{"report_id":"8577bf30-6059-4bbc-b23e-9c59fa1a26b6","version":6,"status":"done","tags":[],"date":"2026-04-02T18:28:34Z","url":{"schema":"http","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"172.67.199.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"title":"Haddad Organização – Presente em todos os momentos","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"172.67.199.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T18:28:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":17,"received_data":485671,"sent_data":8362,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-29T22:38:18.41371Z","alert_count":0,"request_count":8,"received_data":64126,"sent_data":4838,"comment":"","tags":null,"fingerprints":null},{"fqdn":"haddadorganizacao.com.br","ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-15","domain_rank":2393686,"first_seen":"2026-04-02T18:28:40.029314Z","last_seen":"2026-04-02T18:28:40.029314Z","alert_count":144,"request_count":48,"received_data":4427947,"sent_data":23766,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"MailChimp for WordPress:4.12.1","description":"MailChimp for WordPress is an email marketing plugin that enables you to build subscriber lists.","website":"https://www.mc4wp.com","common_platform_enumeration":"","icon":"MailChimp for WordPress.png","categories":["WordPress plugins","Marketing automation"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Slick:1.7.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"WordPress:6.5.8","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery:2.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.17.47","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Contact Form 7:5.9.8","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-29T22:42:45.780712Z","alert_count":0,"request_count":5,"received_data":2702904,"sent_data":2425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.ionicframework.com","ip":{"addr":"172.67.69.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-02","domain_rank":164865,"first_seen":"2014-02-05T17:09:16Z","last_seen":"2026-03-27T04:02:12.12431Z","alert_count":0,"request_count":1,"received_data":52636,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e594b3c30e588402f6950942ba5bc5b","sha1":"ce6474ce06fbcc796a4b815891d1e1eb27ed17b9","sha256":"65f4a95113400628d8675e98e618c6d1d39eb752b749be5b3b84458def3c4275","sha512":"bf6a86767ed17da1bb51b6cab68c5b374c1b688ff4880ad59c963f298d4a6a4dddc7a66c65800bfaa9b67366b0db9d8f3ecc02f6109b0bc4d83399b594bc83ed","ssdeep":"","tlshash":"a161b79a37353887327715d2aa2f0e07eb7658361688d034c9f9f7541cb28a3c379e49","size":3262,"data":"","first_seen":"2026-04-02T18:28:46.468293Z","last_seen":"2026-04-02T18:28:46.468293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c12894bd6e91f3121c7e8c1a30a15754","sha1":"0e879b2918f00984d074219a33df92fe5ac53f31","sha256":"e8405ae5d084a68689ecfa4ef946eb332bc1ba0aca533ffc49c2be441dae0f48","sha512":"12d6ed6a095a695fcc27fac200598a159101ed5d144118336bff9fd36fbc172b593bf2f06a23f9ccaf9ad561f31ae5150bed428450cffbe113193ddd362ac9ab","ssdeep":"","tlshash":"f0c09b9cd3df55b3447930dd57bf21d94e7f41e13cb02473408d5251119d1694426d4d","size":130,"data":"","first_seen":"2026-04-02T18:28:46.469162Z","last_seen":"2026-04-02T18:28:46.469162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-24T11:36:47.970687Z","times_seen":260203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/js/i18n/pt-BR.js?ver=4.0.7","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"455adefc29843859370853eaf55e0ba1","sha1":"50a3794ccc3ec0ce500e0abd97e5b597b36b367e","sha256":"a554bef08b5984947f8395bca02c3768defcb32c08d4db67200791526050f928","sha512":"4875bebe9edd9a10e4d99f0eedfa4528517e15510c4d3a186703b19b7db397c7b81170aa46699587df2d0f1f38c5f66f67d17bef91ee540c29864a7ec7662718","ssdeep":"","tlshash":"3111d0ce39c1b04466533162687f350eb52a5d5b894cd1d9d2671086fd10286c13ae2f","size":911,"data":"","first_seen":"2026-04-02T18:28:46.415609Z","last_seen":"2026-04-02T18:28:46.415609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment.js/2.19.1/moment.min.js?ver=2.19.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8793f63b81247c95dceb2edd699efbdc","sha1":"4e6718addc8fda68e1de3113363333c6f4d707b9","sha256":"cc6f2ff8d5a26719a3362f82bd46276702ad1f316d74ef1c00a508741f3e53d2","sha512":"0f3e333bba7a32b17e55c383e8f51b034f212b5aefd210efff01aec525232266946314722b680b0ba790595ab20cdf483355ff91403cce4ca4252fe011539ddf","ssdeep":"768:j+2V/togj4Z8wVF3rSRtrFIRlaVMfsspqdesO9BEulko4Y3r:6WFoy4qC3rCznUss1sqiTYb","tlshash":"e93382ca3646b122576612b5083f080bf33d5899580f4e1df548e9e93879c6e527bfbc","size":51265,"data":"","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-07-23T15:55:02.715487Z","times_seen":1486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd7ef2e4737acd74fd0dcdc3b515e304","sha1":"0d792b33f12a48ee8aaaf2560a63a5682470645b","sha256":"1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c","sha512":"3c4358f9605f1cce097f36689099b8364c43cc360c3d4f5ca77be5cee43bb818c6562496f26ad57ce44c34c474fe4ccb6deed01a14ed259d498f5bc17f9532c7","ssdeep":"192:cvtxGU52v1wAsFYM3qypqEdSmNql44UakS:cvwQ3sFWqxUaP","tlshash":"e1d163c9b1c6f41503977724951f100ae33a695ef9094458eb18e9e2fcf444ea22bf79","size":6625,"data":"","first_seen":"2023-11-03T09:26:42Z","last_seen":"2026-07-24T10:20:21.575096Z","times_seen":31977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"072d3f6e5c446f57d5c544f9931860e2","sha1":"ee6aa3d65b474309376468b24bb6f829a4514809","sha256":"2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045","sha512":"19ceb31ec694ac5c42a0a7b02cfc1c31ddfc033dd62916a1c55bbbdd2435e21f73127c539687633e96f2706b2d75c37609b44a9c9462b63f9f96795cb4495968","ssdeep":"96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps","tlshash":"6d9133c438927870a2637453f4bf14d57279aab2713ac4c1a24dd4e12db39cee0a7a7d","size":4307,"data":"","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-07-24T11:22:00.715178Z","times_seen":32891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"80e7ea15facb482dca707e31ce3fdbf0","sha1":"3960434aa16cb71b392ee8fe531a0c1b3aa04ed7","sha256":"33e4ddaef291125eb5debd252874e087ac7d0e2b3604de3b98b5837274e846a1","sha512":"f06a2d8910833d6687498ccfb4b9c7823c37c6cea6700a0bfe98fa4a637d0bafb50d3d7282a6077e79fd7589f83bbb2be1858ebbfaf5448abc02151e8947a1df","ssdeep":"","tlshash":"0751fb16541febf18f872821306ef0b2c8194ecfc226dad97ab84d2976dcb91472d230","size":3109,"data":"","first_seen":"2026-04-02T18:28:46.470056Z","last_seen":"2026-04-02T18:28:46.470056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2fe14d4900abc8314795f906e54f4222","sha1":"91cdc9e23b909371a88486f6cb91ad961ffe0c2b","sha256":"fb509ec4c4583dac76027fb6e27593a9d12f5bd2dc4f77f649f882033c15cfd0","sha512":"703690680dddb4594d3de54dfe773950c629a13db22ed43ae78e3e73daa18a03685195984ad356c7ef93ee17b05441dad8f7ca6a00d99b5547b6e7cf38bba219","ssdeep":"","tlshash":"6ae0720634bde0b29f86b141202d7ab8d40b44e3c02868d1f7f8dc582bee6b0e31a02c","size":328,"data":"","first_seen":"2026-04-02T18:28:46.470942Z","last_seen":"2026-04-02T18:28:46.470942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/1.1.0/jquery.magnific-popup.min.js?ver=1.1.