq","tlshash":"cf136469b482b0167ad6206e887f810ab37a7ddc141f74d4e01df4837ef605bd126eba","size":43071,"data":"","first_seen":"2024-08-20T10:58:03.702476Z","last_seen":"2024-08-20T10:58:03.702476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/?s=crian%C3%A7as+lobo","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"919fad940d1693f660e78cf444232fe1","sha1":"2326b37dfe2fabc0c3f1e6750b270504edc0a07b","sha256":"323c861f108f73ed218a0e31340e06d73ed547e5bf6d0f51c138d2a21108174e","sha512":"7eac120cc42bcc5a16e22ef4f9f5a3c92b552a36ab024109933d51c2efa49477ae1a99a9ed8bd54b8806d97c78bb7d9af4e18bb4abb271427930bbb14e04c6cc","ssdeep":"768:ocePrfnn5xQqLoYpWIDcPN7cwu6wvW7eiNWD4cDlWcL41UMt:Aj5lLoYZycwu6wQZhcDlWcLsUy","tlshash":"f4432f1c7c9260581912e3baa12b31d56a257200d86e4cf2b818d3d7de752df8da3fde","size":58920,"data":"","first_seen":"2024-01-27T05:00:22Z","last_seen":"2024-08-20T10:58:03.703298Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T03:58:34.230133Z","times_seen":67365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V4LZT2XNH3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"966792db7e343c6dfc3152973369a21a","sha1":"9a0431cb58d5e9f48dea2d3b6d0048f70b2a25b1","sha256":"86cc22658c7526a9960592ccac572134a0caef7f56141109276b6eae35c76901","sha512":"6c4112f2266717f83ff3de317126d9bb96f57692599711ca6508bdcfbf7cc396937db201a64ce9f8b48c4f56ebd6df336dea43cee813c6e63d3b331cfad96a1c","ssdeep":"3072:SJa+fqb2R5+VmMSGcWKy/8ET7q8i8uhohLP32PccJzB6t10ONbxooOwTD:Ujt+YMSmzzi8uqLP32Pz/6fzNbxd","tlshash":"074419da73c774668296f478503f024be57b28a2b45dcca8f189c9d02e74a9a4137f7c","size":277591,"data":"","first_seen":"2024-08-20T10:58:03.687474Z","last_seen":"2024-08-20T10:58:03.687474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKGQseixzKXtzLnNyYz0naHR0cHM6Ly8nK2QrJy80MDAvJyt6O3RyeXsoZG9jdW1lbnQuYm9keXx8ZG9jdW1lbnQuZG9jdW1lbnRFbGVtZW50KS5hcHBlbmRDaGlsZChzKX1jYXRjaChlKXt9fSkoJ291dG9jdGlsbGVyeXRvci5jb20nLDY4ODMzMDcsZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jykp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bc6dc2b6f0bec9300f5c7eb0dfe07b1","sha1":"db025af667c5ca30bbe96beb5f79938fe0187f3f","sha256":"74206ac42e731df2822a4b87b5dd90c1f791db23b1b11d5982e95ef2a05db330","sha512":"ccc5bd156c03d064c0ba5ebb1acdaafa4eac3f581cf4facc6ef64f8bca1538ff62688fa9b71ed6d39cd8b2a883b1df723543d292e23c7f4ce5f09250024aba77","ssdeep":"","tlshash":"74c0803964354064045c14caf177d77c7cb331946ce32841c85e8e4c5970fc54855cfc","size":183,"data":"","first_seen":"2024-08-20T10:58:03.704091Z","last_seen":"2024-08-20T10:58:03.704091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKGQseixzLGMpe3Muc3JjPScvLycrZCsnLzQwMC8nK3o7cy5vbmVycm9yPXMub25sb2FkPUU7ZnVuY3Rpb24gRSgpe2MmJmMoKTtjPW51bGx9dHJ5eyhkb2N1bWVudC5ib2R5fHxkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQpLmFwcGVuZENoaWxkKHMpfWNhdGNoKGUpe0UoKX19KSgnb2FwaG9hY2UubmV0Jyw2ODUzNzE4LGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoJ3NjcmlwdCcpLF9vYWpzdyk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c074f2f0e6c5842556cff87c0af7e0d","sha1":"b41e2b1c14c1ee10a457f5f471811c17a6b8ea95","sha256":"a43c306eaa954bd8ea6d136f2a105e6926157db4c596e21daae7de61b5024376","sha512":"eebb47af6eebbad1b0160036622639ac53e1e74ad203df168215c7fe802e22303097d824f9f2a6a4f3cd8c405b0672030c31c5ece8cfe13e9606c158002d6afd","ssdeep":"","tlshash":"7ad0973825309030442d1c5a2033c7662ab320401c141882009eee099532eac081aea8","size":230,"data":"","first_seen":"2024-08-20T10:58:03.704823Z","last_seen":"2024-08-20T10:58:03.704823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-includes/js/jquery/jquery.min.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87482,"data":"","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-04-04T21:34:01.22657Z","times_seen":31202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/cache/autoptimize/js/autoptimize_single_aff22efc2145f9af98ee5a3a9cb02f5e.