{"report_id":"78ca4664-8afb-4a47-aac1-bc6ed3f35810","version":0,"status":"done","tags":[],"date":"2026-09-27T03:32:05Z","url":{"schema":"http","addr":"feirao-oflcial.com/","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.65","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"feirao-oflcial.com/app/index.html","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"title":"Consulta Nacional de CPF – Regularização Educativa","dom":{"size":48666,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (536)","md5":"43e7511064fc7236864377b378564f40","sha1":"94326cf22c4b64f475730e7925803e972b61ff18","sha256":"dd0502e2faeea8cd9f4f1530d76f2bd8aee7efd714435560d8b2f328b4091a8e","sha512":"0b52129cc91614702801fc457310fdcaa9fa4ff8374da628bfceedaa2acd9cce80bc570c37cc9d6cdcf70600c8b81311f9c58994b9971ebdb6d1c80340e4bdeb","ssdeep":"768:Jsze4rBYSriWBSWQRIIiEIIibJ7DzFsNyhkWB+BtzsOx:JszPtBSIIbIIkDzFn+Btzsy","tlshash":"ca23c7a655b300296923a0687bbf17573231d207a10ace987f9cd3994fcd9d49e73bc8","dom_hash":"domhash6ef027b00afaf7f96c97a761f8491d11","first_seen":"2026-09-27T03:32:06.973812Z","last_seen":"2026-09-27T03:32:06.973812Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"feirao-oflcial.com/","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.65","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T03:32:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"feirao-oflcial.com","ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-09-25","domain_rank":0,"first_seen":"2026-09-27T00:42:20.406031Z","last_seen":"2026-09-27T00:42:20.406031Z","alert_count":28,"request_count":7,"received_data":66809,"sent_data":3825,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"feirao-oflcial.com/app/js/s4track.js","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"edd3bc4301d3d499bc6d05c125f5b066","sha1":"7bb0810377ac7b1c795410f09b13a3746f01c4cb","sha256":"9ff4f2ad3cddd56a758368fc2711dd71aa4dc9cb732e84d0fed0d3803b7e90b2","sha512":"18183925eb2f5c4eee218abf17c4bf429ac7f512ef8b05100ed65543350c7c86b2057868cac5ba159fb81390922e868dc9b25d75324d1f1f2bc69a3e01e38e32","ssdeep":"","tlshash":"17310fa765d651b105b27138465f22107633c26352daeee07eaca3d12f7cd2903f2ee8","size":1466,"data":"","first_seen":"2026-09-27T00:42:23.464636Z","last_seen":"2026-09-27T10:58:45.094675Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/index.html","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56c7c238af4ad633e3adb0ebc4dc2805","sha1":"49899df0713c1dbf3c90d9d198c7f028e7e0a113","sha256":"5319c52fc68654ce6eb089b2493a6d465aa6fbca01a3e3201a2089eaf95db27d","sha512":"7e11192fdf224144cc7f575c764681b2a54597ef0ed22c1995a68efb76c0518fae7085cfe6ffea3719ab6cb487d833b255b468fe660a8c10e3b7bbca20bc93d6","ssdeep":"768:9YSriWBSWQRIIiEIIibJ7DzFsNyhkWB+BtzsOk:xBSIIbIIkDzFn+Btzs7","tlshash":"c3d2936425b30039427360aa63bf22663530a20b751acac4be5dc7c11fcd995de77fd8","size":28727,"data":"","first_seen":"2026-09-27T00:42:23.471209Z","last_seen":"2026-09-27T10:58:45.110382Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/index.html","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"ca47538621e85e9f977b5723181cbbc1","sha1":"5d4b2a75fb973d3d0c41c5f450704167f6d0b352","sha256":"a7041db96c57dc29bb94b6d0980a2cee7ef744b3f842bb020c57a39ac05d67bf","sha512":"3e557940e46be32dc3cbf7bef5329367fe5ae09154979576146e83d2cbb6fe023727976b989d24f27afdcacef317875bb349a6384c110cc4bee2d561aaa1a345","ssdeep":"","tlshash":"2f700082280a82080288802000a00b22202a200c0ac0a20c8c2000a0820a8a820300b0","size":25,"data":"","first_seen":"2023-04-11T08:24:11Z","last_seen":"2026-09-27T09:40:48.430782Z","times_seen":2949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/js/iframe-safe.js","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7021a76e99a6ee0d02e6cb2932544c56","sha1":"89c91566fc4eebd285c49c08288e9126c322e387","sha256":"2df545fd1e5967adfc96e0b289e9d0c237881c464680b86be6f89b99f0796f29","sha512":"18d3f68f06d8978c68ea4b78424d65b338ce9ff7af7c805cea7552e21b67eb4f51be8e12202b264cabc6613a8678fd0f728a1b3df718933a020d569016ca33e5","ssdeep":"","tlshash":"1c21751f39b53161c0a370ba054f9040b0768187856bfe843aaecaa09f30c2c03ff9e9","size":1221,"data":"","first_seen":"2026-09-27T00:42:23.463448Z","last_seen":"2026-09-27T10:58:45.109397Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"feirao-oflcial.com/app/js/s4track.js","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feirao-oflcial.com/app/index.html","date":"2026-09-27T03:31:37.296Z","timestamp":1790479897296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET /app/js/s4track.js HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feirao-oflcial.com/app/index.html\r\nCookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 26958\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s4track.