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T11:31:59.797816Z","times_seen":71692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-24T11:41:24.257743Z","times_seen":496555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb7b821b587959d4c0cc406c49077ff","sha1":"2cb4827d5cd5a05729418b369019b9c1eb0798ed","sha256":"1f93a5f6091369b8b6cdb7be01a6c7044ec8c3af0eeac05a5f0dfb3aea2a3e31","sha512":"cb99f055a8fa7834d3f693bf5c06d7622c7d9340b0147d52d4ab12cd6e1a0d1ae0553f7584cc8f682318cfeff7c34f8273dc5027206add3c1ddf57cef110a5f6","ssdeep":"","tlshash":"68d0c74caa4f605915746a169f6f62c9246d80761c8114a63e455744352581ed25496c","size":215,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-21T15:31:58.49619Z","times_seen":14193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73c994d5feef7e9908e05751314b6353","sha1":"c15088847ab34977983d087839656e68dc11a372","sha256":"3cb1fdfd5270b75e7a95faf7cf72c638e967f22cb90245d816d0f99dfc4b7949","sha512":"5387afdaabff8541d5a90951030160863da29f50368dedd7751c3765cc1d9ffe048b222b2e7c5dd1af1064a393bd230a681bf2b0ac1f636f6195456307dfc266","ssdeep":"","tlshash":"21e07d4ebb8cb0290ebd303b173601ed31ed5a7827018c197c89c46c7174bd545987ec","size":350,"data":"","first_seen":"2026-04-02T18:28:46.473522Z","last_seen":"2026-04-02T18:28:46.473522Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0203838dba446c5041508bf7bac8571c","sha1":"50520dc9862f9293f116c673b117ab5adb3439b7","sha256":"533609a6035017a05159e1dd8e8f7edf67a320c836b3f6f6c375dc78cdefa02a","sha512":"97a4c8655c290fb9e546064d233dfbd2124fcd35142d22e079546b209da1e74654dfde9fb25032e109334e7b717d754c1aa128fa7f16b7674d00be5fa9c4ab59","ssdeep":"","tlshash":"0fe0c014bebc3c3a0545215676964b8aa77e2a051081cdceeb781943c570d20519bdbd","size":366,"data":"","first_seen":"2023-03-12T22:06:50Z","last_seen":"2026-07-24T08:54:33.803797Z","times_seen":13563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"def8da8a0b3ceaf9b674d1b197c52755","sha1":"984a4f5f2174e488e42627f7ecb3a867e85c52de","sha256":"668776f0cdd53dc474438cf2fdfd2f6f802151b60dcabda70532d9a14a5e73b1","sha512":"2b0b9807d19695348ee0618f71538eefc7a29929855af5e2b2396fbeda2dffcf4f01e3ad7c5ad323ab978d1760637e6c2bd48be3cf47c739a81aa50b7bb04614","ssdeep":"","tlshash":"10d0a7b761ffa0318bc27810212ab992f01b81ea945499d893fced2926e65f0475527c","size":242,"data":"","first_seen":"2026-04-02T18:28:46.475422Z","last_seen":"2026-04-02T18:28:46.475422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.min.js?ver=1.14.10","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35d9db48e3112f35d81e70b98457aa42","sha1":"7baded3da3bae7598688ad6c89800b88cdb49fdd","sha256":"5f8e21f061de1874e4af063f095a389187c40583c9033946e406a8bb825ca358","sha512":"9187ebcfb9d574cc3a443f6d692969b47d41ba5bacd09fff729e58fe7b3e3adc22f6e1c98b2ae23f2b98514eee5a150040a5a213dc82863f02e5eb46d2537842","ssdeep":"192:7jFaLZ5Asd0x9ufi+1rniODiLpMBiPdkCYheGevbMoNmA:7jMZOjbu6+1rtDwpMB8CCyeGeDMMJ","tlshash":"7be1d8d4719ab0a252a334aa01bf1207e3bbafb555cc0808e61985d03e79f4e1597f7a","size":7448,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-07-24T02:56:32.437762Z","times_seen":1032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.12.1","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0efcab141752062ad5d773b6ed954d8c","sha1":"cbe81c7d82c8c03b06ca42007b91b02646a60724","sha256":"663280c5c176579a23818daad91342e5a04614b336ea642dc4715e3707074e60","sha512":"31078946e2c456fca7db0ab160f31084f55a30b3bf822a001eb94a636159993cc85c0638c5a4e2895e624de0113244032f8f9549a94fd467ec366c87c82534a4","ssdeep":"192:IrKG4shSuvKL3+ya3vBrPh/9Ckh/PEkmcXY0R1kGIe+j2:Irj4shSEKL3+ya35rPh/9Ck1PEfvW1k8","tlshash":"7bd1d76c3695747743fb81e315af5250a2322789790ac984f928d8e328bcd5707c7fa8","size":6543,"data":"","first_seen":"2026-01-20T21:39:44.943355Z","last_seen":"2026-07-24T02:31:53.794587Z","times_seen":2752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6.5.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","size":18726,"data":"","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-07-24T11:27:58.921102Z","times_seen":102346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/js/select2.min.js?ver=4.0.7","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dc1d646da6cf3ba68ac8c97b7b1fde2","sha1":"1dfc915bb5ac4913419c7763e360e2db0bf1bbbf","sha256":"1870b7c456eb7af4346917168392449543a7717617c53b4c3ae03be1c5803d3c","sha512":"6355026f7e7f5a940c8fc4a54f05b8dd0faf6913a5062b89dc1069745eb8e86e168d7629e35ecdecece598e5564f13936a214866dd425a76f2f06f49eaed84a1","ssdeep":"768:b2oLNdg5pTT9aPCExIViVd9QHhwvKGookOlxNkTTeUBo47R0eq/+nnZprIfcUw0Z:lrWVEqViVd9gekOv4lqGnHrALgg","tlshash":"ce63c948bd537235427f20e7256f400a3136ab7eb00959a8b458cde86ebdd14726bf3e","size":68388,"data":"","first_seen":"2023-03-07T13:14:39Z","last_seen":"2026-07-21T12:50:17.704397Z","times_seen":570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets/js/app.js?ver=1.0.1","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"758039c9cb0756ca077dd616f6c28a62","sha1":"2642ccf99b097f5d0fb05d53e75e00028e6773ac","sha256":"e0f6eee00037cb2b4aa6a8ee2f1ef44bf4c85e2eb8d9ae0f876e1f8c5c490e8b","sha512":"12979352056edc7daf0911acf27844e6937574662b8703b475db88d3a5c58b9bfa9ccd4dd9f1cb23664e1f97674224f3f47ceb6c01e07101ff4bed63184f22ea","ssdeep":"3072:+VJETusUdsUDzRrZ3YaCneGFRX/NY7MNFfJe/gDzHUZq5Pl:+UTusUdDzN1Cxf1NFfJZ8q5Pl","tlshash":"415408c97681b0a507f760b1403f240fb2ba995ea84dc464f526d4eaac7ec5d9227f3c","size":297199,"data":"","first_seen":"2026-04-02T18:28:46.404477Z","last_seen":"2026-04-02T18:28:46.404477Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"190670973776115c819bed1f8c373e4e","sha1":"1bc2be1204ab43feeac797324be79a5bf8e1dbb2","sha256":"03ec591d8d1b2cc4115e83a523f03559a96c486e9806b843e3d52121e0e21ec3","sha512":"38dd0ac0be6b0dd8a3363c395f286afb3337c24a9288e58fd72458f741f09b09ce55ab82c8765632f6d2728f7478cda7695b312abf7883082a5f8cbe24be1849","ssdeep":"192:r8wiByGqAb6v3AzGmmcweHmlVm01mszfHGomcCmxmvZmxg3lmxF6b8K/Gume3mk6:r1GZjRZjaaZj0Zj5SZjhZjtZjZZjy","tlshash":"d7827b1221aff7f0de426426210c7a71c56f4aafd06ab8d5f2789d24e1e99f0870f16d","size":18361,"data":"","first_seen":"2026-04-02T18:28:46.476885Z","last_seen":"2026