{"report_id":"6cb1334a-630f-4729-9f11-969eb462682c","version":6,"status":"done","tags":[],"date":"2026-02-26T14:30:35Z","url":{"schema":"http","addr":"rodiviasdigitalpedagiobrasil.com","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":0,"asn":0,"as":"","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"title":"Pedágio Digital","dom":{"size":28962,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7966)","md5":"c28b68bc6e1e70b6305676926bdbeffa","sha1":"691430f7d99684caa3e54d9329c52ba306304f65","sha256":"3cd8307764cfdd08dfc073ba04794afd49cc9d452dd55afe00603d0618a26fc6","sha512":"41b1d3a08d18470e1b07ae7e4e2ff2f4aa6f1053c371aa1e23a9ec8f6f2ce0b3426800bc0c3d272b447ba093236c05ac9d0145cb09ff90a43386fae99a384b6b","ssdeep":"384:DPdL7RkUBts1WU2Q/PXQWB61B9gI8zfUPE2EKxS7zfgNfEf+JIVYC:DPdnRq/Q5B4fxPet7IP","tlshash":"6bd22a71b5b6086a549381e2f5a5ef097034d183d70ac79cfafd0461bfcac5618b72ac","dom_hash":"domhash2eb5e1e90243bba4ceaa048394798873","first_seen":"2026-02-20T11:58:25.680345Z","last_seen":"2026-05-28T11:43:38.119107Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rodiviasdigitalpedagiobrasil.com","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":0,"asn":0,"as":"","country":"Italy","country_code":"IT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T14:30:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":6}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-26T14:30:15Z","timestamp":1772116215,"ip_dst":{"addr":"208.95.112.1","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":34270,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI","source":"{\"timestamp\":\"2026-02-26T14:30:15.257331+0000\",\"flow_id\":2084714193553448,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":34270,\"dest_ip\":\"208.95.112.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2054156,\"rev\":1,\"signature\":\"ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_06_28\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2024_10_04\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2024_06_28\"]}},\"tls\":{\"sni\":\"ip-api.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":876,\"bytes_toclient\":6122,\"start\":\"2026-02-26T14:30:15.067624+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-23T04:50:45.056452Z","alert_count":0,"request_count":2,"received_data":815937,"sent_data":856,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":3,"received_data":97778,"sent_data":1655,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":8690,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.cloudflare.com","ip":{"addr":"104.16.123.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":26817,"first_seen":"2012-05-22T13:19:15Z","last_seen":"2026-02-23T11:38:49.849229Z","alert_count":0,"request_count":1,"received_data":1154,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"ip-api.com","ip":{"addr":"208.95.112.1","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2012-04-24","domain_rank":696,"first_seen":"2014-10-06T13:38:20Z","last_seen":"2026-02-22T04:47:36.182487Z","alert_count":0,"request_count":1,"received_data":291,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rodiviasdigitalpedagiobrasil.com","ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"domain_registered":"2026-02-20","domain_rank":0,"first_seen":"2026-02-26T13:13:06.043468Z","last_seen":"2026-02-26T13:13:06.043468Z","alert_count":54,"request_count":9,"received_data":1955603,"sent_data":4364,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dde669bd0f5f56760bbaad0a496a877","sha1":"259500c3f5d2330be45cb09b527c595e0f3a36ab","sha256":"9cd6898b187c99c419b0c1876ed2d77986ded97ecb02b0193a3ec18d73e19fd8","sha512":"1db8fa4c5de0d89e0bb848484808b0623305600265b4adae18d28f647cb8da0ca5e5007df6b6735a72a6e0aa6c46d41