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 03:31:37 GMT\r\netag: W/\"edd3bc4301d3d499bc6d05c125f5b066\"\r\nlast-modified: Sat, 26 Sep 2026 20:02:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f28r2-1790479897301-7a0a2936963e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1466,"size_decoded":1220,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"edd3bc4301d3d499bc6d05c125f5b066","sha1":"7bb0810377ac7b1c795410f09b13a3746f01c4cb","sha256":"9ff4f2ad3cddd56a758368fc2711dd71aa4dc9cb732e84d0fed0d3803b7e90b2","sha512":"18183925eb2f5c4eee218abf17c4bf429ac7f512ef8b05100ed65543350c7c86b2057868cac5ba159fb81390922e868dc9b25d75324d1f1f2bc69a3e01e38e32","ssdeep":"","tlshash":"17310fa765d651b105b27138465f22107633c26352daeee07eaca3d12f7cd2903f2ee8","first_seen":"2026-09-27T00:42:23.464636Z","last_seen":"2026-09-27T10:58:45.094675Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/images/Q8FJx6h7cqrD.png","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feirao-oflcial.com/app/index.html","date":"2026-09-27T03:31:37.299Z","timestamp":1790479897299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET /app/images/Q8FJx6h7cqrD.png HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feirao-oflcial.com/app/index.html\r\nCookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26958\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Q8FJx6h7cqrD.png\"\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 03:31:37 GMT\r\netag: \"d5e0562dc1e34436537eb48993f4911a\"\r\nlast-modified: Sat, 26 Sep 2026 20:02:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m8f8p-1790479897304-620d4e0fc93d\r\ncontent-length: 8721\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8721,"size_decoded":9238,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit/color RGBA, non-interlaced","md5":"d5e0562dc1e34436537eb48993f4911a","sha1":"cdbdd787da0493b26a68837a248e5e4326cc6abe","sha256":"b2f095792c4ddc237caf310593e4833300761d7466682cc4dc99a08f9e8f57a1","sha512":"867046896490f4d7e46a5245dc63a2b9d1b3e94fd2cb71a94758e6decf41fd33808655d0506d05e21dbefdfffbd22a87cd953781fd3447a454a09479b3af6ddb","ssdeep":"192:hdgggggYXv8gbtQNiEbeFJxk6LeWwMWVsU/bUBb+iV13wvEgggggd:h5nQ0R6wMVzisvv","tlshash":"e4024af93696e106826c6b1e080c36305c68e471e23449cc5d77e6a739bce55f9c55cf","first_seen":"2026-06-24T01:56:03.984856Z","last_seen":"2026-09-27T10:58:45.097497Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/favicon.png","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feirao-oflcial.com/app/index.html","date":"2026-09-27T03:31:37.371Z","timestamp":1790479897371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feirao-oflcial.com/app/index.html\r\nCookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 41370\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.png\"\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 03:31:37 GMT\r\netag: \"54d72a5656d5b67869c0713f275ee389\"\r\nlast-modified: Sat, 26 Sep 2026 16:02:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7jxn4-1790479897376-f471b5b36c54\r\ncontent-length: 2593\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2593,"size_decoded":3105,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"54d72a5656d5b67869c0713f275ee389","sha1":"8b87d7180baf51fd10882ea8c0e899e02e0aad3b","sha256":"615805a503b07da152966b7c48e7b5bdc386bc40778423271f1a174b5fe00464","sha512":"9d96771c44b723e15068e91a17f8dce354f5dbd49c1713d4eb420e619d1fead00c3f69380c0592ad52d81b57e8fb3c8eb438d7c4e1bc4349e903994cbe49ed68","ssdeep":"","tlshash":"66510bc1a730b5aecac1ac301e10fd15b0b14bcb6ee2d6b86364d664088d5ea542be50","first_seen":"2026-09-27T00:42:23.467177Z","last_seen":"2026-09-27T10:58:45.101275Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/images/Design-sem-nome.webp","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feirao-oflcial.com/app/index.html","date":"2026-09-27T03:31:38.472Z","timestamp":1790479898472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET /app/images/Design-sem-nome.webp HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feirao-oflcial.com/app/index.html\r\nCookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 