-04-02T18:28:46.476885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92f8c01350c630f414f5d0b015ad6864","sha1":"eab40ab4e77f92f2fb17684aaf44b579a51b8034","sha256":"17b79ece7ef9d1454a90156690d33d64387b67a7a7548fc826012512e287a937","sha512":"c2d619d5cbec24aaa5da29a80031ece9ee65b949f38e00e75ef6ebffa0a38b3fd3f32f271a941d3e0d1f001b90d0a30d3a9cf342e409fe3fb75ac47a3361ff9a","ssdeep":"384:rO70wDgKuJz+ZbNuSPlVTzkRnddaJQUky7nrTDKUgigNC1Qaa3rJBFgTsVNmlio4:w0qumBs/0Xnaiwa6ssUoqAMnwtB","tlshash":"08039589b690b4e302e360b4405f444bb1b79b56a81ecad0f315fad07c7d84ea1a7f9d","size":38590,"data":"","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-07-24T11:22:00.628596Z","times_seen":21576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/pt_BR/sdk.js#xfbml=1\u0026version=v2.7\u0026appId=907218559421661","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-06-07T08:17:54.126058Z","times_seen":177375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b1719adf5fa7231cb1a1b54cf11a50e","sha1":"0c8258ee3cbe887b0e77ff79db940fadfe56f95e","sha256":"111da58b16b15c6bac6126be92d0a83c8d1dc4139b6361411a744deda5242c66","sha512":"9d5883c86d46a60f0f9be2c720b43ce0e3333fe547642b32fe04c1575468da6682833bf6f09899abbf336e0bc8dca46db5ef85f5c45c9a47d45908a70c466ed1","ssdeep":"384:IsIRHeRJ9J/ERD7JgeYhzwjls1qrBp1pgQmsOs9BqohE+5Z:IsIR+X9J/ERRYhzwJ6qrBp1pgQmsOs9H","tlshash":"c252e8e1432955321eb106e391e513d176a075aef44bcaa1a898dc2e18bdcc324f3fb7","size":13423,"data":"","first_seen":"2024-07-17T12:28:39Z","last_seen":"2026-07-24T09:38:48.852689Z","times_seen":16075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1/jquery.min.js?ver=2.1.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-07-24T03:36:26.08517Z","times_seen":10248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2734f7236bb10260da9366a5d8625c11","sha1":"6765b99479b7c35fda19f0cbe9abc56a9e3d639b","sha256":"a3f213fee0ccf9e7da46fc805f37a21a4a625dd4ef289f290d877cbd436fc889","sha512":"4c5699e27206577318c8af753bfa210dc3fcb7532c06b8b778d64fecbd9de54828712aba5f889271353a36ea91399b5f44412f5ad5dd41ecfb05731bd25ad25c","ssdeep":"","tlshash":"1751c96662fea132cf932501111db9f9e45f959fe02ae8c172fe4c05c6e9ae08b1b05d","size":3013,"data":"","first_seen":"2026-04-02T18:28:46.4785Z","last_seen":"2026-04-02T18:28:46.4785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c207bcd3c059ed3fa8003a48f29fcea","sha1":"efe75d57ebba599f846eb9fea73b3a38c4444580","sha256":"032608fd7de5c47eb74448188a1a86139f10441c9ed2cfdfcfed0167af6c4440","sha512":"4c51a75aa80b675a6a3fd3ea85f4c8093ecd2db0623ebec2a9743406c3b763d2b1e20c79b9cfd5a025250bd7999ad6177722672aa95bf6e3600d579fdadc5284","ssdeep":"","tlshash":"8e11e5b31914f0350f321de1a2fedab5f442741df25889e8a915ded82eaaccbcd09945","size":1010,"data":"","first_seen":"2026-04-02T18:28:46.391395Z","last_seen":"2026-04-02T18:28:46.391395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js?ver=4.17.47","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a36160a466cad1a9e414321f4784baf","sha1":"4ed91e4ed7e1a2a7e5f05654e2f62695c9e6ce40","sha256":"e5899ac40c0c8c8a4cad594af3863ff8d8c2a4a9c561af1b59605b50748119f5","sha512":"1837b2dfb459031164a45789a2b114c0da086e44f0b320bbdfa28d498b9cbb55895852bda9377362e6fc013c64b6be83c247bb9db15a8a8ca9cdb0ce43292846","ssdeep":"768:+85tRKDmhd/onYDM38NvdyMmpu3II1R+qlyTo/KR6MJodCBSEpfh6Aq8Sd4KI+po:z5UrsNvdyoII1llyTjpWnvAMLI+p+7","tlshash":"eb03b604b1b1729795bf7495102e6507e266cc3efc59487168ce10b83dbec89a1bef2b","size":38510,"data":"","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-07-24T12:29:28.168288Z","times_seen":1644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","size":871001,"data":"","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-06-26T16:18:04.305661Z","times_seen":18620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://6143c2b4-ae7c-413d-82e7-db4c303cfd6c/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-06-07T08:17:54.128402Z","times_seen":182875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02d7d8402b7ddb8e6fe47f2a35071e8d","sha1":"174b5a8fe0ecdfa989fbf40f3ecd51f1d0117693","sha256":"8a96c1a0a8b1c2a8eab8adfa21634b7f2c4226f6bc5322df1ab7efc4f1f1af7f","sha512":"aafd7e64bba6934b73597de06bf30303d6bce9ea9e981102d881c52e8543d6ce7b5310694c6b230635e66557019cdf79b99bfed422f3397d892f5ff754500e8e","ssdeep":"","tlshash":"c5b01285308728818099e260ab62fc01499215cf064ecd4429d8df64afa2480f4c231f","size":94,"data":"","first_seen":"2023-11-08T00:42:21Z","last_seen":"2026-07-24T09:28:29.666843Z","times_seen":142352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3562ee3311ed8ba8ce73712459f3c8ba","sha1":"4bad4a75deecc006ee2fb12fc0fb07f82f3b8d63","sha256":"016a8c8243835bfae0ce5e61443cd56b39dd8462249a66dc6336dada31c5f2f3","sha512":"47e5930c26faafc6071b02d6d99d998bb6a72476ac2056bdf598b32e3682e6d8e4d9f93bbc75dc8055610f3d13c96125fcd57650ef09d6b16e795bef29a3a719","ssdeep":"","tlshash":"3df0974214ddf7f1ce912c359d0b7a71e41e01acc021e8d4a368cc60e9aa9a0270b2bd","size":481,"data":"","first_seen":"2026-04-02T18:28:46.48047Z","last_seen":"2026-04-02T18:28:46.48047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"99b71e0da55e94cf670363ac02341ea5","sha1":"fb870ec3cd4a32967871f9545b4402e03ce2fbc7","sha256":"060ea5e78762ecf5d275befbddafe7d8f1559645c9f9b8e2837586cbca42e36f","sha512":"a9fc18125b5bf3f1062c38fab5e54c27b1f1125e3d97bbfa23ff0358a440bc256b1b8a729d658ae305e7ee47ea16030b3ff66d597ad6631e9f9c7b237d1f1a3c","ssdeep":"","tlshash":"ace0e504196df9f08dcaa521b2182e74d15a4af9d128a8d0f2b48c39a9e9cb0475e47c","size":430,"data":"","first_seen":"2026-04-02T18:28:46.481287Z","last_seen":"2026-04-02T18:28:46.481287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"84e4d498e2748104933f5aebd5867333","sha1":"c0647cbf1ccc73e73d0fdf1cb3c2fd3daee749e6","sha256":"8ed25e4e90980f17b107130f2753eced72e54c5524d25939c0b324732b6cf10a","sha512":"28d8e1fe8bd92c22a7028d85286130c6efa7b1f735b88615709d23c8944d677c909bee995cc69bf0f7be9f0bb5123a6b8bb98916a93a64c755caacc62e65cdb6","ssdeep":"","tlshash":"7c41cc5611b9e9bacd5be56330eca6b1e05c86fac0bb18c9e170cc3055cdea1171e27e","size":2178,"data":"","first_seen":"2026-04-02T18:28:46.482062Z","last_seen":"2026-04-02T18:28:46.482062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqBootstrapValidation/1.3.7/jqBootstrapValidation.min.js?ver=1.3.7","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9d170f84b4df2299797a9b78ceeba64","sha1":"406ea2e97b368442d8d75a46e11edb52688fec32","sha256":"1164ca0dbe884f218dc08a764f76beb90f2205d922691543226c2f24055c520b","sha512":"247573123c77cec874498f85f637345655bb5415de0c824d5d1d31718c92bb540b85ff83bbc671f69dbcccfe4c8c85bba27b15cb4a8cb1596cd183ba19383603","ssdeep":"384:7sKJ4IcdCbnb1wHbCbxnvs+6QNfl4boLorJQy9un53C8EDBREL2nCU1duN24H54E:fxifDBOL2CDp","tlshash":"ca824089b2a139482f7736f770cfa103d0f6787c9609a444998585f96be5fc82353b2d","size":18830,"data":"","first_seen":"2023-03-07T13:19:39Z","last_seen":"2026-06-07T00:44:42.371668Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/slick.min.js?ver=1.7.