{"report_id":"710a9d88-35ca-4114-882a-1d598d7308f9","version":0,"status":"done","tags":[],"date":"2026-07-17T08:41:21Z","url":{"schema":"http","addr":"detran-df-consulta.site","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":0,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"detran-df-consulta.site/","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"title":"Detran Digital","dom":{"size":7842242,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54030)","md5":"fe0e62759faf18401e38f88aed38d2f3","sha1":"8e9703e8a1c1aaf5381cbed29fa7220ded694744","sha256":"ab3d481e37a2ba985b675a421b9c5d3b0053133243f20dd21c2b3b9b7a17f322","sha512":"564fad5be33e16643fbce792da887acba95a9d7ed2d8b24987f79a278f70afbe56bbc11c9536d31c6ed1370034978601b3e565a591923051eed38636b6db0912","ssdeep":"49152:3346VJ8rbkKcObkKcXOmgY9m5bVYupeqJXJDG/IG8yb1OAPPdWm4l6ZY6aDEFOgW:QII","tlshash":"d88629a35d4b5a6eab3c2be70747edc55927ade30ec21eccf58b416c909f7130894268","dom_hash":"domhashf8c369a6f37b1c7ea698b5b78ac9ec9b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"detran-df-consulta.site","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":0,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T08:41:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipva-df.portal-servicos.digital","ip":{"addr":"104.21.51.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T11:40:50.278749Z","last_seen":"2026-07-16T11:40:50.278749Z","alert_count":0,"request_count":5,"received_data":3897,"sent_data":2747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"detran-df-consulta.site","ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"domain_registered":"2026-07-15","domain_rank":0,"first_seen":"2026-07-16T11:40:50.279605Z","last_seen":"2026-07-16T11:40:50.279605Z","alert_count":6,"request_count":6,"received_data":7854249,"sent_data":2861,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"detran-df-consulta.site/","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1b533c1d23205198c67581b3db4140f","sha1":"0555067d0d74325b721dca3ecfd22baba3481776","sha256":"82db6b575c00953ba13e473a32a3381e3d651bb906f6f9c58b2c0817f7010af6","sha512":"60d67e5ff65948358dab85ca10fbbb5136fa82e4a58b0f6d0ff4a9dd3489dd4ba2c6836d50e0374fc8d974b6ffcb6843d1a5722ea61f882f48058366936b2ba7","ssdeep":"","tlshash":"2441104d79f354fe5623b03993dfa240352588039483d9a57d0c9a465fe86bc09b6bcc","size":2344,"data":"","first_seen":"2026-07-16T11:40:55.82169Z","last_seen":"2026-07-17T08:41:23.790808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6448e810664f1691b166b60fb8c2363c","sha1":"4bf89570ed2fd19673edd1fb4f5d7b6a6fd5ab19","sha256":"95c3650f27d65111274b8d26c0e3540625918edcf997ed724f6355379796f4f4","sha512":"34633456e925bd4f11dd00d82a5daa9cc8b533513b02a4c65f8ad3a83dd9e151c96282096c3a5dbb6c860bd09652398c2cb5924faa5226640f096a6306f6d22c","ssdeep":"","tlshash":"821100793f1a1534c9c5408b31bee7ad3e3220357a02a084c26ccc289d18e9314efcbe","size":902,"data":"","first_seen":"2026-07-16T11:40:55.824457Z","last_seen":"2026-07-17T08:41:23.793616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","size":33228,"data":"","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-07-22T13:36:55.887899Z","times_seen":31882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee533cfd0119afba11d05b701be603b7","sha1":"13fe625a9affdb9b1d12edf5b26139bb72f3899e","sha256":"f1f6a619c92c2dbf68b0dba83dc4cc9eb8c7567fe9773347058e5be3db75110c","sha512":"da3dfea38855b2999e58fb35b9a0ead8fd8fa70f5bd69fba9dba4daa4a0a5fb717049113b510f8f4b78851c61a7d745c92a9a2f768f8ddf0476f7482f93cd1e8","ssdeep":"","tlshash":"6fd0a7a91da5893065d8014e60f6d7ac66b131646611a280c1d9cc2e5b10de344a1558","size":217,"data":"","first_seen":"2026-07-16T11:40:55.828901Z","last_seen":"2026-07-17T08:41:23.797106Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ipva-df.portal-servicos.digital/assets/sites/ipva-df/images/favicon.ico","fqdn":"ipva-df.portal-servicos.digital","domain":"portal-servicos.digital","tld":"digital"},"ip":{"addr":"104.21.51.