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"179251f8cad233b4d153a1cf206a7e61","sha1":"ed4b72c44554cf33308c6aa54db4047fa35531e1","sha256":"319ee49246194c79640717a83c2d629bafb16ecd647ed613f8595f6cb19da59d","sha512":"30d6a4dded622dbb5f68cfe98270ab2fc7d471e871850310a0aa25cbb7d51ec580e2a206b01203576d268a5c2a3b07eed301f2291775928567bab095363d2138","ssdeep":"","tlshash":"6be0d828353085bd50fd46c772b57be79d210096f5e49205882d893dadc5c678a811c3","size":354,"data":"","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.272936Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/cache/autoptimize/js/autoptimize_single_8bccf42e52ffc18419e9321f85bba92b.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58ed7c5304dee616b1bfebb14d518e94","sha1":"01b7fb0df8edfab75631eae4b86796d2f6e65414","sha256":"6cd9f6c53758177fb2c46278b7c8b06bef3e4c90c273d29f430c5f1bfc3b80d4","sha512":"3ef4c0b8cfca69d3ae75e65b7b65dcb936473dc18b89493b6b4648d659ec8586a354e3e30bc306636b484139468c7c92747aaa222f0d34bfd8147c41d064a191","ssdeep":"","tlshash":"aa210eddce746ac3886af741493aa4e43a3738f8af8cae4dc4c100d5152e90cbe4355c","size":1299,"data":"","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.286562Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/cache/autoptimize/js/autoptimize_single_874399c7bdb8319cfd12ed764665ea88.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"947beda50726444ce6b835d685172735","sha1":"57a3e0551dab71a2834a0ad6e5aa2a44bf38d4a5","sha256":"9c53ad2f62a3498d316d0df060376e846a03cbd66e9a091f48988f56932e36a8","sha512":"2445386577151918d80adcb1b3b98b3fb7cf75454d6ad195c8c70a85f4ceab80c8e63d6141f83dce6dd53e2f9b5b51f3f8bfdb6980d0b6802aca6e8b8eeb2b8d","ssdeep":"","tlshash":"28311198b74c518b217b52622022543f7c779eb58ea1602175aed0afcb3cc64f53d6cb","size":1561,"data":"","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.249329Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-05T03:34:29.723549Z","times_seen":5314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null},"http":[{"url":{"schema":"https","addr":"goyabu.to/?s=crian%C3%A7as+lobo","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.281Z","timestamp":1706327997281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /?s=crian%C3%A7as+lobo HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://goyabu.to/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=atA8rz6E%2Fme70h0U94iXzVzIln82t9gV0fU6OedjpPc%2BSCHQCloBii2kuZgTwCaIuOqI4s%2Fwf28pvTZMcue9pPnvU47NlVm2n5iqiUov9pm1iMQw7qr2%2BvIhCAE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84be15f4da97067b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77125,"size_decoded":209208,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37615)","md5":"1bac1ab2497fda8877cb857f6d4d4603","sha1":"05a5e9c033832c5b1427b1892c2a4249a2a9e89a","sha256":"935d021b719556068308497c64a2ac0daab3ef0c05c87f29a7086f73966b2a4c","sha512":"c3254e563679cbec76e5fa18d4b7aa9bc9a1f0103203211f4735a0000870cc4cd9b04b4985677d10618325c826f02b93839397db7b289722d2dd6d7aaa7a4bd7","ssdeep":"6144:CVy3k2u5SOV+UQ3Zo/xH7nTcl5twc7xwOLsUK:Nk2u5SOV+UQ3Zo/xH7noP6YK","tlshash":"1314d7182bb19cf835bbe33a9d5fb2986516b501c50a4bf6f025d290a54c68b0df3b4f","first_seen":"2024-08-20T10:58:03.686446Z","last_seen":"2024-08-20T10:58:03.686446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V4LZT2XNH3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.050Z","timestamp":1706327997050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 02 Jan 2024 13:02:45 GMT","end":"Tue, 26 Mar 2024 13:02:44 GMT"},"fingerprint":{"sha1":"D0:30:40:C8:C1:4E:8B:97:6C:36:B5:83:34:51:BE:DC:6F:B7:4C:D9","sha256":"EE:EC:55:60:79:1E:46:3B:CE:57:34:91:53:87:CC:52:9E:7B:B4:63:84:A9:22:73:0E:6A:E4:46:6B:03:DF:D6"}}},"request":{"raw":"GET /gtag/js?id=G-V4LZT2XNH3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\nexpires: Sat, 27 Jan 2024 03:59:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 