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dddcb86f38674ab3fdf13ed66635a5cb","sha1":"4310dfdb9412e0e0be9b0a121060a5f2f80e85d3","sha256":"05c732e60d7db00915ae57acdd91c0e13e223e1358f7ed657b750be9c6d3a5aa","sha512":"983161741f5756e0f9e24bca1625ac2593386829cb795ead5f86c6b300ad308a9fccfe02f571ee1abb954167d672c16d15ef69e36acd419a2a2154966c012896","ssdeep":"768:HrkkX123A5OHitaSWzYdlNWYcx16n7YdXRRMd2KYCQCW9Shb1ez7RFmYH:xZtaFYdlNaNqePiYH","tlshash":"4313a549d604276285d721e62105c40eb3f7fb3cba22c0e435c9d3ea646ed4896d7bfa","size":42635,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-07-22T22:29:35.184623Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7743a41d2ed2be5260c0a41d2d6f165","sha1":"88c2c44e73cec2f159681ef5ff97737bc71c52be","sha256":"3b367943adb4e7c5b479575371bd688419a327c556d178868b3cfe02dc234c1c","sha512":"fcfa500d87fab7fc23e725b678cad793c22ef255be5408b333a73fda59926974048b9465dda8591b1de7fb23b0103af487538604d79f63938e4e5968da8f1b69","ssdeep":"","tlshash":"c4c08c14a282694522e192a9134c7171755652028816afa292dc53840faa0e8c004291","size":151,"data":"","first_seen":"2026-04-02T18:28:46.482868Z","last_seen":"2026-04-02T18:28:46.482868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda652db133fddb9b80a05c6d1b5c540","sha1":"60c8514c57a5db2980c4b046b0dd479bd427357b","sha256":"c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4","sha512":"05cb3673448a79aa81887c60a82aba51f9a843dc13ab4fc39b3e6d8ae7d632732d9afefaf72fc3d197c2795a3364fdfd4f83c9b628644d98f1c9017bfd435e62","ssdeep":"192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX","tlshash":"8cf102b8730569736dcba1a96077034326232027548a54287738dcff8dfce552577bb9","size":8171,"data":"","first_seen":"2023-03-13T14:32:06Z","last_seen":"2026-07-24T10:20:21.706626Z","times_seen":50452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc27e253fae1b7b891fb5a40e687768","sha1":"ad12044651ffac0badcd0e42f32edef91678b1ff","sha256":"46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62","sha512":"42fad6d6beeab116cbe8b149df6b64d65c4998c0a2cc0562bc831ad02acd82f2b6b9b33836047aafd6c2d7cf31a6e91feaca42a2fa6c6077b7f737dea40d36e6","ssdeep":"192:wNmuf8NM+UHN9Rr7lZBNWzd4PMfm/vx3imWAel/L0Fx18b2VautyX2fkiYgu0OOJ:wwuf8N5UHvRr5ZBNW+PMfm/hibLexa2b","tlshash":"a03203e5a197e1f0c7c228b88c16c551b2bf862cb889d054fb5cccd22d1ce57266b77a","size":11513,"data":"","first_seen":"2024-03-02T15:39:15Z","last_seen":"2026-07-24T10:14:20.286002Z","times_seen":29883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"342038d39d2188523d97837b62468e1d","sha1":"97eec10604a77baeb0147d18c66a5400963e560b","sha256":"143e152767f74fadd599d9cb2f4c7da75b69ed06ad880e2815a0ec737b5e9245","sha512":"83b44566a9ca7816f618b87885a46d664aa2b1ceb7131f04e3f7a6ea2edddcad2635488a3f0af485b53d597605b3d5f728823414f506e3a1d86371bab9e8d1f9","ssdeep":"","tlshash":"30f0e1441c78991785d1a2c7359a7845a0adf95003af7c03720e49491e61b2d99f364c","size":548,"data":"","first_seen":"2024-09-19T21:18:51.628354Z","last_seen":"2026-05-30T05:58:46.297945Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c25141b82ccddb774607f1e31e59ecba","sha1":"d4fe79eea5b01a302eb84ac6948cc26c9c9b88f1","sha256":"b285cd59995f996a2323e95bedcbd2a1591f70897b97bd800c87826c53de8892","sha512":"abac689fc77e66ff19fdad2a47fe6c09e997a11f71d8e046b3aae5e547ee30e13d213b01da6c4f7f000e1b95faf2b882c25931f19be8e4c5edfca93eec6e0c2c","ssdeep":"","tlshash":"8731211e05fef1b9ceaee9a4593c5db0a05e41ff92966195e1388c20d0997f05b0f45c","size":1733,"data":"","first_seen":"2026-04-02T18:28:46.486322Z","last_seen":"2026-04-02T18:28:46.486322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f7757c144125b642e1d130a46116408a","sha1":"63d7fd61190e98be3eee5f5a031e977bb881de89","sha256":"6ea4526ce07880132be6948d06a8006c61bf1bf885a49793a5ef77b5b3bb9fd9","sha512":"b0d032074108e6d8a3952f8cd647b0d6f15f16c460d0f5fb170b988943f82e9bc431ef5e25a9212bc44e29ba752e5e257da0e3502e9b7dfce7504c5e2bd3f956","ssdeep":"","tlshash":"c6412a6265eff676df437426100c7974e51f2aeed42bb8d9e2b85c24c6e0ae0470e02d","size":1898,"data":"","first_seen":"2026-04-02T18:28:46.487542Z","last_seen":"2026-04-02T18:28:46.487542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","size":934,"data":"","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-07-24T11:40:13.942593Z","times_seen":109344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","size":871001,"data":"","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-06-26T16:18:04.305661Z","times_seen":18620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f02e99ad50f4fe10c6bf95c8e93fa1e","sha1":"57cd6647ab42353a8d1bff25ac518edbf530ec78","sha256":"e736b25c9db844b2b1421df1db26fca156388050c03a947e16fbf53cea4c2618","sha512":"34bec65a91f6886448965fdd5bd9a2cc7d0b607c4e586f44706e9390f9b9b3e56ed69a9f96a0512e86ea18aae8e0b57baf2e41f0b63c6236f3ce057df7ce80e8","ssdeep":"768:yelJPtU2cwFDUXcNFQHz+lFE3kK29Bfigg4ImS+q/x/g06idkUtjPB:yycwFDUp20kK2ru4ImgxbTOUtjZ","tlshash":"63f29e5ced4674bfcffe4be29ae12788657c41566a9f247d30ba108316a11c376cb0d8","size":36034,"data":"","first_seen":"2026-04-02T18:28:46.488915Z","last_seen":"2026-04-02T18:28:46.488915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47f02987d4b0c64c84e04ca4ad3ddc87","sha1":"170e7e7b3a6f8c0ea13e648cdf2bff47bc7dbb5c","sha256":"1c64d32f68861c2fbfac0a55dcebfa97ca78ad5b0803d1b28d69be0de0462d00","sha512":"30a3973d66205d11dda4b6a4adba6068b12f6c263d7ab66f7738b406fd453acc118f0c47ddfb5e61c3bad53ae180c88614932a387adeb68c43ceb6e02ebccacf","ssdeep":"","tlshash":"aeb09b00b5456e83a2d029f5291475a386a323517c20bc9117dde195ce52485cc48257","size":121,"data":"","first_seen":"2026-04-02T18:28:46.49183Z","last_seen":"2026-04-02T18:28:46.49183Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment.js/2.19.1/locale/pt-br.js?ver=2.19.