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.669Z","timestamp":1784277651669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal-servicos.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 18:21:03 GMT","end":"Mon, 17 Aug 2026 18:21:02 GMT"},"fingerprint":{"sha1":"A3:21:F4:2A:32:D9:28:07:03:20:55:4F:A4:AF:47:AD:16:08:DB:F9","sha256":"C4:C5:BB:1B:A0:14:46:93:61:6B:EF:AD:BD:FE:52:A9:6E:B4:76:16:F2:0B:E1:34:9E:BB:E1:1C:67:FC:DD:13"}}},"request":{"raw":"GET /assets/sites/ipva-df/images/favicon.ico HTTP/1.1\r\nHost: ipva-df.portal-servicos.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQgdfmtkajMdajzQbecx05s2EU0FhZArK8ll59gqSDwcu1WmlwBDsfxB8pR7eNnYlZWM8qivPJMTUVMm5qxbsiodSkNI7uNh09kabvT7qqrh89deKz2ti4YbEyvIDK6y02KxhH5qqBR8anwaETIb7c7c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a1c7f1baf85e56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipva-df.portal-servicos.digital/build/assets/app-DkHNfvbj.js","fqdn":"ipva-df.portal-servicos.digital","domain":"portal-servicos.digital","tld":"digital"},"ip":{"addr":"104.21.51.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.176Z","timestamp":1784277651176,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /build/assets/app-DkHNfvbj.js HTTP/1.1\r\nHost: ipva-df.portal-servicos.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://detran-df-consulta.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnnUumV61GGHL2cNJd0F8g5Lu23O7rplCGnD3c1FKcX5Q9Kvp4xPIKX8HAJbCXU%2B6W%2BAK1oA%2FFxXf6MaOSabJGF4Cn6CiecpunJvpGnsurl1LpwRNY5zIykIicMzVS6NZ%2BIe0y7sp4O00m2pp1yngLt5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a1c7f1b9885256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipva-df.portal-servicos.digital/assets/sites/ipva-df/images/main_back.png","fqdn":"ipva-df.portal-servicos.digital","domain":"portal-servicos.digital","tld":"digital"},"ip":{"addr":"104.21.51.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.529Z","timestamp":1784277651529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal-servicos.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 18:21:03 GMT","end":"Mon, 17 Aug 2026 18:21:02 GMT"},"fingerprint":{"sha1":"A3:21:F4:2A:32:D9:28:07:03:20:55:4F:A4:AF:47:AD:16:08:DB:F9","sha256":"C4:C5:BB:1B:A0:14:46:93:61:6B:EF:AD:BD:FE:52:A9:6E:B4:76:16:F2:0B:E1:34:9E:BB:E1:1C:67:FC:DD:13"}}},"request":{"raw":"GET /assets/sites/ipva-df/images/main_back.png HTTP/1.1\r\nHost: ipva-df.portal-servicos.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDLgghhu15oxZYPegRVLJ4mSYXZdY6TwI0maGsIGCaH9dIigYnuk26Hh3id3gM8nMVJHaSCN5cyIxdyRurQ1dfNrN0hXzvdj%2FZ3k0fSro8aCVi6lTUW14nlWbU5M9UWmQeJzOMMlu%2BlTCrIjU%2FI0KEOb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a1c7f1ba185756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/stats_click.php","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.671Z","timestamp":1784277651671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-df-consulta.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 17:22:34 GMT","end":"Tue, 13 Oct 2026 17:22:33 GMT"},"fingerprint":{"sha1":"A0:6E:95:CA:04:97:7F:9E:DF:00:1D:B9:48:60:0A:F5:47:79:82:E3","sha256":"E8:8A:08:74:4C:38:3B:3F:01:CA:AA:F6:1C:5A:3D:CB:E9:B3:E3:15:93:29:62:C5:AA:BE:88:C7:48:CB:27:50"}}},"request":{"raw":"POST /stats_click.php HTTP/1.1\r\nHost: detran-df-consulta.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 16\r\nOrigin: https://detran-df-consulta.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"{\"page\":\"index\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.30\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 58\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":54,"size_decoded":355,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b9b5a2a3fa76976d4d33398a29dd5b1a","sha1":"0c8d134a0c67f48626af380c8351373cef44a6ea","sha256":"c504e7dfbce7f8dc4fa21a57adcb4862c67b1838b7b53fdb9af4adda5d55221b","sha512":"b72231ea3c1dd547286cddc9465d73aa0ac01db31bdbf871eb8477921defa2412f49e59b9625581d9d102bad068deefd81ce1ed5b494b2858c90c2b7498f0277","ssdeep":"","tlshash":"7b900210106a1d4328a5e741040658d259d70a4b03fb424c4d2886250be988441dd315","first_seen":"2026-07-17T08:41:23.783971Z","last_seen":"2026-07-17T08:41:23.783971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/cdn-cgi/rum?","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.688Z","timestamp":1784277651688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-df-consulta.