dfbd379e9e8e97295cdab8bc796400a21","ssdeep":"96:qII+7zfgNfEf+weLo7yxNiZenQH2SJFuTN3ajYVMyGAf:S+7zfgNfEf+wvLZenQH2GwWY06","tlshash":"27b150bbfcfb29240d5fa2b227af9b853530c4171a05c2097ab8c1601fd1e193675db9","size":5163,"data":"","first_seen":"2026-02-20T11:58:25.69224Z","last_seen":"2026-05-28T11:43:38.146959Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/api.js","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"d371b61d03248118af70fe11f730e95d","sha1":"dffbc9e270a084026ad9063fb379637dbdf17602","sha256":"f658bdc4afe702f439710b89f8066abc23e50a698f6b31adf3bc11ef7bbf1b19","sha512":"47962e3c79b0564a8527c68f1abd336c41b524d64b028b186ad850760131354112b57b49b89e71d3a7ad800700f0ff521649d079624d10cfb3213571d1b6754c","ssdeep":"192:7Dl4r4svqgsHx1VTYLMQf0BsPjip2Raj7BRy:OPvjsHxjYLMQf0Bj2Rajt0","tlshash":"90d154caa4b716721da632b8402f9119b3a7e5070ac8c9527d5d8a05efd07ff4239fe4","size":6743,"data":"","first_seen":"2026-02-20T11:58:25.690037Z","last_seen":"2026-03-18T03:17:57.44824Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-14T13:56:49.04978Z","times_seen":49135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/api.js","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /api.js HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:14 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"1a57-64adf16444800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6743\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6743,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d371b61d03248118af70fe11f730e95d","sha1":"dffbc9e270a084026ad9063fb379637dbdf17602","sha256":"f658bdc4afe702f439710b89f8066abc23e50a698f6b31adf3bc11ef7bbf1b19","sha512":"47962e3c79b0564a8527c68f1abd336c41b524d64b028b186ad850760131354112b57b49b89e71d3a7ad800700f0ff521649d079624d10cfb3213571d1b6754c","ssdeep":"192:7Dl4r4svqgsHx1VTYLMQf0BsPjip2Raj7BRy:OPvjsHxjYLMQf0Bj2Rajt0","tlshash":"90d154caa4b716721da632b8402f9119b3a7e5070ac8c9527d5d8a05efd07ff4239fe4","first_seen":"2026-02-20T11:58:25.690037Z","last_seen":"2026-03-18T03:17:57.44824Z","times_seen":8,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 14:30:14 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1599254\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8sis2qBiH7rhRklm2V4N4g2GcoVsdpd0mOufHOFZUiaoP7OkQQEQunMdEngK6lvdM8I5oO4XZl7ufDx5gaKwxH1%2FwFz%2B0FoBvIjYT0EriuKwQ%3D%3D\"}]}\r\ncf-ray: 9d4023a2ec4ac8c4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-14T13:56:49.04978Z","times_seen":49135,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/background.png","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /background.png HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:14 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"1bff41-64adf16444800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1834817\r\nCache-Control: max-age=2592000\r\nExpires: Sat, 28 Mar 2026 14:30:14 GMT\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1834817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 900, 8-bit/color RGBA, non-interlaced","md5":"4fd4e11a8697249e34108359087ccc88","sha1":"4bd683debb6d8aab96e6a1c5596c38a7969123da","sha256":"96fbd666117a2425846ab49ae2fcac2a292a605fea7a36d3060c5dfcef4ae258","sha512":"5198d4548b9b3d44857b0618db466b39f85d76dfcff7f695903ffca271b517af42b00d2d9d4833b125974e293e126438457fd032f5393a673d48bcd0343f3b8d","ssdeep":"24576:YAG9ARcxLdpebXD7cQxtiZRm+d/OW++HkByq3+:YlWiybXsQxMZ7/T+yqu","tlshash":"b12533e0d2c887fdf63ab0e38244cb3d0a44f08553751b21499f563c95e5b9aaf9af60","first_seen":"2026-02-17T15:09:31.821733Z","last_seen":"2026-08-11T09:25:04.299012Z","times_seen":80,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/logo-motiva.svg","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /logo-motiva.svg HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:14 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"1713-64adf16444800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5907\r\nCache-Control: max-age=2592000\r\nExpires: Sat, 28 Mar 2026 14:30:14 GMT\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5907,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"980cc60ac6b7641a9621eab7fef4e01e","sha1":"d724debf0200073f83a9f2b540842e3b901fb3b0","sha256":"1ebcfa05854b60a966142efd0b88b4e9e5ba0e72484adf10357e7cc79f0e58c6","sha512":"1a39a5a54928687d5c76c7f09410ddaffcf05adbd406a8de9ebda5ec2af0d33190a6df9452e7e5f0aa7e86d34d0fbd7ebe482d31a62fd8546cb950deb8405442","ssdeep":"96:GGa20c1uEdydy2qL80+UmeTuUq4CJdrUqZQpp6w/xN4zPhBoRlz+m1VKBuQVb6bH:GGJocAaV2VsqZQ5/xizAliNAH","tlshash":"e7c1a7e513a8d1e4fe07ebb2ed2b683a562f25f4afde40c8c550e45777a10e84c99c90","first_seen":"2026-02-13T22:45:25.336422Z","last_seen":"2026-08-11T09:25:04.313329Z","times_seen":61,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/favicon.ico","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:15.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:15 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"6c2-64adf16444800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1730\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 42 x 32, 8-bit/color RGBA, non-interlaced","md5":"5fdf3cbcea06bfffb7f71143fc5a2197","sha1":"e112cd30d70ef9832bc24903e8f3d242bc3e52c8","sha256":"84655c4e6a3ce277d60e87299574a0bc9c2a1ab11c66d8ca9413fc907d40d4cc","sha512":"c0e8894358348a61dedd618b5f200d64849513b01dde412c7d41017c22096cd4b8f6f760e4f3e431a797d3960a34ec4baf7ab86b644b2f01e7c4bfc75dfd23e8","ssdeep":"","tlshash":"fc3108e9f237421d965b96b8050164e1b0cb6e202938c4662e46fb812db3a1968d8d4c","first_seen":"2026-02-17T15:09:31.845645Z","last_seen":"2026-08-11T10:49:45.765764Z","times_seen":85,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rodiviasdigitalpedagiobrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 21:31:24 GMT\r\nexpires: Thu, 25 Feb 2027 21:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 61130\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-08-14T09:39:36.257832Z","times_seen":11645,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":152,"dns":4,"connect":15,"send":0,"wait":16,"receive":52,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 26 Feb 2026 14:30:14 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::hlnfh-1772115706047-5902c9098b5a\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 508\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VjlxLGoeaeiAkAfMCsRZEEJC0Gwsl3lW63Y0gpTf4LeDqPB5ApSGc4CEbSIoLw8uJFpymPJgE1Si789cnLSBRscgMjLmyP%2BAfkReLVMM0l3hw%3D%3D\"}]}\r\ncf-ray: 9d4023a2ab97c8c4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T14:51:30.253169Z","times_seen":17888305,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":12,"dns":0,"connect":8,"send":0,"wait":15,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:wght@300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Ubuntu:wght@300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Feb 2026 14:30:14 GMT\r\ndate: Thu, 26 Feb 2026 14:30:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8004,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e05b0cb22b3789a5c72aeef4f1b22893","sha1":"1642b373351455bf8334c30cec2bec1834c01d09","sha256":"e6b653e35fedf32193c15bf8660dd5587cda4f6b0b022c1c6a63d60e69a67394","sha512":"fea9f8d8456a6a33269b58adf47af7d0c1cfbc2c41bb62af53c269475c522b4218d6156726961bb1c1d24b01f202384da7e5729eaeb1dd9cd409f43362bde34a","ssdeep":"192:hbRA3HLg3bg8i5xq7eMVDUn5ZKdgWlR66HZ7H:J2aJl","tlshash":"0bf1bf93145b9404ea434cc223cfbf369d8f61956445c5ba6ffe18c8ace6c3a436ab4d","first_seen":"2025-09-03T21:57:59.125839Z","last_seen":"2026-08-13T16:11:20.618077Z","times_seen":991,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":143,"dns":5,"connect":21,"send":0,"wait":34,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rodiviasdigitalpedagiobrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 