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"893ce9ce016631bd8de5daeab31f60cc","sha1":"1ecc016bfc64cc0168c79e790e1b821d2bfb1771","sha256":"9d38e7e31748a0d71f64bba56c5841f1618c9056d8ed0858c2fcf92e1e56bbba","sha512":"6edf7ee912f24a35ac595e0e8ff08970479db6d97760183fd6698ee1739badd50063d43919b2a9ebcf8956978103e3ce81929eb702aa8e9f3ec386ffb68c6796","ssdeep":"","tlshash":"464134e113de462247d6166d945eaa803a30cd678d1e3d05b75ea0803fdcd9c61f4cf9","size":2111,"data":"","first_seen":"2025-01-06T06:30:04.507253Z","last_seen":"2026-04-02T18:28:46.436307Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bd3b81bff4b48f2966fb18de31d03c7","sha1":"2df01ba81c123ba4d4243a277544a6ddf75f4e3b","sha256":"d2663c10d1c90c7bca21ae6ed3e60042ba406bc8532ad11df6a5299002a25e07","sha512":"97d0443dfde9dcb1257a1a814315cb15e6fb60d6b41e692b895c3317aea18427eb56eb54d7ca24ca76f07255c5ba60c5437f08e9ac4610518c2cfebd8cd3c54d","ssdeep":"","tlshash":"6bc01251b646384793d029f02958606245a333963c106ee107eda5594e624c4c488216","size":170,"data":"","first_seen":"2026-04-02T18:28:46.493047Z","last_seen":"2026-04-02T18:28:46.493047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f504b6174cd5c1bb698b9b8fd73aba9","sha1":"c8840f488f1ac6802e330572e14b3d51b967be60","sha256":"a34adff5bae01c090a1a981863b2d99be8f789173f718cc049221a4608066b66","sha512":"fc7f5e48326af09bb8cd891a8ea54ed9f95004d42368f9790cf555c724970591c47aaca8089e5edf675e7f448bb9a325cc2c413d3be42fbada4a0f1e5ad35684","ssdeep":"","tlshash":"5dc08c28ecf5ad6222fa4c9433a426419ec2cafac352082e25a9c71e0fe21c8a041308","size":167,"data":"","first_seen":"2026-04-02T18:28:46.49389Z","last_seen":"2026-04-02T18:28:46.49389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/css/select2.min.css?ver=6.5.8","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/select2/4.0.7/css/select2.min.css?ver=6.5.8 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1641\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fcb-3b4c\"\r\nlast-modified: Mon, 04 May 2020 16:16:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 625097\r\nexpires: Tue, 23 Mar 2027 18:28:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xvBWvSuurYilKyh7jczVmH%2F0sLTp0E3aUQ4jMCgVv6qMRV197qRDXH%2Fg4dS8vqj380hKraud6cT55LTUNoW9nyf1BzuO1N2u8X1o0RLRgG4mqNOb%2Fal%2BXXwNcUTLUTcwGzpTHLB\"}]}\r\ncf-ray: 9e61e4505c53568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15180,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15179)","md5":"af22a7e2bfec4d2a82c4dde613a52fb1","sha1":"0262303d6ae851521ba206fdb6c5d0578f06b4f4","sha256":"31e49ff119a0ddbe6a2c59628e7a7193a97e20992247dd7ffd818f0ab0a6a205","sha512":"d02bdec1dd45d8428a2baa9477d0c3fe00e8d18e49a8ca030979acea9222a7e438b1134f29cd7a31d95910f2cf0087f3578e7468f94ab0eb85423399df81b3c5","ssdeep":"192:pL5u/nTfc3aqPJCeQ9CPjOtWlUJKLPcH9tPOF:3u/TfXATQ9htWGSPcdwF","tlshash":"8762aa25bacc2235b0bf8e7f6cf274946739dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-06T16:03:40Z","last_seen":"2026-07-24T11:33:05.541314Z","times_seen":1635,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":43,"dns":3,"connect":4,"send":0,"wait":10,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:38:24 GMT","end":"Mon, 01 Jun 2026 08:38:23 GMT"},"fingerprint":{"sha1":"B4:D8:FF:18:25:9D:F4:3C:81:14:15:FA:FE:F1:C9:D8:BD:9A:AC:DB","sha256":"DA:45:8E:4D:FC:26:D1:06:BC:7E:55:03:F6:AC:CD:D6:ED:2B:5B:91:E9:13:35:DF:B4:EF:95:A0:EF:55:E7:C6"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026ver=3.0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Thu, 02 Apr 2026 18:28:11 GMT\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1010), with no line terminators","md5":"0c207bcd3c059ed3fa8003a48f29fcea","sha1":"efe75d57ebba599f846eb9fea73b3a38c4444580","sha256":"032608fd7de5c47eb74448188a1a86139f10441c9ed2cfdfcfed0167af6c4440","sha512":"4c51a75aa80b675a6a3fd3ea85f4c8093ecd2db0623ebec2a9743406c3b763d2b1e20c79b9cfd5a025250bd7999ad6177722672aa95bf6e3600d579fdadc5284","ssdeep":"","tlshash":"8e11e5b31914f0350f321de1a2fedab5f442741df25889e8a915ded82eaaccbcd09945","first_seen":"2026-04-02T18:28:46.391395Z","last_seen":"2026-04-02T18:28:46.391395Z","times_seen":1,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":67,"dns":1,"connect":13,"send":0,"wait":44,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2018/01/Slide-6.jpg","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/Slide-6.jpg HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 206770\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 10:08:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0nOOj39wlCZHn%2BwEiwDu25YE11Kl7prcvEDEAWRhiuOYhi1LrsaGhj4KhcmjC02NM7HJ8FxRwHaWvvQZbHtjDIWSGEXB%2Bw0W%2B5%2F1k2vnC40OS8778o5aAbGEXE50IPgP%2BcjGKI0gNXkJqo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a950b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":206770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Macintosh), datetime=2018:01:26 10:37:03], comment: \"Optimized by JPEGmini 3.14.12.71901706 0x8887eefc\", baseline, precision 8, 1773x852, components 3","md5":"e18df8aa90c9a5b4be65d8818ca1a195","sha1":"1db8977f40f7eb522797348fcd7aa779b9e37ae4","sha256":"4c33296640f3b73a68b8239f1737c519b1d28b451fc4398c6d35dc447f5e20cb","sha512":"2305cac285fd4902d399bfa0c3b34a2503f5f86fc6315168e33637e7890daadda0ddf9ea3b6b99e06d1aa283c4841cc130e354a91a05bc1bb2c2b2d2614bc21e","ssdeep":"3072:RrP8u0poZk1t2/4EQMF6ygxWu9FpCXKDPbr5oHYuhObBVodZtVEHdStDC85CS:iu4oZ0twQA6PX9FYiPb2HY1bfodZtVWM","tlshash":"92141229b621ee46f6944b3625e6c1065386dc7151223ca978fd2d1b33bbbe4dc1cf21","first_seen":"2026-04-02T18:28:46.393601Z","last_seen":"2026-04-02T18:28:46.393601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:12.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42575\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 11:26:16 GMT\r\nexpires: Fri, 02 Apr 2027 11:26:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 25316\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c37365f788822fe972e5f45379b4eba6","sha1":"7358cb54c4309a980e2c4c2b6bac8a7568be0d8d","sha256":"574a8f41f3f785da516a501e15b51e46d206be671b71b5b4790a3db8cb9acf3e","sha512":"5305308b8299dd7ad11673cd326e87fa3b9417b30c0c0b6bedfacd7067439faeb052be83aab7451ad9a725291a2e39ee3a709f8f05b4db679f88f8c1829537e2","ssdeep":"1536:c7Rpgh9C9ToL9gTNfWNfK4RxMDldthXwW5l1Dx7:c7ArC9ULiTYNC4RSLX1","tlshash":"05838e7338913a1afc2b8b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-04-01T15:23:54.060252Z","last_seen":"2026-06-26T16:18:04.324051Z","times_seen":16034,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/04/logo-odonto-300x158.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/04/logo-odonto-300x158.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 15985\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRV2AwybLfatXrQb72CPpn4z324Cojg%2BzpX2%2FkIO8lSi5UH4fujnZpN6CkhBm8RYTWLbn15f5te2etP%2BHwAVTiCJMFskSHXqvQontTcadnkcHqJDIuJyDNLl9RixduYH7UNjolELyi5eVUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4504a490b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 158, 8-bit gray+alpha, non-interlaced","md5":"1c69f337bd049615afadd2df34347b7a","sha1":"caaa827806d99f398e7d0a267c6722ff39b84d8e","sha256":"4097796527deb6274ca8d407b78ac174cd7e5bbca934f78175e3359a0ee7c663","sha512":"d4143b82d3220e262adadade58f5ba30418ddad32df9f14d6417127d43905fe17f0ead9ab0fa074934718931910fb889000d43adcc5e81740e76bae1251392c3","ssdeep":"384:HlRpETgowTKrBTEzAqt1gVKvS5T1Mv8lnJqk:FRigowTyBwpvS5BMKnJqk","tlshash":"e672cf66fde054142ea5808e7ad3d15a1ff8cad860cfdd8cb29ff6ae0590047b7a0127","first_seen":"2026-04-02T18:28:46.395258Z","last_seen":"2026-04-02T18:28:46.395258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":225,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/03/silver-star-icon-1.