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 17:22:34 GMT","end":"Tue, 13 Oct 2026 17:22:33 GMT"},"fingerprint":{"sha1":"A0:6E:95:CA:04:97:7F:9E:DF:00:1D:B9:48:60:0A:F5:47:79:82:E3","sha256":"E8:8A:08:74:4C:38:3B:3F:01:CA:AA:F6:1C:5A:3D:CB:E9:B3:E3:15:93:29:62:C5:AA:BE:88:C7:48:CB:27:50"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: detran-df-consulta.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nContent-Length: 660\r\nOrigin: https://detran-df-consulta.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":660,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":3082,\"startTime\":1784277648573,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.5.0\",\"timings\":2},\"pageloadId\":\"35875712-fa9e-44b5-b02f-3782b7755322\",\"location\":\"https://detran-df-consulta.site/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":33,\"domainLookupEnd\":170,\"connectStart\":170,\"connectEnd\":517,\"requestStart\":517,\"responseStart\":1685,\"responseEnd\":1685,\"domInteractive\":3050,\"domComplete\":3105,\"loadEventStart\":3105,\"loadEventEnd\":3105,\"transferSize\":3525910,\"decodedBodySize\":7842938},\"siteToken\":\"12b147ba0d0542ce98440dc079ff2fd9\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-7c2b73f1be9a98dd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1626\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4511,"size_decoded":1936,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-22T17:37:21.17831Z","times_seen":37389,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/alert-D23w6Y02.js","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.404Z","timestamp":1784277651404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-df-consulta.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 17:22:34 GMT","end":"Tue, 13 Oct 2026 17:22:33 GMT"},"fingerprint":{"sha1":"A0:6E:95:CA:04:97:7F:9E:DF:00:1D:B9:48:60:0A:F5:47:79:82:E3","sha256":"E8:8A:08:74:4C:38:3B:3F:01:CA:AA:F6:1C:5A:3D:CB:E9:B3:E3:15:93:29:62:C5:AA:BE:88:C7:48:CB:27:50"}}},"request":{"raw":"GET /alert-D23w6Y02.js HTTP/1.1\r\nHost: detran-df-consulta.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-7c2b73f1be9a98dd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1626\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.675Z","timestamp":1784277651675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-df-consulta.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 17:22:34 GMT","end":"Tue, 13 Oct 2026 17:22:33 GMT"},"fingerprint":{"sha1":"A0:6E:95:CA:04:97:7F:9E:DF:00:1D:B9:48:60:0A:F5:47:79:82:E3","sha256":"E8:8A:08:74:4C:38:3B:3F:01:CA:AA:F6:1C:5A:3D:CB:E9:B3:E3:15:93:29:62:C5:AA:BE:88:C7:48:CB:27:50"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: detran-df-consulta.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-7c2b73f1be9a98dd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1626\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":4511,"size_decoded":1936,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-22T17:37:21.17831Z","times_seen":37389,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:40:48.602Z","timestamp":1784277648602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-df-consulta.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 17:22:34 GMT","end":"Tue, 13 Oct 2026 17:22:33 GMT"},"fingerprint":{"sha1":"A0:6E:95:CA:04:97:7F:9E:DF:00:1D:B9:48:60:0A:F5:47:79:82:E3","sha256":"E8:8A:08:74:4C:38:3B:3F:01:CA:AA:F6:1C:5A:3D:CB:E9:B3:E3:15:93:29:62:C5:AA:BE:88:C7:48:CB:27:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: detran-df-consulta.