03:31:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9fmsm-1790479898478-9b012848fb63\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2169,"size_decoded":1419,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"bea0661d9189756419a5b37cb976044d","sha1":"72c2ee3d49cf0acf2d9f7413b255f728ca98ef4c","sha256":"e4f0aa160aec1466fd6e35ad997719bd632b2f26fea35c62ae386ce5282e15bf","sha512":"ed4921b4050f447755028933ba3ed7c2380185c722a32e684f120a795f63759aad8bf32b87f9a1fd0b8841c47c6b3e68671d226062f3f67f8e8c2b48a444c279","ssdeep":"","tlshash":"714162534d74056e46753e76b070b30880eada0ae662ee1df3bee0ea4bc1d858832761","first_seen":"2026-09-27T03:32:06.984033Z","last_seen":"2026-09-27T03:32:06.984033Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T03:31:36.845Z","timestamp":1790479896845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Sun, 27 Sep 2026 03:31:37 GMT\r\nlocation: /app/index.html\r\nserver: Vercel\r\nset-cookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n; Path=/; SameSite=Strict; Secure; HttpOnly\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7nq94-1790479896922-c7b2bfe37e6c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__vdpl","value":"dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"__vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n; Path=/; SameSite=Strict; Secure; HttpOnly"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T10:46:45.803059Z","times_seen":18686010,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/index.html","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T03:31:37.099Z","timestamp":1790479897099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET /app/index.html HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 73398\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 03:31:37 GMT\r\netag: W/\"08bd1b198b379c4a33bfe104efce87b8\"\r\nlast-modified: Sat, 26 Sep 2026 07:08:18 GMT\r\nserver: Vercel\r\nset-cookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n; Path=/; SameSite=Strict; Secure; HttpOnly\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7nq94-1790479897105-aaeef502b6c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__vdpl","value":"dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"__vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n; Path=/; SameSite=Strict; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47235,"size_decoded":12179,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (536)","md5":"0cb5fd474fd2c710db7c04e66aff5165","sha1":"b4138cadad2ad145c1827cf42bdf5b808ddf495c","sha256":"0a9b606a91f4ae8a95b8a148e931778989e09401a5ac44bfba8ad7e28293495f","sha512":"a7f62a931dd01ee602025e0b12d4f6fabbe24c2feba7da14747f88efd3f71f98b310f4b4fe780085b57eb89c56efa0828dfd2e4c09ce73f70ea3dbf8b18170cd","ssdeep":"768:Hsze4eYSriWBSWQRIIiEIIibJ7DzFsNyhkWB+BtzsOP:HszCBSIIbIIkDzFn+BtzsA","tlshash":"2e23c7aa55b300296923a0683bbf27573231d207a109ce987f9cd3994fc99d49d73fc8","first_seen":"2026-09-27T00:42:23.469963Z","last_seen":"2026-09-27T10:58:45.108212Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feirao-oflcial.com/app/js/iframe-safe.js","fqdn":"feirao-oflcial.com","domain":"feirao-oflcial.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feirao-oflcial.com/app/index.html","date":"2026-09-27T03:31:37.294Z","timestamp":1790479897294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feirao-oflcial.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 17:42:37 GMT","end":"Thu, 24 Dec 2026 17:42:36 GMT"},"fingerprint":{"sha1":"4F:CC:C8:89:7D:EE:73:6F:44:4F:71:C2:E9:B4:F5:7B:CE:8E:64:21","sha256":"AF:57:8E:AF:BA:D8:B0:C2:09:F3:C0:81:9D:C0:E2:A4:78:57:20:6F:3F:EA:E6:56:85:6E:E3:F4:1A:39:C4:5D"}}},"request":{"raw":"GET /app/js/iframe-safe.js HTTP/1.1\r\nHost: feirao-oflcial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feirao-oflcial.com/app/index.html\r\nCookie: __vdpl=dpl_49GtxVHiECaNTqQEvq3q4z6JeB6n\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 26958\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"iframe-safe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 03:31:37 GMT\r\netag: W/\"7021a76e99a6ee0d02e6cb2932544c56\"\r\nlast-modified: Sat, 26 Sep 2026 20:02:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n4gkj-1790479897299-682d900284b7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1221,"size_decoded":1091,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7021a76e99a6ee0d02e6cb2932544c56","sha1":"89c91566fc4eebd285c49c08288e9126c322e387","sha256":"2df545fd1e5967adfc96e0b289e9d0c237881c464680b86be6f89b99f0796f29","sha512":"18d3f68f06d8978c68ea4b78424d65b338ce9ff7af7c805cea7552e21b67eb4f51be8e12202b264cabc6613a8678fd0f728a1b3df718933a020d569016ca33e5","ssdeep":"","tlshash":"1c21751f39b53161c0a370ba054f9040b0768187856bfe843aaecaa09f30c2c03ff9e9","first_seen":"2026-09-27T00:42:23.463448Z","last_seen":"2026-09-27T10:58:45.109397Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"feirao-oflcial.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"feirao-oflcial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}