{"report_id":"7d7d9e74-d547-42e8-9fe9-987b5f8cd644","version":0,"status":"done","tags":[],"date":"2026-09-29T05:19:20Z","url":{"schema":"http","addr":"internetbanking.caixa.suporte-oficial.com/","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"title":"Internet Banking CAIXA","dom":{"size":18817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8237)","md5":"bab74af4ea206e3c8bb820777975d163","sha1":"343fc92412e803d1b810d011f642e8aa79e03b14","sha256":"14282ed9fa46dfc8ac8af52bb675b90f64e214dd93d66bd05a09dd5aee894057","sha512":"484ac16b4275f2feb35fac885cc2f0c884f08c4343a5b9cfd4d252433d753744d12326f403a52865cefd46ad9f6994208e5184f8146ca4d5670c204e18da1a1e","ssdeep":"384:yTUqn6t2KYtj4eY6LPalFS0+gaMBIX0GaGCsY2NjaNmFfXQ:yTFKY54eY6eIhCxkaNmFY","tlshash":"da821891d314aa3f9353c2ecba94e688628590b3ea028de5f4fd137523dae84e506f51","dom_hash":"domhash47dbabe638431c3419d635fae08dad05","first_seen":"2026-09-29T05:07:04.674923Z","last_seen":"2026-09-29T05:19:24.086356Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"internetbanking.caixa.suporte-oficial.com/","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T05:19:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"internetbanking.caixa.suporte-oficial.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-09-28","domain_rank":0,"first_seen":"2026-09-29T05:07:02.567713Z","last_seen":"2026-09-29T05:07:02.567713Z","alert_count":30,"request_count":10,"received_data":777830,"sent_data":8351,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-09-26T15:09:36.230023Z","alert_count":0,"request_count":1,"received_data":134518,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/index-De7GXZ9h.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3964ad9b65913b96061066a3f711ba97","sha1":"2c8431ddaa7d2e20090fbc9d333345e3183308b8","sha256":"dcbd14ad4eea37e82161e1d2e2e1a450a774c16da07e91f8ffc1aaec3dfc84e0","sha512":"745fc977b74438460faac529ab2b2355b714d57771b1101106f10da65b71cef9a5b7770cd251927878aee397b70d2de936d974de179c35d96dfb766c5a390e6c","ssdeep":"6144:AZdngDXZxn8FTM+SxwkNsQbhLy7uawEq8sPUNJF:WY4kN6ZkUNJF","tlshash":"6b743ae832a5b5221bd746b2407f1506b37528672c0d4820b224fdef76b188995fbff9","size":345192,"data":"","first_seen":"2026-09-29T00:33:43.362095Z","last_seen":"2026-09-29T05:19:24.088943Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/CaixaLayout-B_gyxXC_.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a66bc79e4378a6bf91567d6adf0f2f92","sha1":"81705c5f4527797ef72025cbd749a82903a85367","sha256":"b3f8f43c17a20d1089a49e0515f8e3903fa92bdf09582573439a594e660f9858","sha512":"b284a89dfa3da47f017bb2f3419b647c634607f4d2da9f37375165007aa2345300a8ecca811f09284cca2113e59bc6e1ccd15418b1409b46aeb2bbde5d6e3233","ssdeep":"384:o2VVTL6OmrnM+xWOItqpEEfkUblyUeitiW27txcBh8TJJsYQXvKQ+jmehb:7NGr/WrteblyUK3o88YQXqiqb","tlshash":"77f21a537112396e27bfd157e15cea8dd6226701c60e8b08f2420f3197b9be59ad2f0e","size":35460,"data":"","first_seen":"2026-09-29T00:33:43.364013Z","last_seen":"2026-09-29T05:19:24.090087Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/routes-C-yb6Lce.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c293298884a5be58f79b4ed1b0783734","sha1":"156f2ca22c9a1429191c778b174f11f0bdbcbc89","sha256":"0a5f19adb1dfbc6f220147dc37d8fdaa39c0a0316a858ed4677292c0553de300","sha512":"4fd47fc359c93d4ac40094be2fac4cf1d94b432ae93ff4db9eb6bd3886e6e052a2e125932c0e1f290751c60409400bee12a12d893d8f5bfd5ca950787ba89471","ssdeep":"768:cU8+HqtEEihmhhLq64YKLnQkI9OMbX3QPI0gRI:k+HOiJ64YKrnXMbnQPiRI","tlshash":"d01319d9729179b4d79fc4b5107fc11dba2b3a88e40e4428f4709d4439a88c4eba7fda","size":45518,"data":"","first_seen":"2026-09-29T00:33:43.348178Z","last_seen":"2026-09-29T05:19:24.089556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/~flock.