92257\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92257,"size_decoded":277591,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4179)","md5":"966792db7e343c6dfc3152973369a21a","sha1":"9a0431cb58d5e9f48dea2d3b6d0048f70b2a25b1","sha256":"86cc22658c7526a9960592ccac572134a0caef7f56141109276b6eae35c76901","sha512":"6c4112f2266717f83ff3de317126d9bb96f57692599711ca6508bdcfbf7cc396937db201a64ce9f8b48c4f56ebd6df336dea43cee813c6e63d3b331cfad96a1c","ssdeep":"3072:SJa+fqb2R5+VmMSGcWKy/8ET7q8i8uhohLP32PccJzB6t10ONbxooOwTD:Ujt+YMSmzzi8uqLP32Pz/6fzNbxd","tlshash":"074419da73c774668296f478503f024be57b28a2b45dcca8f189c9d02e74a9a4137f7c","first_seen":"2024-08-20T10:58:03.687474Z","last_seen":"2024-08-20T10:58:03.687474Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":27,"dns":1,"connect":12,"send":0,"wait":27,"receive":16,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/cache/autoptimize/js/autoptimize_single_874399c7bdb8319cfd12ed764665ea88.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.057Z","timestamp":1706327997057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_874399c7bdb8319cfd12ed764665ea88.js HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jan 2024 14:12:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"659ea5ea-619\"\r\nexpires: Sat, 27 Jan 2024 12:51:22 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 11314\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=jAYSGebyY6FQAO8hhj%2FnDgbY2aTdArMGMWdYZl5MlLk7VNiYhqRY8ND1jSe6CfPYChP9IvB7FdAFMcIZuKSgc3sew2iQY97dtbwt9cBs4U9XhjLcrl5Tnl6DXq0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84be15fb88195693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15719,"size_decoded":1561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1561), with no line terminators","md5":"947beda50726444ce6b835d685172735","sha1":"57a3e0551dab71a2834a0ad6e5aa2a44bf38d4a5","sha256":"9c53ad2f62a3498d316d0df060376e846a03cbd66e9a091f48988f56932e36a8","sha512":"2445386577151918d80adcb1b3b98b3fb7cf75454d6ad195c8c70a85f4ceab80c8e63d6141f83dce6dd53e2f9b5b51f3f8bfdb6980d0b6802aca6e8b8eeb2b8d","ssdeep":"","tlshash":"28311198b74c518b217b52622022543f7c779eb58ea1602175aed0afcb3cc64f53d6cb","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.249329Z","times_seen":25,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.043Z","timestamp":1706327997043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 02 Jan 2024 13:09:23 GMT","end":"Tue, 26 Mar 2024 13:09:22 GMT"},"fingerprint":{"sha1":"89:28:B5:6E:7C:E5:97:43:A6:48:34:12:2C:71:3F:67:E0:7C:6A:66","sha256":"39:B9:9B:4A:E6:63:E6:A9:2C:BE:EF:91:47:CE:92:C5:0A:D5:44:27:28:A4:A0:34:B1:1B:20:4C:28:A2:66:65"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jan 2024 03:59:56 GMT\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1674,"size_decoded":1674,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"a32a2ed73cdbac1bf3e8bdadb14e4263","sha1":"edbc601f3ed208aa8dd78d772fa82538863075fa","sha256":"45b853c69208a6ba0441d8679d684e8155e062adb7dd1c10a1096df25ec42a87","sha512":"14f181efda3baee4597a6ce6133dfceac762cfd4073cc1c84109c106af417a9e7f4139cdef05964315b002faf08ef7700696d7afb1adb7b782f8d0fc72c244d4","ssdeep":"","tlshash":"1b313aa6070138a8ef584d280527e04833189887ddf8059e7ea1bbceca17c9d5c88f71","first_seen":"2024-01-27T05:00:23Z","last_seen":"2024-08-20T10:58:03.688951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":121,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thubanoa.com/1?z=6871058","fqdn":"thubanoa.com","domain":"thubanoa.com","tld":"com"},"ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.056Z","timestamp":1706327997056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"thubanoa.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Nov 2023 15:12:05 GMT","end":"Thu, 15 Feb 2024 15:12:04 GMT"},"fingerprint":{"sha1":"29:B3:7B:FD:B2:7E:87:35:DA:50:73:78:59:11:52:35:7E:F9:21:32","sha256":"25:D4:6D:87:8A:BA:96:D1:A8:6E:82:31:31:6E:31:D1:50:B0:00:71:2C:1F:51:1E:15:5F:09:C4:14:21:AB:3C"}}},"request":{"raw":"GET /1?z=6871058 HTTP/1.1\r\nHost: thubanoa.