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/03/silver-star-icon-1.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1917\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCc6s79L8Ez5cYFoN9FhxVQLPnRIW4wfDn%2BKeBhkgGjNa19%2FbClPddwtuYJ%2Fbn33MphuHplBCKoCdQAtOH3uYNF3rD349P6%2B0LvxZ87P0ZA0spYgWHtoVLL7U76E5Ij%2FYDJX9mM4YlkHzu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4522a780b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 70, 8-bit/color RGBA, non-interlaced","md5":"bd87a7d71362a32e254722a861bf5415","sha1":"9b5a55d5643ac203b287a0030772d7778f81f484","sha256":"5d3695b33c053a78e8bb0df695623016af14f2e500a7e782dc5421c68491eb74","sha512":"0a84ff66d3984047faff026347dcd1ab7d5c9950fa41f8ca3cc1e0361751be9c14323331130cbadc00473a60b6f7279bfc3728c4266b35dc5ede464038efae58","ssdeep":"","tlshash":"74414cb18ec63e1cebc0ceb0498a4810bc6e4864314f4c21131394ff9971e3c5b10679","first_seen":"2026-04-02T18:28:46.396239Z","last_seen":"2026-04-02T18:28:46.396239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/03/JULIANA-FERREIRA-BRITO-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/JULIANA-FERREIRA-BRITO-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6462\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Mon, 30 Mar 2026 02:55:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8%2FUiVugk8wbFj2pQOVjITNEe1wwdB1LA%2FFbqp9EtFUwsggmKhwpBwPlTRjydaj%2BKY1ar9gGwTI0HRuXsqXu4e048EAzoGbx50DgJoMV6qq8oeOB76YiB1ha8U7EyXhxTYDKj89jnFUATJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4527a840b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6462,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"6b4f5454defed8cecea9cef31f92d89c","sha1":"81cd612d4b2e10fac92f992e2afe9cb1298307fe","sha256":"908c532c6a1dbe11ddaa02490b6ce68f7df3b2957ce85b9b6e5034e6b71b9ac3","sha512":"ec61066ec3ad491b79f76b1a267c5dfe50a118884b5d57d79fb39c69cdd8b5440599b6f6d6dcd3092eaef09b40de63d6a7811a365cc6634e5da8e0d586698d01","ssdeep":"192:L5iDTIsEDrJB94OkoKbdi3g0rKv6BS3vMn:4DTIsE5xzKbdiNmyB3n","tlshash":"3bd17c3b31832b613ee4dc3406438059e5249e60b2ea07590bb3c5f755bc0da526eb71","first_seen":"2026-04-02T18:28:46.397069Z","last_seen":"2026-04-02T18:28:46.397069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1/jquery.min.js?ver=2.1.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.1/jquery.min.js?ver=2.1.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 26657\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-14938\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 86741\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgYbjXSjfl91Y1mL9fwYRJOTuyBgySyhIWuLbqZv7jQ%2BmREwk2IDesHZMQXUkeMtGIyGSTji6TUn8LHoTiw3YeLMSeIb0ZSWmK0PCkgfumUHM2pkPmWOoNGysPs4ZOB5Aj2ufR%2Fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4528ebf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-07-24T03:36:26.08517Z","times_seen":10248,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh","date":"2026-04-02T18:28:13.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 371108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:02:55 GMT\r\nexpires: Fri, 02 Apr 2027 10:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 30318\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":871001,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-06-26T16:18:04.305661Z","times_seen":18620,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:14.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://haddadorganizacao.com.br/\r\nContent-Length: 1750\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Thu, 02 Apr 2026 18:28:14 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T11:51:01.918502Z","times_seen":17501236,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets//img/slogan.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets//img/slogan.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 15720\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:23:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgj9nn3AXZkvcmv9mhiJiTu0kHB1maMb6lin2jvxD8SDaBEeySPmn4XitnzDM1CKj4ax0zRlm7jhlHVQZUQ2QA6C3QMvriZ8VfNReHuoeMiCZ%2F2t1K5s6fL%2BpbPtHoIJU6N6eg8Rz6KWDws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4523a7a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 119, 8-bit/color RGBA, non-interlaced","md5":"b9b242c3145658fdc50d333948215f65","sha1":"f2b7f02b8c43ab86e60ae3c949b3c8ab5be4f573","sha256":"bcca9f6bd9b08849ae8ee8fce6a437f5cf28c32a8b201f07d7e86fb40f79c18e","sha512":"a8ea939a69ef5baa872f03743e443d93e639ab81a6c475f71d5c3fbf3631790d8cb568c20f6afef4dc4777fbd17b36edc337c123061d6cddc9c1a9b0cda47829","ssdeep":"384:IebG1Ayq/mljAjKWWt8Ty6GPx6PVjfvms:MAyWgNHF6Sx6PVLes","tlshash":"5e62af586058d17bf890557802448fb91b12cdf135d84b6fa3b915ec287fe66f8cb6c2","first_seen":"2026-04-02T18:28:46.400131Z","last_seen":"2026-04-02T18:28:46.400131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/04/MARIA-HELENA-DE-MELO-SENSIARELLI-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/MARIA-HELENA-DE-MELO-SENSIARELLI-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8176\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Thu, 02 Apr 2026 18:25:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxF8CYx7VySgVv6fi0gfoKlD%2Fvtrd0a8UHQrQzZ4goXlE4Dg8ycs335gkb267Y6sill%2FJKyt7vVTvUXaXtOZAV5xJQdx8xbbWn02QEtU9Cny%2BS%2BgoKvTSp5tO3veF6laOONS9rCIwi736EM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4523a7b0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"55c144d7cb4834d17115766d9f320769","sha1":"813651df420557a74eb278450bb9d9026ab24e5f","sha256":"51d6db63b14a64c38b6d340df9d445581dcad024818866af2ecf8c54afdf781b","sha512":"7edf8563593d7ec7209f9b60547461c1959963ce74670ab10a1ca53b74d71ec0d90beb541b0b391278f2f4d5d230363526a9c578c4f774c80660d7f1f00c05d9","ssdeep":"192:LNiL5HaiRy6LmjnrftdXz9e+DlA4pqcnqZJddPqZR:CFlLkdXz9e+5VYnPgR","tlshash":"80f1bf19b733c74f3545deb3171ac087274893675820271802f7d9f46daa6fde239189","first_seen":"2026-04-02T18:28:46.401077Z","last_seen":"2026-04-02T18:28:46.401077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/03/ALEXANDRE-BORSUK-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/ALEXANDRE-BORSUK-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6118\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Mon, 