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-09-29T15:42:06.803674Z","times_seen":17590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T05:18:49.964Z","timestamp":1790659129964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3; HttpOnly; SameSite=None; Secure; Path=/; Domain=internetbanking.caixa.suporte-oficial.com; Expires=Tue, 29 Sep 2026 05:48:50 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a428878a6d6e0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3","quoted":false,"path":"/","domain":"internetbanking.caixa.suporte-oficial.com","expires":"2026-09-29T05:48:50Z","raw_expires":"Tue, 29 Sep 2026 05:48:50 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3; HttpOnly; SameSite=None; Secure; Path=/; Domain=internetbanking.caixa.suporte-oficial.com; Expires=Tue, 29 Sep 2026 05:48:50 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20258,"size_decoded":8577,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"6a0ad6a3527782b35588f7566b99af98","sha1":"3077d7bfe477b951fb74eb07418bc5ae9bd1b0fd","sha256":"202530e8c18d8217626adbe2de3a4c829a0e2b481968f1e925fb9afb99672de8","sha512":"68f5194e60fd4dfbbd76b0e491ae01f58796eeffe22a0d175916ff885d822670fcda7037934b6c3cd2bde0c6205cc9f43165ef6ffe1bbc67ce7cb8289be3550b","ssdeep":"384:cTUqc6i2KYtj4KY6LPalFS0+gaMBIX0GaGC15MS4jP2NjaNHqXQ:cTdKY54KY6eIhCHMS4TkaNHJ","tlshash":"26922891d314aa3f9363c1fcba90e688228550b3f6028de9f4fd167523dae88e516f51","first_seen":"2026-09-29T05:19:24.087595Z","last_seen":"2026-09-29T05:19:24.087595Z","times_seen":1,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":656,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/index-De7GXZ9h.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:50.815Z","timestamp":1790659130815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /assets/index-De7GXZ9h.js HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a428878f9fe70883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345192,"size_decoded":107664,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43848)","md5":"3964ad9b65913b96061066a3f711ba97","sha1":"2c8431ddaa7d2e20090fbc9d333345e3183308b8","sha256":"dcbd14ad4eea37e82161e1d2e2e1a450a774c16da07e91f8ffc1aaec3dfc84e0","sha512":"745fc977b74438460faac529ab2b2355b714d57771b1101106f10da65b71cef9a5b7770cd251927878aee397b70d2de936d974de179c35d96dfb766c5a390e6c","ssdeep":"6144:AZdngDXZxn8FTM+SxwkNsQbhLy7uawEq8sPUNJF:WY4kN6ZkUNJF","tlshash":"6b743ae832a5b5221bd746b2407f1506b37528672c0d4820b224fdef76b188995fbff9","first_seen":"2026-09-29T00:33:43.362095Z","last_seen":"2026-09-29T05:19:24.088943Z","times_seen":4,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/routes-C-yb6Lce.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:50.816Z","timestamp":1790659130816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /assets/routes-C-yb6Lce.js HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a428878f9feb0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45518,"size_decoded":15803,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22957)","md5":"c293298884a5be58f79b4ed1b0783734","sha1":"156f2ca22c9a1429191c778b174f11f0bdbcbc89","sha256":"0a5f19adb1dfbc6f220147dc37d8fdaa39c0a0316a858ed4677292c0553de300","sha512":"4fd47fc359c93d4ac40094be2fac4cf1d94b432ae93ff4db9eb6bd3886e6e052a2e125932c0e1f290751c60409400bee12a12d893d8f5bfd5ca950787ba89471","ssdeep":"768:cU8+HqtEEihmhhLq64YKLnQkI9OMbX3QPI0gRI:k+HOiJ64YKrnXMbnQPiRI","tlshash":"d01319d9729179b4d79fc4b5107fc11dba2b3a88e40e4428f4709d4439a88c4eba7fda","first_seen":"2026-09-29T00:33:43.348178Z","last_seen":"2026-09-29T05:19:24.089556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/CaixaLayout-B_gyxXC_.