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace\r\nx-trace-id: 6252ec21c2caaed7d7becbb9000b1cda\r\naccess-control-expose-headers: X-Sc\r\nx-sc: QMYQQLAfFErTr35cmzd3erpTE6UAZv8BSO6bSKNph63WiVjWysF31PNLNu8BzVVIy1OMD3vqLNJPGAhtYMtUDjkCAP8=\r\nset-cookie: scm=1; expires=Sun, 26 Jan 2025 03:59:56 GMT; secure; SameSite=None\nOAID=279cd3b26a5c4dfbbae256987407342f; expires=Sun, 26 Jan 2025 03:59:56 GMT; secure; SameSite=None\noaidts=1706327996; expires=Sun, 26 Jan 2025 03:59:56 GMT; secure; SameSite=None\r\npragma: no-cache\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22280,"size_decoded":22280,"mime_type":"text/javascript","magic":"gzip compressed data, max speed, from Unix","md5":"afa374f858d86694aa29b9fdef619b1d","sha1":"e75bc5dbe4558f7e442a740204fab552b3bad187","sha256":"e3ca3393c48f703d1ac9b62ddfd931ddcdd5bcfcdb3e3fe7b571ec5a2d4b835c","sha512":"f204bea95f0846a1238b119c0590ddce946e0b849a620786567cf44cc0d2cb8b9c6e4afab10f0464d878bcc19e2fbf434e0e3089ef9e7fce575ba36922d98bd0","ssdeep":"384:D6kheo5lAxVBVlffBnDxtMLfHy4FCdzuO4izWurBEv3/+J+klxKyA:u0ABVx5nDxt+Fc1b1fEv3ulxKx","tlshash":"30a2e1b3dc51cd13da20c479693f3f68ab37ba9d369e0b696e47e21b71212f49991080","first_seen":"2024-08-20T10:58:03.689688Z","last_seen":"2024-08-20T10:58:03.689688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":121,"dns":31,"connect":31,"send":0,"wait":65,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-26","alert":"Sinkholed","trigger":"thubanoa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oaphoace.net/400/6853718","fqdn":"oaphoace.net","domain":"oaphoace.net","tld":"net"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.391Z","timestamp":1706327997391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oaphoace.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Nov 2023 21:51:33 GMT","end":"Mon, 19 Feb 2024 21:51:32 GMT"},"fingerprint":{"sha1":"CC:7C:77:57:7C:6D:1E:0D:47:FB:95:9F:C2:70:13:6B:1E:15:C4:62","sha256":"72:30:46:A6:4C:1D:7F:FA:0C:A8:A9:4F:37:0F:AB:4A:D3:30:D1:7B:F5:17:51:29:DB:CD:DC:2E:D5:A2:CA:46"}}},"request":{"raw":"GET /400/6853718 HTTP/1.1\r\nHost: oaphoace.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 9b9fbf90589604f6ab4c54f905324462\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\nset-cookie: OAID=5554bde7d4e247f3a48336dd6abf331d; expires=Sun, 26 Jan 2025 03:59:57 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61297,"size_decoded":61297,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix","md5":"d6d84ef41534c0c56551da7c54244943","sha1":"20db7d4bea95f165be3d7d169342b081903d065b","sha256":"07d286f2c4d9a38ae27868bb30cb558a1fc3b1528fa3446cae4a1d15b27d438e","sha512":"8964d531e3cd12ca3a835be8f0cb9262e515fae0527e891bf821d40695b02d71a3b6195a121675d34c762f55ab1b153750e2c90e88519f0d096b3c5dd15f97ec","ssdeep":"1536:2Yfp8t12sNpxaRv8y8Wr7ZPlfi1cpitgrlLILOWa36:X8msNfg8WPVlfi1oxLILO/q","tlshash":"aa5302c9142da2ea0e4f11c29f472cfb6fe6a123f1a43645b94d93e4158639c48fa3cd","first_seen":"2024-08-20T10:58:03.690408Z","last_seen":"2024-08-20T10:58:03.690408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":147,"dns":48,"connect":30,"send":0,"wait":106,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-26","alert":"Sinkholed","trigger":"oaphoace.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"outoctillerytor.com/400/6883307","fqdn":"outoctillerytor.com","domain":"outoctillerytor.com","tld":"com"},"ip":{"addr":"139.45.197.236","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.389Z","timestamp":1706327997389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"outoctillerytor.