30 Mar 2026 02:55:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4uACZpw4lgY0qJq2m%2FHnklS8JZbX2S0wbdEETM5FKTY9LjHAt02ijPd%2FH1MOqzSOkkGPu6JHqjqxx1KqUVwSTk%2BKKc%2BaGo%2FKynhkIHtj4k6B1oOvHMUogibhMu4%2FJeuJZBXdr8oMCOa65mw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4525a800b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6118,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"75714d658e82802f2b0da5d7eb15b542","sha1":"7c280c6ae8879b4615b313a3808fd0e68a7b97c5","sha256":"c2349888052e8d8fb95b532e841299a19c843a2730e12ae9a0f9e4bfbb4a2a73","sha512":"3923bbfc65061d5a501d859a6ecf96b7e8075f98fcd607cc4daa150c0718ee1517af1c3e5bb951c00deb4b3be4d4d2db51b4479ef08bbe6aaa83152675aa0d93","ssdeep":"96:LZY6VrwbE+8m6GERqhRN0A1dl9ZGsHX+XP0TQKM9ayzxO8wLrIHMIINK92pifZ:LlVEbE+8m4qTbZ9ws3B09MkxOtzw2UfZ","tlshash":"5dc19f1843b94567d03dfcbecec20509a50ebb48de1b611a9b77eb4065be3d18a0953e","first_seen":"2026-04-02T18:28:46.401929Z","last_seen":"2026-04-02T18:28:46.401929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2402\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Thu, 27 Jun 2024 13:51:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bo1HRyKBriWIVlA3E2QyYrnC8U%2BT0%2BlY5r2Snv%2FtUAYwKvs6%2FRxK4FLc05ALTVWOPkzdHYQnrFvYCm%2BKVWaCXZr2Do2HaFC7DdIn1Wk1WEfH5a%2FFqx5Jg%2Fw1vdrZI3DMGuFnrn56IjBqoOA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a870b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6625,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6625), with no line terminators","md5":"fd7ef2e4737acd74fd0dcdc3b515e304","sha1":"0d792b33f12a48ee8aaaf2560a63a5682470645b","sha256":"1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c","sha512":"3c4358f9605f1cce097f36689099b8364c43cc360c3d4f5ca77be5cee43bb818c6562496f26ad57ce44c34c474fe4ccb6deed01a14ed259d498f5bc17f9532c7","ssdeep":"192:cvtxGU52v1wAsFYM3qypqEdSmNql44UakS:cvwQ3sFWqxUaP","tlshash":"e1d163c9b1c6f41503977724951f100ae33a695ef9094458eb18e9e2fcf444ea22bf79","first_seen":"2023-11-03T09:26:42Z","last_seen":"2026-07-24T10:20:21.575096Z","times_seen":31977,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3228\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:52:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOcu11hpsXpX1GYVtB7JDS%2B1OeyoqhWm8api%2BuiVeDllYA%2FKIAQVSjKXhQWsi4%2BYp1SyB0sPnxFrMoMa9pTdMrBADKVf08ezhw3vRj0XSIBpLAkj4xDAjUG7vg8KalyHlt0V%2B4eYSYavKbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a8b0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11513), with no line terminators","md5":"efc27e253fae1b7b891fb5a40e687768","sha1":"ad12044651ffac0badcd0e42f32edef91678b1ff","sha256":"46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62","sha512":"42fad6d6beeab116cbe8b149df6b64d65c4998c0a2cc0562bc831ad02acd82f2b6b9b33836047aafd6c2d7cf31a6e91feaca42a2fa6c6077b7f737dea40d36e6","ssdeep":"192:wNmuf8NM+UHN9Rr7lZBNWzd4PMfm/vx3imWAel/L0Fx18b2VautyX2fkiYgu0OOJ:wwuf8N5UHvRr5ZBNW+PMfm/hibLexa2b","tlshash":"a03203e5a197e1f0c7c228b88c16c551b2bf862cb889d054fb5cccd22d1ce57266b77a","first_seen":"2024-03-02T15:39:15Z","last_seen":"2026-07-24T10:14:20.286002Z","times_seen":29883,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2320\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 01:24:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhtFG%2FgGp1Kp8sWRWrYvjneXoLDxqWTAupjrmGfkOdc0GSjlfdtxzDi%2BkCMnhpUiVbHrGAUR0dOPCDjwom4HLoA2vp8dSQpr1YCgQYklq%2B9AK711Tio1h8D%2FoaMguq6x66CS5Gv5wYPKWtc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4527a860b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8171,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8171), with no line terminators","md5":"dda652db133fddb9b80a05c6d1b5c540","sha1":"60c8514c57a5db2980c4b046b0dd479bd427357b","sha256":"c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4","sha512":"05cb3673448a79aa81887c60a82aba51f9a843dc13ab4fc39b3e6d8ae7d632732d9afefaf72fc3d197c2795a3364fdfd4f83c9b628644d98f1c9017bfd435e62","ssdeep":"192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX","tlshash":"8cf102b8730569736dcba1a96077034326232027548a54287738dcff8dfce552577bb9","first_seen":"2023-03-13T14:32:06Z","last_seen":"2026-07-24T10:20:21.706626Z","times_seen":50452,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets/js/app.js?ver=1.0.1","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets/js/app.js?ver=1.0.1 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 89749\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:26:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SK%2F5Q3BrLRGUs4F7i1AitX9CcHL39Ocpo8hpq%2BezGLIyRrVyZWAjctTxueibXFPu2lJ8qS9nWmW8BIPBUGq9Ha6%2FPspEJa3f%2FKWfN%2FlWMFo9yZ9YO9ejsQ8dmSQ%2Bt9CNpMOm4RVeZ7twSaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e452aa8e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":297199,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators, with escape sequences","md5":"758039c9cb0756ca077dd616f6c28a62","sha1":"2642ccf99b097f5d0fb05d53e75e00028e6773ac","sha256":"e0f6eee00037cb2b4aa6a8ee2f1ef44bf4c85e2eb8d9ae0f876e1f8c5c490e8b","sha512":"12979352056edc7daf0911acf27844e6937574662b8703b475db88d3a5c58b9bfa9ccd4dd9f1cb23664e1f97674224f3f47ceb6c01e07101ff4bed63184f22ea","ssdeep":"3072:+VJETusUdsUDzRrZ3YaCneGFRX/NY7MNFfJe/gDzHUZq5Pl:+UTusUdDzN1Cxf1NFfJZ8q5Pl","tlshash":"415408c97681b0a507f760b1403f240fb2ba995ea84dc464f526d4eaac7ec5d9227f3c","first_seen":"2026-04-02T18:28:46.404477Z","last_seen":"2026-04-02T18:28:46.404477Z","times_seen":1,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 87023\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qed04m3NAhxK%2BCFEcoGF5CtGQSLhL%2BzqyaQeB55a3QuSCyjJ%2Fe3u3RwcpyUQ7wtT4z1Wc5VgrfSQJx9QmRgV1egpHPvg%2BvJdRRKEb2Ic51Xy1z7xjsuPZZPWToXbg%2FZaRmcTjFtf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e453281b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-07-24T11:51:21.728476Z","times_seen":521892,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:12.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 371108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:02:55 GMT\r\nexpires: Fri, 02 Apr 2027 10:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 30317\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":871001,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-06-26T16:18:04.305661Z","times_seen":18620,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":93,"dns":2,"connect":29,"send":0,"wait":26,"receive":100,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css?ver=6.5.8","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css?ver=6.5.8 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 494651\r\nexpires: Tue, 23 Mar 2027 18:28:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2u09W9g%2B1GOoaSINPBv%2FZYbm6pjWrVuu5RvHWgy54w8ABRUPX3AqFEBHS9cBXG1w26nt0To1vM8nPmwptjAF%2Fko%2FZB03RpuEYrFSDq6yTC9CaGhGtRfqxbDaeq7WfTqi59gYJs8u\"}]}\r\ncf-ray: 9e61e4505c4e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-24T11:40:50.109204Z","times_seen":302082,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":45,"dns":7,"connect":1,"send":0,"wait":8,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets//img/logo-flower.