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:50.818Z","timestamp":1790659130818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /assets/CaixaLayout-B_gyxXC_.js HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a428878f9ff50883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35460,"size_decoded":12277,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35455), with no line terminators","md5":"a66bc79e4378a6bf91567d6adf0f2f92","sha1":"81705c5f4527797ef72025cbd749a82903a85367","sha256":"b3f8f43c17a20d1089a49e0515f8e3903fa92bdf09582573439a594e660f9858","sha512":"b284a89dfa3da47f017bb2f3419b647c634607f4d2da9f37375165007aa2345300a8ecca811f09284cca2113e59bc6e1ccd15418b1409b46aeb2bbde5d6e3233","ssdeep":"384:o2VVTL6OmrnM+xWOItqpEEfkUblyUeitiW27txcBh8TJJsYQXvKQ+jmehb:7NGr/WrteblyUK3o88YQXqiqb","tlshash":"77f21a537112396e27bfd157e15cea8dd6226701c60e8b08f2420f3197b9be59ad2f0e","first_seen":"2026-09-29T00:33:43.364013Z","last_seen":"2026-09-29T05:19:24.090087Z","times_seen":4,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/__l5e/assets-v1/ad70b6e4-0b83-4c0e-99a0-93054b12695d/21092026_103030_img3.jpg","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:51.004Z","timestamp":1790659131004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /__l5e/assets-v1/ad70b6e4-0b83-4c0e-99a0-93054b12695d/21092026_103030_img3.jpg HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 223689\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0ede1b3fe19c196b4f438ff6387cacbe\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a4288790ca3e0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223689,"size_decoded":224256,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1282x408, components 3","md5":"0ede1b3fe19c196b4f438ff6387cacbe","sha1":"8a7755229cf369a50c9276d699e1a49f1a61ff5f","sha256":"1a9a1d7e05b8497e52e27f86d59a0fbba020721dd25603b0496794c1f2697fdc","sha512":"a0138189b8465101beb021e2bd65355b6064513fa57ad7723e815c4da78d5fb7887b013f0b62b0c5d0af7311dc4f87238e1b67c08de1e7b97e503316bf5fcef8","ssdeep":"3072:w3RfhtzRyRTuM4U2MKopuCxQpigW+2/vNqmG2nghlMw2uj5337m7EqN8/fa:+Rnzwp4Odz6ivdA2ghlMal7ZqEfa","tlshash":"b024124cfd47805bf6c1e3ed39e1fa323aa06ba59157e0d6771ca3e4e09488e26d04d6","first_seen":"2026-09-29T00:33:43.355062Z","last_seen":"2026-09-29T05:19:24.090603Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:51.249Z","timestamp":1790659131249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:56:33 GMT","end":"Sun, 08 Nov 2026 02:56:28 GMT"},"fingerprint":{"sha1":"C3:AE:E5:33:6D:64:3B:B2:73:42:48:B8:3D:98:17:78:BA:EA:83:BB","sha256":"F7:28:A2:71:B0:DE:C3:83:85:50:8C:75:20:15:17:F0:1A:C4:C8:F8:07:12:71:A1:EF:5C:56:C5:89:05:D9:19"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nOrigin: https://internetbanking.caixa.suporte-oficial.