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Nov 2023 23:55:52 GMT","end":"Sun, 25 Feb 2024 23:55:51 GMT"},"fingerprint":{"sha1":"3E:C0:28:31:41:34:5F:AF:BE:B1:71:A5:44:94:F5:70:4B:60:21:9F","sha256":"7E:10:8D:6B:D8:20:93:0E:6E:CF:43:E7:C8:6C:DE:79:4A:A4:06:79:18:E2:00:86:52:5C:7A:84:1A:AB:50:7A"}}},"request":{"raw":"GET /400/6883307 HTTP/1.1\r\nHost: outoctillerytor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: ea59dd3851761c0fe677f4d95858bff6\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\nset-cookie: OAID=c90ae68571574621a9253dbfe5318ec5; expires=Sun, 26 Jan 2025 03:59:57 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73318,"size_decoded":73318,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix","md5":"a550dec3675edfdce7af978670fe95d6","sha1":"76228773f42ca02ebc3d32e7bb5c6844215eb257","sha256":"60d361e0ae5c0d36da0c0ee4fec5d2fdff5deda13a59d9b6e3bce62fa2acbb75","sha512":"848c18d14b999ef2ca4680ba9f69290ad60bfbe0b5598a6b0a314ae2ff8a322a220b43ddefee1d9e716072a630ab52fb0b291fe0e32dcfea93ccfd57ed80e521","ssdeep":"1536:vB2evn6H78nj31Ou68Eynq+OTfnNYEhsaHYFeshbefn6bjLi33XW9:v3vG7M3YuoyqHrnNYCsaHYZ5efn6fGH0","tlshash":"6a63126f6735f89ad42f9c4b83b08276f8923b6f40c15aa7526e39842c3db114278b53","first_seen":"2024-08-20T10:58:03.691133Z","last_seen":"2024-08-20T10:58:03.691133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":108,"dns":11,"connect":30,"send":0,"wait":64,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/?s=crian%C3%A7as+lobo","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.281Z","timestamp":1706327997281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"HEAD /?s=crian%C3%A7as+lobo HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://goyabu.to/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=JbLbAv6C4KNPYZTMIPFM56Rkq5Gwg9S8nBu0yohTlgPiTZPZfC9aZoO3LN%2Bl%2FILmd0B3tXQGOlsjckGoqdts%2Br5qo5nViaMArg5oEEPf5r2wtsa91NV4XRSfq%2F8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84be15fd08fa5693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T03:47:03.156897Z","times_seen":13357702,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/themes/goyabuofi/img/footer.png","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.230Z","timestamp":1706327997230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/themes/goyabuofi/img/footer.png HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: text/html\r\ncache-control: max-age=16070400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Hoe1J0lAHodwMSknJAJ%2BsFxOSHW0M3MQ%2F%2Fqe7efjtOIW7EJBxaIFxY9hctlGRXa4z%2F%2BNzlJDb368xhGNZX22FZjv8zSMpEVx%2F7qAgfD0hDdkwSYrAqNWAutNXmI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84be15fcb8cb5693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"40b3fc14254227ec5012d996bf90c4e1","sha1":"b0dd06eb5a779151151101337889ff09953f8ac0","sha256":"740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca","sha512":"23526121f81d22bdf929ae6d93210e7a7eb2f5f943c237bc732e1dd658be58cd058b34290d56d72e102c712c6c672ee14372fa75e0779409a01d827203fa6fc2","ssdeep":"","tlshash":"4dc08c1cb813304485030ba00bc33542c29aa22ba8ba802104884203e0ce2bac8ea3d5","first_seen":"2023-04-05T04:09:16Z","last_seen":"2025-04-06T22:43:34.098035Z","times_seen":107868,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thubanoa.com/27/2dfc5cc60fdf6636778a3fa44bb932c7","fqdn":"thubanoa.com","domain":"thubanoa.com","tld":"com"},"ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.427Z","timestamp":1706327997427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"thubanoa.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Nov 2023 15:12:05 GMT","end":"Thu, 15 Feb 2024 15:12:04 GMT"},"fingerprint":{"sha1":"29:B3:7B:FD:B2:7E:87:35:DA:50:73:78:59:11:52:35:7E:F9:21:32","sha256":"25:D4:6D:87:8A:BA:96:D1:A8:6E:82:31:31:6E:31:D1:50:B0:00:71:2C:1F:51:1E:15:5F:09:C4:14:21:AB:3C"}}},"request":{"raw":"GET /27/2dfc5cc60fdf6636778a3fa44bb932c7 HTTP/1.1\r\nHost: thubanoa.