23:06:30 GMT\r\nexpires: Thu, 25 Feb 2027 23:06:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 55424\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-08-14T07:27:26.540677Z","times_seen":21839,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/logo-eco.png","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /logo-eco.png HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:14 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"1042c-64adf16444800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 66604\r\nCache-Control: max-age=2592000\r\nExpires: Sat, 28 Mar 2026 14:30:14 GMT\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":66604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 862 x 211, 8-bit/color RGBA, non-interlaced","md5":"7a2a2b803287e86b96e0100ed44196a7","sha1":"a774d8509475da8626c87f74f941afa37f539dfe","sha256":"101839a93af4a8624ef9114102bf279425c55ff04c17e4d5f89142199ca4a47a","sha512":"5a53ae838b67241c55c30f5525e3f3a752f7359058bd8c46177943795b3821cf9dd5e1ed061d651e25ef2bf9e54c4b4ba91c1ec49463713051cf77ea3e1b4654","ssdeep":"768:fe9ZCB0MNJKn1XO2YNhhLpDXaLUo+j5n1R5plp4NAYvELZ2JIqVr0YmaSTD/dOqZ:2GBRF2YnFpDz51R5hmmZ2J7+/Hw+/EC","tlshash":"105301f789f27eeb82b04fc49299adfccedd06a303728546f875eb0017602d05124a9b","first_seen":"2026-02-13T22:45:25.339827Z","last_seen":"2026-08-11T09:25:04.315434Z","times_seen":95,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cloudflare.com/cdn-cgi/trace","fqdn":"www.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.123.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:10:19 GMT","end":"Tue, 19 May 2026 20:10:11 GMT"},"fingerprint":{"sha1":"2C:5B:02:B2:30:E5:11:23:AD:FF:A5:40:15:E1:A7:00:B0:CE:7A:38","sha256":"4E:6D:A2:61:99:13:0C:31:A6:E5:26:14:13:90:74:AC:17:DF:AA:F3:DA:B5:36:D7:14:EE:EB:31:75:BD:87:96"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: www.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nOrigin: https://rodiviasdigitalpedagiobrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 14:30:14 GMT\r\ncontent-type: text/plain\r\nif-modified-since: off\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=0IbUDIvNAclrFfoY15AyXDL2ENg1wiOdsTasM0g4Oww-1772116214.8958561-1.0.1.1-yqePmX.g3xfwEBSr6tU8GK3HRCkDFNeGuNCBJ3pgIJYC74FA09Axroy.X21C4.vwMFO7TpBIdNNza5JVU1s_uGF7i1D0R5ZEwHsuz1blylq5HLoqR5SckS5C.Oqsqvxe; HttpOnly; Secure; Path=/; Domain=www.cloudflare.com; Expires=Thu, 26 Feb 2026 15:00:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSnSS5xfPk4maWMLLhUZ8%2BLL4uGAew4XcojWfsaijoQdrvb8u%2BmNUJQfysCmVNjX3a9Fw0bjToI0qrtNRNQGiTl0JNhtaRgGZG2%2Bz7eD3SdM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d4023a718e85ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"2607eae3889d859ba309ff9cc4314721","sha1":"30da3fd0726b7de3d674afbde296e0e775f85b2f","sha256":"fa90d6749cedf77e4fff7b17cb1a7a84cccce3054ed3542d6cad11e981328716","sha512":"dd1f68f5f2a3ecbe584379539411acd05f134a696d8005b49d76fef02572d819b5f7a0826cdc10635235f0f6902abf4ee42763712e5c3f2d7c01841d96117bc3","ssdeep":"","tlshash":"cdd02bdfd17d0158246cd419029a5386c761514b89fbb971fde28509efcd3e704d9de0","first_seen":"2026-02-26T14:30:37.4408Z","last_seen":"2026-02-26T14:30:37.4408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ip-api.com/json/91.90.42.154","fqdn":"ip-api.com","domain":"ip-api.com","tld":"com"},"ip":{"addr":"208.95.112.1","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:15.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ip-api.