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=teF1tLHV_fw47bLXWF.5smLZ0SUHrfT5xLaov48K_k4-1790659131.2676923-1.0.1.1-numcEyJNG3Zp7e3rKJBFUPARUeDymWGn8dd3JhNjigxChC.RFQ.CK3eQYwkFuTYJ4FGtCHcx5_iPwBWqx1SQiKT68SFfV6ozz5JW.4MuITAFz6gQm.Hyb4YKjHHKtS2W; HttpOnly; SameSite=None; Secure; Path=/; Domain=gpteng.co; Expires=Tue, 29 Sep 2026 05:48:51 GMT\r\nserver: cloudflare\r\nage: 2537\r\nexpires: Tue, 29 Sep 2026 09:18:51 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a428879269488be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"teF1tLHV_fw47bLXWF.5smLZ0SUHrfT5xLaov48K_k4-1790659131.2676923-1.0.1.1-numcEyJNG3Zp7e3rKJBFUPARUeDymWGn8dd3JhNjigxChC.RFQ.CK3eQYwkFuTYJ4FGtCHcx5_iPwBWqx1SQiKT68SFfV6ozz5JW.4MuITAFz6gQm.Hyb4YKjHHKtS2W","quoted":false,"path":"/","domain":"gpteng.co","expires":"2026-09-29T05:48:51Z","raw_expires":"Tue, 29 Sep 2026 05:48:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=teF1tLHV_fw47bLXWF.5smLZ0SUHrfT5xLaov48K_k4-1790659131.2676923-1.0.1.1-numcEyJNG3Zp7e3rKJBFUPARUeDymWGn8dd3JhNjigxChC.RFQ.CK3eQYwkFuTYJ4FGtCHcx5_iPwBWqx1SQiKT68SFfV6ozz5JW.4MuITAFz6gQm.Hyb4YKjHHKtS2W; HttpOnly; SameSite=None; Secure; Path=/; Domain=gpteng.co; Expires=Tue, 29 Sep 2026 05:48:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":133760,"size_decoded":134518,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-09-29T05:32:53.001807Z","times_seen":2206,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":11,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/favicon.png","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:51.303Z","timestamp":1790659131303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3028\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263931.8NsOupHqziPYW7HdqLB5W3Jpa85m4L87fCWCljz9Nac\r\nserver: cloudflare\r\ncf-ray: a4288792adfc0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3028,"size_decoded":3481,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"52824be4e1c53d49a1dddeedb6a0a3f1","sha1":"1cf43e09e965403b5ca3d72451cf0c92e6b034c3","sha256":"1a7507a32f111463403b1ee368c54bb745394b3c233c9b0820b0cff2e41d8b50","sha512":"3c3503c500f5b38c27d0d5956d65554acef90a91f9f1dfc7710519969a294ff5f37edc988b0926b9eebee892b3bc2e8cfc309d00f0cafc5588b97ca0106dbe96","ssdeep":"","tlshash":"f751497387cfbee2288841ed99367055abb00e6f074a647884d43b522d38176f39c3b5","first_seen":"2026-09-29T00:33:43.357615Z","last_seen":"2026-09-29T05:19:24.091641Z","times_seen":4,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/~api/analytics","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:51.345Z","timestamp":1790659131345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nContent-Type: application/json\r\nContent-Length: 362\r\nOrigin: https://internetbanking.caixa.suporte-oficial.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3; session-id=5530e287-f044-4b5f-90ac-df72c9bbd17f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":362,"data":"{\"timestamp\":\"2026-09-29T05:18:51.342Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"5530e287-f044-4b5f-90ac-df72c9bbd17f\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://internetbanking.caixa.suporte-oficial.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 29 Sep 2026 05:18:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a4288792ee670883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-09-29T15:20:02.054247Z","times_seen":7373,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/assets/styles-DC1-UTYQ.css","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:50.814Z","timestamp":1790659130814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /assets/styles-DC1-UTYQ.css HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a428878f9fe40883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75851,"size_decoded":13541,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"cb860acf9b8d811202e35acc949ca557","sha1":"2fa0f469bae7b24c2206849c9e8a0f4a3b71d23d","sha256":"3526f8c43d4113696e81bf066b8af4c5b632bd871f3cd0c0d252e24f0eb72ed7","sha512":"f298479704d2319e112c6f679b01bffa85ae9e0dfe529f48c83e7dfdef9e3cd4aebace823cc3ccb271bd544da8a3149fecb5d218e93453756a6bfdfaa0f74903","ssdeep":"1536:nz7yTWh+Q9hrykXbw1v8fJfUDCaNSsMq+WDhXX78TqXpd3988R988q:z7yTWh+QDryCw1v8fpUDBMq+WDhYGXI","tlshash":"1a73f790b229d53f7c33a4f5938cb89c911ab0c0dd7546e9fa17a12256c3bf2ad7b214","first_seen":"2026-09-29T00:33:43.360187Z","last_seen":"2026-09-29T05:19:24.092692Z","times_seen":4,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/~flock.js","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:50.820Z","timestamp":1790659130820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a428878faffd0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-09-29T15:42:06.803674Z","times_seen":17590,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"internetbanking.caixa.suporte-oficial.com/__l5e/assets-v1/4c9e7494-b944-4cc7-9d2c-238a483118e7/caixa-logo-white.png","fqdn":"internetbanking.caixa.suporte-oficial.com","domain":"suporte-oficial.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://internetbanking.caixa.suporte-oficial.com/","date":"2026-09-29T05:18:50.827Z","timestamp":1790659130827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"internetbanking.caixa.suporte-oficial.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 19:22:16 GMT","end":"Sun, 27 Dec 2026 20:22:12 GMT"},"fingerprint":{"sha1":"FD:8F:4C:EE:9F:90:05:F6:27:78:C1:98:76:9B:9C:03:65:3A:BE:F0","sha256":"F2:66:BF:27:8A:24:A1:E6:F6:70:43:C2:08:8C:F4:8C:7B:62:CE:85:62:D6:E2:33:10:1B:10:4B:3B:AA:74:39"}}},"request":{"raw":"GET /__l5e/assets-v1/4c9e7494-b944-4cc7-9d2c-238a483118e7/caixa-logo-white.png HTTP/1.1\r\nHost: internetbanking.caixa.suporte-oficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://internetbanking.caixa.suporte-oficial.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3aa54e02-f0ff-4f3a-a977-429695b0c685.1791263930.djms9hIqe8y-3CogAV8prCRdke3ZWt8iYX3lKjUjnc8; __cf_bm=bB35QAfpfAOx7Q.35umbixWiEYGimUi_CMNo4TZnP4E-1790659129.985474-1.0.1.1-6QCjA5bG02OvE0o9ermb8h9z3yCCBFMZqn52AqqPob7n6JITuiCBuLQEqQMwxLAwfqQWlvFD7wAtqQmV9MhtLD1ACK4sL7I5fwXdSJH8jbC1XJdHiXvUXgjz2Ul08aM3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 05:18:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 2233\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"49f579caa922876d52930c7f30fcef20\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a428878fa80a0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2233,"size_decoded":2797,"mime_type":"image/png","magic":"PNG image data, 116 x 26, 8-bit/color RGBA, non-interlaced","md5":"49f579caa922876d52930c7f30fcef20","sha1":"acb5d5d8d823bf3ffc66d89d11605f6ae3781126","sha256":"8ec13d5a45f03497965767881ab5c837d6c7dc58512349e9641054c975d2ea5e","sha512":"1e23721d8e393ba9a65b9b45bb5389288603a23897f1ce44a38f22e6c51aa971d6d21cbac2e776447110059a3d85e8746435e3aefa31aeca8a98564c224fa1f0","ssdeep":"","tlshash":"d1414b2b48cbff5b30a10d4f2902db250b50c9245d528a2d8d2da609a017fdcf54df05","first_seen":"2026-09-29T00:33:43.35237Z","last_seen":"2026-09-29T05:19:24.093786Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"internetbanking.caixa.suporte-oficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}