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nCookie: scm=1; OAID=279cd3b26a5c4dfbbae256987407342f; oaidts=1706327996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace\r\nx-trace-id: 1c0b23aa057cfdf1db5f3cc4803eae07\r\ncache-control: max-age:290304000, public\r\nlast-modified: Thu, 25 Jan 2024 06:27:22 GMT\r\nexpires: Thu, 24 Feb 2084 06:27:22 GMT\r\naccess-control-expose-headers: X-Sc\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":412841,"size_decoded":412841,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65523)","md5":"d32f59c1607598ac4217df02305e49a4","sha1":"176c0940d604602a36341e0ab80505e7049248ea","sha256":"400851f4cac11f9e1867253c679fa40d686f328c0f61fa2957178ac544625f2c","sha512":"3b9bc077dabb4705ca985d760a6e6ae645c5c5945bab0a7488cbaae0dbb95b9ee93ab73029953cddb741aa774afc9ddc512bbe1f47612e2bb6dbdb6b86cf2f89","ssdeep":"3072:m0gtX7KTwkBP28c7rjWWJjxzRLIywgMX0vC0htmZxFp/I37oX:oyDWZPxvpPWRjX","tlshash":"ed94b77df882b069bad9117f043f821aa37579ce144e31d4e029fc876df440bd2a697a","first_seen":"2024-01-25T13:46:47Z","last_seen":"2024-08-20T11:08:03.728192Z","times_seen":110,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-26","alert":"Sinkholed","trigger":"thubanoa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-includes/js/jquery/jquery.min.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.044Z","timestamp":1706327997044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 08 Aug 2023 22:43:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d2c514-155ba\"\r\nexpires: Sat, 27 Jan 2024 15:59:56 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FBlPw0qRCGvL%2BdrGIoSa9nz6HXPpN%2FYsGOuLCZVg8EAra8v9ygCL5HZwN%2FoOhPxLIW5VaX9UUc%2B%2BWUX%2Bqo7cMddPz0TNicEIUclEV8uK9SfyTIxKVL2kOGltW74%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84be15fb880e5693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87482,"size_decoded":87482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-04-04T21:34:01.22657Z","times_seen":31202,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/cache/autoptimize/js/autoptimize_single_aff22efc2145f9af98ee5a3a9cb02f5e.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.052Z","timestamp":1706327997052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_aff22efc2145f9af98ee5a3a9cb02f5e.js HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jan 2024 14:12:58 GMT\r\netag: W/\"659ea5ea-162\"\r\nexpires: Sat, 27 Jan 2024 12:51:22 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 11314\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CkVjyg8koajXZ%2FxQwzAe6USRw5k%2BZUt73jYDfNy7qn0B7c1ijMufxWGIaTlYkUJFrn7M0Of9uR%2FQsR9fjOyrnrYfIr%2BJvtLnKaX1CdVcyB0jfGq%2Fp%2FY5CTiKm8A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84be15fb88135693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":354,"size_decoded":354,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (365), with no line terminators","md5":"b7972749d8b7c2eb9cdd866328d4c37a","sha1":"36935f451a58050cbc8d6f707ac9b222e7826865","sha256":"8221696439c4d483c7879d8820ca9c2ee7d214166f8c067e553f2ff3a2388142","sha512":"4bbd751edd8ce852f5586b91eaca36605942f925a83cccf71fcdef5d4eca776aff2b0818e468f23e316ca2b693b278292965b2b89e51f2a8e3da6ec4f941beed","ssdeep":"","tlshash":"c1e0d828353085bd50fd46c772b57be79d210096b5e49205882d893dadc5c678a811c3","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-02-08T23:56:18.781817Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/uploads/2023/03/goyabu.to-favicon.png","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.763Z","timestamp":1706327997763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/goyabu.to-favicon.png HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nCookie: _ga_V4LZT2XNH3=GS1.1.1706327997.1.0.1706327997.0.0.0; _ga=GA1.1.2075734905.1706327997\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 41888\r\nlast-modified: Thu, 23 Mar 2023 17:10:42 GMT\r\netag: \"641c8812-a3a0\"\r\nexpires: Mon, 26 Feb 2024 03:59:57 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=WKyrXnEiiUJK%2BkoiZoSsn1txr%2BzHBm9c%2BYsxeeND091Z7K%2BwrPvU%2FF2St0aM56KI33YHBzgj3YECMmd5eDpiW%2Ba7eYRcY9%2FUqEq%2BGHG6juciGAGTrSy11lrD%2BiU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84be16000b365693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41888,"size_decoded":41888,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"55f42c39cc0f25180760bb5d634b8751","sha1":"e799d383514bdc3750edcf018386f3d1fd19fe1f","sha256":"50dc322a11826aa3339214c7130efdeed8dae9450bf2cede3d85d131de43adfd","sha512":"34dc7809bc7706484b646393aad879fc9badeb461d843bb3f78705ae9de189ff3f95bf1d7a0cc6e1a22359fbac03aad4b6e0f97346e54f6d894192a118ea7c91","ssdeep":"768:Aq+VETfn/6SY9O9khA2BFwZHY5E+nGXsT9d9eGJYnn6bPVRnLihY0mjnwS6Z9tq9:Aq+OTfnNYEhsaHYFeshbefn6bjLi33XE","tlshash":"2a13f14fab70f459d21ff84786b851619972f87a8081dac3913e3c5464bff1905b8ae3","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.249832Z","times_seen":24,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/uploads/2023/03/goyabu.to-favicon-150x150.png","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.765Z","timestamp":1706327997765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/goyabu.to-favicon-150x150.png HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nCookie: _ga_V4LZT2XNH3=GS1.1.1706327997.1.0.1706327997.0.0.0; _ga=GA1.1.2075734905.1706327997\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 26978\r\nlast-modified: Thu, 23 Mar 2023 17:10:43 GMT\r\netag: \"641c8813-6962\"\r\nexpires: Mon, 26 Feb 2024 03:59:57 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=HqMdS1hPH%2Bgt%2BlG24MMn%2BTdYP0SmHSo4smY6jyci9eXKlGJVHkw6o7pSJY76uBbKEVUPRxuTzVd0fUNPNeRFFXYeoCmPnmvrfnqZHTsCz4ajZxuLJYPqn%2Bg9FJI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84be16000b395693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26978,"size_decoded":26978,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"612e57ba22599e77cbfaa058282d366b","sha1":"3236ad6aaecadcc8610c50754344f44ec9ba0df1","sha256":"04434e577a1406ecfc372fc8d18511e5a055ef750e07239940126d6726d566a4","sha512":"39ff8d8c9d151dbda895ba3c1b906def78cd2805628f03ecb4ea1a4185bc2090770ae945af4b9e609df74c847f78d58cc6498667b44a8da9a8d405c045276304","ssdeep":"768:Tlnu/xJL1c3fxcLNtgtBM+dxILOU1a3pY:Zi1cpitgrlLILOWa36","tlshash":"53c2f1cacc2ef191ab8d15c09e0259bb7ad9d501d1a0378c7bc847c448af38d55be79d","first_seen":"2023-07-09T17:38:43Z","last_seen":"2025-10-24T20:11:48.287437Z","times_seen":23,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.046Z","timestamp":1706327997046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 08 Aug 2023 22:43:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d2c514-3509\"\r\nexpires: Sat, 27 Jan 2024 12:51:22 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 11314\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ZMR%2FHp4KRgQMCq3dJw%2BYKgvPa1HYBsTaiDNqiWPBhCOoohw0TfgqRLg8pBqnJDLCvtF6yOuedehO8opr1tV9KnjRDCBepv27%2F8w3g%2F9SsMh9bzXpxvbGMgA95a0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84be15fb88105693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":13577,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-05T03:47:22.194744Z","times_seen":639986,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.048Z","timestamp":1706327997048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30360\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-17b8b\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 3908700\r\nexpires: Thu, 16 Jan 2025 03:59:56 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=S8IDQCFssKfa26Zos8kXpUklLXa9OMjghJngmR6L07suf7W1dap6wPe6sGmDte6FtIkBnnXKuB5Q1pLndV0Ww64EpcsGRyYXu5hnkH8ZJqRHMpg3lE%2FmW6z7msIRY57LuhKRuUSS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 