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Feb 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C4:3C:A1:3A:F5:DC:2D:C7:D5:63:0A:55:E7:E0:20:DB:85:D2:09:2E","sha256":"CD:A6:17:77:06:27:70:F3:87:D9:AD:87:F9:C2:2A:0F:63:3A:76:CB:2A:D8:A5:43:8D:51:F1:C5:6E:5D:49:89"}}},"request":{"raw":"GET /json/91.90.42.154 HTTP/1.1\r\nHost: ip-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nOrigin: https://rodiviasdigitalpedagiobrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Thu, 26 Feb 2026 14:30:15 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 107\r\nAccess-Control-Allow-Origin: *\r\nX-Ttl: 60\r\nX-Rl: 44\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":107,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2d4fe0896bea42e22440634afcd5f5e5","sha1":"9b3bdf02a4e9e673a88b045dbe890564526fed76","sha256":"61fd702060224daad1fa949b448fcbebb9d3bc8628ffb942b44e8fa63dbd4c87","sha512":"745f925a92941be748a7e6a14c84adf2daa3917279407450a711dacd3856e767c6e6084b3ff29c08e7f05e539b7f14d731a5105a688d453b2b4402396a916864","ssdeep":"","tlshash":"feb0129782057a5a1f5d41c53c003e2899fb07a16ce19158946d8c0db716402f52ff60","first_seen":"2023-05-29T15:21:45Z","last_seen":"2026-08-07T07:49:56.314526Z","times_seen":913,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":330,"dns":14,"connect":93,"send":0,"wait":155,"receive":0,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/admin/dashboard_api.php?action=log_visit","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:15.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"POST /admin/dashboard_api.php?action=log_visit HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 373\r\nOrigin: https://rodiviasdigitalpedagiobrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":373,"data":"visit_id=\u0026url=https%3A%2F%2Frodiviasdigitalpedagiobrasil.com%2F\u0026referrer=direct\u0026userAgent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026browser=Firefox\u0026browserVersion=134.0\u0026os=Windows+10%2F11\u0026device=Desktop\u0026ip=91.90.42.154\u0026city=Desconhecida\u0026state=N%2FA\u0026stateFull=Desconhecido\u0026country=Desconhecido\u0026countryCode=BR\u0026page=%2F"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:15 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nSet-Cookie: PHPSESSID=l841ev6lkkntbl5t13t2a88hgo; expires=Thu, 26 Feb 2026 15:00:15 GMT; Max-Age=1800; path=/; secure; HttpOnly\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nX-RateLimit-Limit: 10\r\nX-RateLimit-Remaining: 9\r\nX-RateLimit-Reset: 60\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Length: 100\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"18275b84269af09f5d62268e68f84c2c","sha1":"3213a1ab3d6d565588e4d43a6bd3b8a4913648b3","sha256":"eda1093fff338520d5a4dba646d879c2b5bebd509dd23ffc639c91a7a142a37f","sha512":"23bd7448fe0b2edc9d183dc80417a2ca2b7e2cc5fe7b82940de23400cffdfb327044a1135c6a3dafa85894758cee6434b6f2e896b37c9d8c5b120caef38ee741","ssdeep":"","tlshash":"f2a0127907301c57565003cb30637a00008dd042a0e8a005413d061802294042412049","first_seen":"2026-02-26T14:30:37.44269Z","last_seen":"2026-02-26T14:30:37.44269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T14:30:13.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:13 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nContent-Length: 