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.30\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Jul 2026 08:40:50 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7842938,"size_decoded":3526078,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (54030), with CRLF line terminators","md5":"ab59344ff38c3e2e9048bd424a7b5d1e","sha1":"d646719464c3c3c4fa82fe7e07268193d2ba2c45","sha256":"e111aa9a43f14a3284c504ad8fc992e86b150529ab3fcfce24128c3e8b569359","sha512":"5f33f4983d5354178611511e33ac06fe14c5f458aaeb419b0c6fa11cf2c441578ffd377eb26147a82085f9483b7c56c1be2f01dccb095222d5d3f2ec9b0a3dad","ssdeep":"12288:sU5250TZReK7wT6horXzQGJS+Ut11DSi9ER/FpgjSMDPUKrFlY5KM9d1+CgW4X8X:352iBsJZH/wjBDPUWFlYB9dv","tlshash":"94259f7e1116652eaf687f74be5d54600b0e52d530a040cace7f9ae3e044bea7cf0a79","first_seen":"2026-07-16T11:40:55.815417Z","last_seen":"2026-07-17T08:41:23.788034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1652,"timings":{"blocked":-1,"dns":137,"connect":112,"send":0,"wait":1168,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detran-df-consulta.site/currency-COszybhq.js","fqdn":"detran-df-consulta.site","domain":"detran-df-consulta.site","tld":"site"},"ip":{"addr":"157.173.209.213","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.402Z","timestamp":1784277651402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-df-consulta.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 17:22:34 GMT","end":"Tue, 13 Oct 2026 17:22:33 GMT"},"fingerprint":{"sha1":"A0:6E:95:CA:04:97:7F:9E:DF:00:1D:B9:48:60:0A:F5:47:79:82:E3","sha256":"E8:8A:08:74:4C:38:3B:3F:01:CA:AA:F6:1C:5A:3D:CB:E9:B3:E3:15:93:29:62:C5:AA:BE:88:C7:48:CB:27:50"}}},"request":{"raw":"GET /currency-COszybhq.js HTTP/1.1\r\nHost: detran-df-consulta.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-7c2b73f1be9a98dd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1626\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"detran-df-consulta.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipva-df.portal-servicos.digital/build/assets/currency-COszybhq.js","fqdn":"ipva-df.portal-servicos.digital","domain":"portal-servicos.digital","tld":"digital"},"ip":{"addr":"104.21.51.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.180Z","timestamp":1784277651180,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /build/assets/currency-COszybhq.js HTTP/1.1\r\nHost: ipva-df.portal-servicos.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://detran-df-consulta.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFHDQ57nMCXzXphDd0mVSqrqWgXnrKVUEZ5jX31ho9bT6oBmcl3mW%2BCbm7TfPAkZIEszbCKNiN8RpqAPPFllQ1pJTwjTZ5jDS0v3AGpZ%2BRKd35LyX4zUif1E5KshM9HfEVO%2FBiJIN3Kf3lwoUPsDHOXp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a1c7f1b9885356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipva-df.portal-servicos.digital/build/assets/alert-D23w6Y02.js","fqdn":"ipva-df.portal-servicos.digital","domain":"portal-servicos.digital","tld":"digital"},"ip":{"addr":"104.21.51.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detran-df-consulta.site/","date":"2026-07-17T08:40:51.182Z","timestamp":1784277651182,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /build/assets/alert-D23w6Y02.js HTTP/1.1\r\nHost: ipva-df.portal-servicos.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://detran-df-consulta.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://detran-df-consulta.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 17 Jul 2026 08:40:51 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BeL77NfdEbCBFxuOj1FQRktsz1yLS8hqTR9QTVUVG2egPMLX4TlKgC0R%2BwbXcXkSKtYjbmWJ0T1%2F3kcOCDxjW01ZrcfthRzeGIT3j%2FvKYRcvr62YwXae9D%2FR8tXwuSNuURqWAN6YThoarKYVUd7xs6d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-ray: a1c7f1b9885156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T17:24:26.53347Z","times_seen":17455687,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}