{"report_id":"7c4db192-b17a-4de2-a7e5-49e8ae692da4","version":6,"status":"done","tags":[],"date":"2026-04-04T12:24:52Z","url":{"schema":"http","addr":"finance-estadao.sbs","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"finance-estadao.sbs/","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"title":"Início | Estadão Finanças","dom":{"size":19056,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7546151094a60564bdd44cb85bb6136c","sha1":"c5fde1c63b88d133eaa3095099e3f9e9ad6ec346","sha256":"047c0bbb664ae0c275da03f28ca801e2a6cbd4197399628fce3728137591cbf3","sha512":"f64fc1dafcb518bf679b625684a7c55ff6c65611b6885edee6d8d0b4b4d55706ba751a785c49a7dd91cbaf9a26eff17200d7d4a6afc6c39a433c2930d43f22a6","ssdeep":"384:jr5qcq/FyM/NLPWlKnodjJaqXZlpmDycPjVA/HiszFX:MyM/F6nJbXZ2Tb6/HhzFX","tlshash":"7e82a532adf1142701a383d57750af1b69d1c647c62b4b1572fe8bca8fc2d52c96361e","dom_hash":"domhashd4ce5c3c4d3ff952f71d0313fd92ed30","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"finance-estadao.sbs","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:24:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":3,"received_data":397581,"sent_data":1491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"finance-estadao.sbs","ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-31","domain_rank":0,"first_seen":"2026-04-04T12:24:52.933319Z","last_seen":"2026-04-04T12:24:52.933319Z","alert_count":9,"request_count":9,"received_data":37786,"sent_data":4060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"finance-estadao.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/js/main.js","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b9148f39ec5f36cafc33d380b478a7e","sha1":"c1dca69347b01100641fcf9a4723739988fb1479","sha256":"c8dd57ec6171293f623595d62867b64052ba8a8dbcaac0ae7538126e77c08aa7","sha512":"ab6949504fe6ad74e770cf6ece32d29e1d0a93b9508a578318716ba7430c537c3330a08bce5c6ea3c184499765f44ba537009155e62f47b81603b29260cffffd","ssdeep":"96:Xe/4sWuCVOtE6XWiwpOIOIcrwJ+DAnUU+7XnHgZpSH:cW9O6oWixbUJA40HgTY","tlshash":"c0a1113a699600b53db3e07ea7df9185b5a534037c48da11b82cb4062fdcec21979bf9","size":5037,"data":"","first_seen":"2026-04-04T12:24:55.642343Z","last_seen":"2026-04-04T12:24:55.642343Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://finance-estadao.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3496981\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5%2FEP7Y96vUZ2OU3PyK9uZzZ2LYMWpnHiqd5n%2FlJFcDDiGwAELsEAnHj5aq8P%2FhY3%2Fm52Jsyak3sI1jpSjMvBypxLDsPqgagpmPWZUkBwR4Ksh7sRZYp7AcIcdzuznklBoM%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704a532d925693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:28:08.672412Z","times_seen":18004,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":5,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/img/hero.svg","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /img/hero.svg HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3holW9jPymFqhSWezEIN5pHdNuQl3oqCx2SCi%2Ba%2B2%2BRTuDriyY2bFanzUSIKas37mGVfkr%2Fy26j7E2z1kakpK0bnd59oH8dwPgjNqbwq92xgmAwRJB8qBADYP88mSMC97cPo9Ws\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-658\"\r\ncf-ray: 9e704a531f93a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c1aee3fbb8097f7791a569e1fc5449b","sha1":"33d4428852c85987713d98c51c2c3c4b7862afa4","sha256":"862b38c52ffdc354bae4e8999e5aa76db44581426090df0dd2a376e7dcff334b","sha512":"10d55c9fcf723ed860d5bf3d5932eb79688726a78bffea97b88db10e7783f8e3ac760b87d4e442e3effb021163b16d2cd035d605e66b4fa6e79697d2b732679a","ssdeep":"","tlshash":"1631c0b1d2895416e3054f0d6308ba517787e0c79b56ca10f5981b5eab818eb9cda3dc","first_seen":"2026-04-04T12:24:55.635833Z","last_seen":"2026-04-04T12:24:55.635833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/img/service-1.svg","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /img/service-1.svg HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKySgqk%2Bz3RjcP%2Fl3vmbCAASwoGz%2BlqRKzLErkmHWO4BA4sb3kujIQTnUqnwYyPjEgIfbVEjXXYr93usXEe4fSXIPQqi%2FxaAdsqclOpPH6b8tex09LMjeWKWUpT2Y%2FtnrfKZ9%2FFx\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-261\"\r\ncf-ray: 