5380\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21308,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (354)","md5":"5f8782abc7232014ffff071e8fbf87a0","sha1":"7d27506672a80afd3fad9cb3b13659cec04ed29d","sha256":"d565c9d6bddeaa9184d2df7c021c982d7a6479f206f07572e79cf6e46468c544","sha512":"a367550ed0387f0fcb7b928bc7a79e69a78ea92b1165044ddd970b023a6503f5cf5c56ebc01cbf99d6db9527e48d79133affdcc8419586f59c0f6aff49378c15","ssdeep":"384:FfiWU2Q/zdEeh461D1gI8zfU4Gu2a/S7zfgNfEf+JIVYq:F6pEYDAfY5At7Iz","tlshash":"e8a2e871b5fa186a109b82a1b6a5cb0635b4d103db058648bbfc04f27fcad4968776fc","first_seen":"2026-02-20T11:58:25.686227Z","last_seen":"2026-05-28T11:43:38.140423Z","times_seen":8,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":82,"dns":27,"connect":20,"send":0,"wait":22,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/style.css","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:14 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"1576-64adf16444800-gzip\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\nExpires: Sat, 28 Mar 2026 14:30:14 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Length: 1640\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4133a9c9bd5d03b91cb638665ae7db68","sha1":"2663696315b29d002cae0b0e42f895f640555b3a","sha256":"9102d6b0e9fee71293d6b749380dbf1cc950e8cdbaaee0c1a98a19cd81b1f479","sha512":"570efc7d3d59c98d8aa1ee4e93e89b7e960e4bac7f0acef653ccdbcdcba0aab2430d7ab3e123f6edfcdc3820c247f6c7f83d494e501d8733c4f0aeede150c0d7","ssdeep":"96:9uXFocWWEx/YV2css4oFSy44ypmmaIyed7SWq:JBmVmDoFSyFyp33yJ","tlshash":"64b19913bed52088316ba594e6633bfe7fbd800193098df55b803668cf46afa05d1b4d","first_seen":"2026-02-20T11:58:25.681353Z","last_seen":"2026-08-11T10:49:45.770949Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rodiviasdigitalpedagiobrasil.com/logo.png","fqdn":"rodiviasdigitalpedagiobrasil.com","domain":"rodiviasdigitalpedagiobrasil.com","tld":"com"},"ip":{"addr":"80.71.224.51","port":443,"asn":0,"as":"","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rodiviasdigitalpedagiobrasil.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 10:38:52 GMT","end":"Fri, 22 May 2026 10:38:51 GMT"},"fingerprint":{"sha1":"FA:65:4C:BF:7A:A5:19:CB:60:DD:6A:6F:3F:B8:49:7A:32:27:EE:EF","sha256":"9E:64:35:D7:7F:48:84:B7:7C:CC:94:7C:DC:68:2A:D4:03:3F:61:CA:10:EC:AB:16:FF:91:AE:77:E4:4F:38:41"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rodiviasdigitalpedagiobrasil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rodiviasdigitalpedagiobrasil.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 26 Feb 2026 14:30:14 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Sun, 15 Feb 2026 16:11:12 GMT\r\nETag: \"1b3b-64adf16444800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6971\r\nCache-Control: max-age=2592000\r\nExpires: Sat, 28 Mar 2026 14:30:14 GMT\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 74, 8-bit/color RGBA, non-interlaced","md5":"0f062c71f0bb729b504f88f6a428cbed","sha1":"1e16377c8a46941e01b7faade8460cc2d8ea2313","sha256":"d21d21bb7f84a4b4556ca0a012b2a3d0528a6694b471230c4c5a4ba8ccba6b1b","sha512":"96dc8e6a80aa61330fa1be7129931df3337ec4785fc2970ceaa342b6476de7e4c75af6ae11b1af139883eb692aeeffdec923b338d782ed7e5a6901b6725bf500","ssdeep":"192:MXTuulTKCGKf0wbowZCjQfc8L316OH6pr:M6kBGHwbowZmQftLl63pr","tlshash":"6ae1ae9c51ba3ab3e5cb7af1b3792ada44e6c236227fa1c164e3c355184491b8033e08","first_seen":"2026-02-10T06:57:54.570916Z","last_seen":"2026-08-11T10:49:45.771758Z","times_seen":125,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"rodiviasdigitalpedagiobrasil.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rodiviasdigitalpedagiobrasil.com/","date":"2026-02-26T14:30:14.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rodiviasdigitalpedagiobrasil.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 20:30:11 GMT\r\nexpires: Thu, 25 Feb 2027 20:30:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 64803\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-08-14T07:22:00.037999Z","times_seen":17131,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":159,"dns":3,"connect":13,"send":0,"wait":58,"receive":2,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