84be15fbaf445697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97163,"size_decoded":97163,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T03:58:34.230133Z","times_seen":67365,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":9,"dns":3,"connect":1,"send":0,"wait":9,"receive":3,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/cache/autoptimize/js/autoptimize_single_8bccf42e52ffc18419e9321f85bba92b.js","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.053Z","timestamp":1706327997053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_8bccf42e52ffc18419e9321f85bba92b.js HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jan 2024 14:12:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"659ea5ea-513\"\r\nexpires: Sat, 27 Jan 2024 12:51:22 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 11314\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=hDp5GNMiay96hGeqkEiEaGvKdiPrRn2agkkh%2FZO0oxEpby4n8YTZ%2FbgeBYLjh0cVaRw9X%2BJiM%2F8oqh2HnXaqw9v2FMuyYAVl3i8VqfpKnTY1DXL7h4tWCDOBHFg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84be15fb88165693-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1299,"size_decoded":1299,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1323), with no line terminators","md5":"e98bcf416065f6d4cd8d4c99be99a6c7","sha1":"940a70f0fe90fe3cfab1c02a9ab3352bd73091e6","sha256":"2337f1a1a7308f83ea66262f2b10c50a862b811a21ce48c64aebae5fdb0c5302","sha512":"2c193e030c376c14ca960255bb33f07ff8531ceb016591672817b14d0afc6803cd07f6b0817f2c95f8e7cebb4c7c3cc199882fcb14bb4605fa6778cedc073400","ssdeep":"","tlshash":"61210eddce746ac3886af741493aa4e43a3738f8af8cae4dc4c100d5152e90cbe4355c","first_seen":"2023-11-05T21:24:33Z","last_seen":"2025-03-01T05:30:37.838062Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyabu.to/wp-content/themes/goyabuofi/img/logo.png","fqdn":"goyabu.to","domain":"goyabu.to","tld":"to"},"ip":{"addr":"104.21.14.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goyabu.to/?s=crian%C3%A7as+lobo","date":"2024-01-27T03:59:57.228Z","timestamp":1706327997228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyabu.to","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 05 Jan 2024 06:25:24 GMT","end":"Thu, 04 Apr 2024 06:25:23 GMT"},"fingerprint":{"sha1":"0F:A1:55:96:4F:76:62:B9:B2:DD:D6:5A:78:04:88:AA:88:72:2D:C4","sha256":"01:E0:0B:8B:72:57:A7:DF:77:94:05:97:42:D3:C2:11:2E:53:B4:68:8F:EF:52:D8:C8:9B:D4:50:29:A0:C8:BD"}}},"request":{"raw":"GET /wp-content/themes/goyabuofi/img/logo.png HTTP/1.1\r\nHost: goyabu.to\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goyabu.to/?s=crian%C3%A7as+lobo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Jan 2024 03:59:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 15063\r\nlast-modified: Sat, 06 May 2023 13:49:43 GMT\r\netag: \"64565af7-3ad7\"\r\nexpires: Mon, 26 Feb 2024 00:51:23 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 11313\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=9ub1UBMgqA%2F93sbSMtU5Tb170%2Fg5j47Kb0VAdkP6RN8urO19x%2BxiVbb%2BpI3JZkmD%2FnDw0b%2FFlmo50VYp7xR35mjikklH7V3wLxmPs9Caq2G0J6j86wYbT2%2BOJx0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84be15fcb8ca5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15063,"size_decoded":15063,"mime_type":"image/png","magic":"PNG image data, 600 x 117, 8-bit/color RGBA, non-interlaced","md5":"6659a6a25ed31a64bb938432602336c8","sha1":"fb2c79efba3cd77f0fd8f6025b700eeb7d0fccfd","sha256":"4e5598ca80869fc8d82c62ff067b9af54bb7b91eccf158b1ec06826e59f4a27a","sha512":"16eb4eb4a9bca9ac3d9051820be0608b369d23ad0afc9af436f4ea558f0eb4516d4a476ca422234ea9988d624490727a86c0f7727bdb6ec264d62b999b947525","ssdeep":"384:3AsFgrRTGhsdRueI1gWzVKeAVNAY4oolbxl:7grlGyd/WzVHAVNAVxl","tlshash":"1662d0dbcb968483bf54dc9858bf3088d7bfa44054fd2ddc001ec852b6801a9dce6d6a","first_seen":"2023-07-06T20:38:30Z","last_seen":"2025-10-24T20:11:48.240607Z","times_seen":24,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}