9e704a531f95a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"448ea740fe0f65409945c8623f2877bf","sha1":"daa8350abc5357276ce93b1eeec76208f19b2209","sha256":"e184e45f38840080110043e6a5375c4dc34ea0e775399535290c4b900441433c","sha512":"362302a64613b51e84df72e82d92dac0e368a0ffb9358e77d3ffec1888b23a70e098e581f1137e7e876ba3b50e8c2cac270745ca3194a0847e757b87a97b6184","ssdeep":"","tlshash":"40f0ace9e3880419e6048f8d6b067b69334af0ce4a59c554f4450a1adac5cd7e9d62ec","first_seen":"2026-04-04T12:24:55.636759Z","last_seen":"2026-04-04T12:24:55.636759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/img/service-3.svg","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /img/service-3.svg HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boBfy6suQBDHhF%2FDV%2Bhb2K67qaUPJJKdoHSG3DjaBDVW1vQgUBVVKO3hdVcKYnSeh10XJI92drU9uEZky%2FiJOBZMv8%2BJUVlS5SfLgs4P4iNQSpGDHmbotyx4cna1Nu1rWY9POAZi\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-25f\"\r\ncf-ray: 9e704a531f96a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2429381e1369175f846e584c5e8f41e","sha1":"be9644b86adf31e7733b8ebd5d0b56f32d19e2b0","sha256":"30151d71344894112b2f86b4a04ee9d71c3c0b7ee36c58f81899758e561ae52e","sha512":"8918d4279d5b1edbb020791a803a8d87f88981b143edb754987aaa29135bdacf1e4ac2a280650fa7c1292b917a1df0c2bfcc2e1a529b46d23792e6994324370f","ssdeep":"","tlshash":"c4f00cd9a3c80408e6048f8e7b067b29334af0ce4a59c140f0010a0acac5cd7b8c22fc","first_seen":"2026-04-04T12:24:55.637643Z","last_seen":"2026-04-04T12:24:55.637643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:30.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://finance-estadao.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2509362\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQpHBvpO4X1BMwoDH0SLZth4bsRMgfMbDPZ9LdCHL8ZOzzzI3Fu3Kgb0XBpn2LtkFl46S1ibFSOnxdcY9nh1LCUwjDxJqrLnIfAVBaqIggyn6EY%2B8Q089Sa19iX8I87Jwb0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704a547ebc5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:05:33.986787Z","times_seen":21876,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/favicon.svg","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:30.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RS04Mj21vg%2FDOyeZtNWHjfyd0XrP9oug2hlGArDE7xZ8Biuiu0D8AWxcUgMkRIfZgMz3Z3mna7V6bExBf%2BWuOpXY%2Fkh19C88XZUw9nuR3NH7eUSFQdpMS%2BcAF6W%2B%2BENsoUjbu2Oh\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-100\"\r\ncf-ray: 9e704a54cfbfa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d96592f3ffde1a80cf74facc44197914","sha1":"f73b89cfb454e34a12d0dc1857eb929015d6fc61","sha256":"2d33d449879432c788b58f11fa6de76d49f07a7f58f92eb33f379c29f458009f","sha512":"bdb49067f24adf8701706fb443099626489eda1408c9577b7df72d0341b32d66cfa8b40930cb6a5aa795e246a7db4b239c7832a971b30ee03fbefdee7a2f617f","ssdeep":"","tlshash":"64d09759f0988b04db088e03bb1a381d324ef8ca9dc2c928f1d0021a59ca8b369c534d","first_seen":"2026-04-04T12:24:55.639205Z","last_seen":"2026-04-04T12:24:55.639205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:24:29.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWceVcYSnsd6m3GMrjWCKD79kWOA3dSR38j%2FwxumDqaqUV6O%2BaCkvM03lpfLJJtq0tve%2FP3yV00Zv%2FitvK6Y%2FCouPe5p4Z5CaRNNhhJv4I2MP6ubb3z0gFCTySRWhlEi3GX%2F62I3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e704a51785a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19322,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316)","md5":"235931d5e63543ab03e7063c2ac75f64","sha1":"97064a26de0819e109c96c06c7e8ea61e88ed544","sha256":"04d9b4e8ef3f15026ba1b60669e78b235ee2fcb95c88d2cf896f6f49d52b315e","sha512":"e1c87488d971fd55e193c211aeded890ae778c380315b82eff1b8a5fcda90d389361e3e2adbd76bb899a41cb8e871492b1d55a8e6c023943099a5cdcce8fb758","ssdeep":"384:Rr5qcq/FyM/hLPWlKnodjJJckZlpmDycPjVA/HisGgWVFF:uyM/B6nJOkZ2Tb6/Hh4FF","tlshash":"ef82a532adf1242701a383c67790af1b69d1d647c62b4b1572fe8bc98fc2d52c96361e","first_seen":"2026-04-04T12:24:55.640076Z","last_seen":"2026-04-04T12:24:55.640076Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":32,"dns":11,"connect":1,"send":0,"wait":83,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/img/service-2.svg","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /img/service-2.svg HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoDCcZ9189tESkRugRRq16fId4DLzaZ%2BTRQzuQQaJVDI4WQF6i3Ly8%2FyzKQN9gU48WnEqXX036mgA9T7GkqfBBnwY4Odp3yw27D2Gg%2Fmbdq%2FKvDBKzpzzWBL3SX8Sw9MSzHGWUar\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-260\"\r\ncf-ray: 9e704a531f92a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d887cebb8b5625e5cb12b8598c65690","sha1":"f603607680ce72bd5512c1d6d54098e6edb53f09","sha256":"65a9b00a07a34ec3566a44e1fc37b47f3d012cecab01680f6e4279befafee626","sha512":"20623f3f6c0e8a3bf7d10fd23e3f29e21403c8240ec4ef888bb3c946a6fdfa03d0f9a1e5535725b00d0fc3488f39351e3137aa1d80d3d4ec09d9580831d0c2f1","ssdeep":"","tlshash":"1ef00cdae388040ce2448f8d6b067b293347f0ce4f59c450f0010b0adac5cc7a8d22ec","first_seen":"2026-04-04T12:24:55.640943Z","last_seen":"2026-04-04T12:24:55.640943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 04 Apr 2026 13:12:29 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lv6UdbK9q0i%2FbX5Rogr5PbNAJofZ%2BNXwpJcLScuQ4%2BzFH8gEyECybEYzDL9tJ1UyLDXiK5UAoo9twvy7ZgpybmFEQlAIS8H2V7FUOnwnvXCRfU%2BrC0buoowhC6B%2BpwZpWCwOPzp6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:29 GMT\r\ncf-ray: 9e704a531f94a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://finance-estadao.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2509361\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JE60mipf8trWhW%2BPZAvVfTihJSp5mjD00DbXt5IUTPL8iaunKfA1gV562dqfftYUvhDp3cZLREqWaC0J9p0hLOBnwX%2Fd9Bde6Q0KViwDF8EJnuirFYVzznD6rO1PeLwrJ6o%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704a533d995693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:05:33.986787Z","times_seen":21876,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":5,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/js/main.js","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CigZGoeBZmNYN6BGPB57iNnzt4%2BlWA7O66bOVX9c7Octdcjx23H4gBj%2B3Yg0rn3M5rNnHBTeRXXkhDouE9PmWbFq0%2BEy1zH%2B%2FXl8kvHSIoKi0zUzVdWgEGY8Ymo7XaVblbWDYp1y\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-13ad\"\r\ncf-ray: 9e704a532f97a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5037,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4b9148f39ec5f36cafc33d380b478a7e","sha1":"c1dca69347b01100641fcf9a4723739988fb1479","sha256":"c8dd57ec6171293f623595d62867b64052ba8a8dbcaac0ae7538126e77c08aa7","sha512":"ab6949504fe6ad74e770cf6ece32d29e1d0a93b9508a578318716ba7430c537c3330a08bce5c6ea3c184499765f44ba537009155e62f47b81603b29260cffffd","ssdeep":"96:Xe/4sWuCVOtE6XWiwpOIOIcrwJ+DAnUU+7XnHgZpSH:cW9O6oWixbUJA40HgTY","tlshash":"c0a1113a699600b53db3e07ea7df9185b5a534037c48da11b82cb4062fdcec21979bf9","first_seen":"2026-04-04T12:24:55.642343Z","last_seen":"2026-04-04T12:24:55.642343Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.sbs/img/sprite.svg","fqdn":"finance-estadao.sbs","domain":"finance-estadao.sbs","tld":"sbs"},"ip":{"addr":"172.67.129.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://finance-estadao.sbs/","date":"2026-04-04T12:24:29.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.sbs","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:55:19 GMT","end":"Mon, 29 Jun 2026 14:55:18 GMT"},"fingerprint":{"sha1":"A1:DC:73:30:B6:FC:59:13:0D:CB:4F:5D:C6:DB:5D:B8:61:38:EA:0C","sha256":"B6:1E:98:B7:94:4E:ED:E0:E4:53:C5:DA:3E:3D:75:0C:82:52:21:69:B9:90:9C:C7:BF:A0:7F:5F:B2:71:DC:82"}}},"request":{"raw":"GET /img/sprite.svg HTTP/1.1\r\nHost: finance-estadao.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:30 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKJ%2BRvv5CYY%2BUWMbOrTQJi1Me%2BPxprJGD3ZRptZkUFXv0I4wi9yZuke24IRM3tassekXuIuyhWV1YyKXeLco3CQTJ%2Bm8zVmPZQok2RDAYg2oMLt%2FDHVW24a51ScOF%2FHv%2Fu2S4o2j\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-984\"\r\ncf-ray: 9e704a532f98a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ae512e66f45ceb222c76a8657636de7","sha1":"54330e79a3d49fb65a8c2fb756545daaa2a0bfc3","sha256":"ad5658d700db406c8282fbb099e013d7c6d687e38a8e5b19954714419d560d92","sha512":"bd5727575a59d00a3f9d43d8eaadd96270dcb6f51004ef6d45d40020fa65f38ce9f32a5bb821bad392725f3934cce740cc7ea0a6a3438191aabfef6ba5778f5b","ssdeep":"","tlshash":"77419d6560ec581cfb02070a9f1d70a6316f72cf0bce496430541cb19f1a29f69bb2e8","first_seen":"2026-04-04T12:24:55.643288Z","last_seen":"2026-04-04T12:24:55.643288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}