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets//img/logo-flower.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12864\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:23:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faHzpC1em4y0R1i6IucmhRy5Sip9cMYgh0vvKfrC%2BFKrSW%2BMaJHoVscrF13p8pEORAhQjjWiBjJBW8Q7BeGx%2BZI6fPpvb4ARZ6xIJn46V7VOa2BWIyU7uOR5vJi07yplTh8OsDr2SJRRxoM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a4c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 170, 8-bit/color RGBA, non-interlaced","md5":"dd408bb4e7c2c9ca5e7d82dff22bb770","sha1":"8465b68427e433e5528f57d2d734bbae58deed7c","sha256":"bfe7bfecb5a237dbc7d287dac35044e83b5b268591155230dc7b1e08ab2148f5","sha512":"c8ba5f0d5551043e31842388e4bec5111ea50bdf33bb4aff61ed7eeaa67da9d854c736797b219f01501324369c5cd44ad25633f2dbf01c2ebeff990465c8d1ef","ssdeep":"192:LpjXaQ4g34NEKi2UYjTPc+M1NeyGeXW6rxeOMuI5PExuzQ3qxTUlhO5HQwFPkz3:yFOL2pjTPcj1pWcxSYVoPkz3","tlshash":"d742c00188c4e715563de63535aeb833aacf5c041b3eac1c494e9cba52338913a4b2ff","first_seen":"2026-04-02T18:28:46.406246Z","last_seen":"2026-04-02T18:28:46.406246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.12.1","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.12.1 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2422\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 27 Mar 2026 06:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebPRZ6vRIux1zNlATjhlo8c2FfFXJl%2B04NfJz8uUAsKmEyMxf%2FCTWAYStJ33Q6Mw1D7Um8hR2vYhE8ubdzZNtC6YH1JSXJQ6iXYanAZ0NhpTyPwgj7l%2BDqwntyJ2vDJPLfUR0sPuxUh6nMQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e452ba900b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6543,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6543), with no line terminators","md5":"0efcab141752062ad5d773b6ed954d8c","sha1":"cbe81c7d82c8c03b06ca42007b91b02646a60724","sha256":"663280c5c176579a23818daad91342e5a04614b336ea642dc4715e3707074e60","sha512":"31078946e2c456fca7db0ab160f31084f55a30b3bf822a001eb94a636159993cc85c0638c5a4e2895e624de0113244032f8f9549a94fd467ec366c87c82534a4","ssdeep":"192:IrKG4shSuvKL3+ya3vBrPh/9Ckh/PEkmcXY0R1kGIe+j2:Irj4shSEKL3+ya35rPh/9Ck1PEfvW1k8","tlshash":"7bd1d76c3695747743fb81e315af5250a2322789790ac984f928d8e328bcd5707c7fa8","first_seen":"2026-01-20T21:39:44.943355Z","last_seen":"2026-07-24T02:31:53.794587Z","times_seen":2752,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/03/VERISSIMO-BATISTA-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/VERISSIMO-BATISTA-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5427\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Sun, 29 Mar 2026 02:55:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXnVdVZxUzrBIDu7%2BWTObY%2F0a0Zd8tYxovY3PHkeNlsYKjdHoApUiW7ZZWp9%2BqMHGJySGV1RYLzWn0BrOvzFN3YmUM7AuBhzW0nhzcp4Buth8ni%2B8kqCwGegdE%2F3uG9%2BZvwtHKR%2Fvjv0Wpw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4524a7f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5427,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"33822e2885f76c888910d934b6716ee4","sha1":"7326e0d2a1987cddd8f91b7b963759e7b674394e","sha256":"0b4e6c772330e1c06136942c80b156f6a92490c5b684c23e50912ca9630dbad0","sha512":"c6b6a4f8de420698dfb486397c8ee0cfb9ed1d8a7cf4fd4b1d4271b0137603f8454259187f6c4558cf772b2dba70effc627bccbce13bb61ae55fbcbc33169b4a","ssdeep":"96:LGi1cKrzu3JtfQKtoL4Mi9s1cZEiubcVJE9TjXjrLNlU66gynt+2dZxKjHyVKW2p:LGi1cX5tfQo61ZTjXjrb1EntPZxXn2p","tlshash":"adb18ef6851b04e9ffb52d3c89da14a4593eac0c15f6cccf3374c4a8886c3e005ea920","first_seen":"2026-04-02T18:28:46.407551Z","last_seen":"2026-04-02T18:28:46.407551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3542\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 01:21:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LwHHrHfZlx7ktjR3nUlXImTWujbtAq5cAC1ZsPnV%2BD7gDma%2FGAt0i3gRcrm5YG7l2Vl%2Falx%2F3jXWxmR5d5QsBH9l9FdrCiyuX5Gm9obh5xrE71sK93eEMCRIiw8kF%2FrV3vfbjBHI5khUWtQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a8a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-24T11:36:47.970687Z","times_seen":260203,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/wp-emoji-release.min.js?ver=6.5.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:12.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4676\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:12 GMT\r\nlast-modified: Thu, 27 Jun 2024 13:51:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYnht36uB%2Fjm4rjsheQ28IL0t%2FE7DponvuCcfRLOGqiaR8AlQQPzUPuv5sfaQ5B26SuZzLeQeiNrYi2qXAddrEwI4QPSH0cHAxtMeE20dta0MAfa0qiTb3Ko5lnBhXx%2F32FUUAeagEfFmCI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4581acc0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18726,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15752)","md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-07-24T11:27:58.921102Z","times_seen":102346,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:12.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 371108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:02:55 GMT\r\nexpires: Fri, 02 Apr 2027 10:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 30317\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":871001,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-06-26T16:18:04.305661Z","times_seen":18620,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:14.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://haddadorganizacao.com.br/\r\nContent-Length: 1750\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Thu, 02 Apr 2026 18:28:14 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T11:51:01.918502Z","times_seen":17501236,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/04/MARIA-DE-LOURDES-LANZA-FORATO-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/MARIA-DE-LOURDES-LANZA-FORATO-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5653\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Thu, 02 Apr 2026 18:25:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvgZAQq4FpGDbp0Lw%2F3rb92IKMhB9glc6Nw5nojzeB%2FV2ApqwCxpHQaiWeuxGsyZVoGoYZ1NuqFeliVGSrBRjxNJ2bUzYb0buvNBrykhWV6YsOpn2avWNm0dOrRB7SDtx1FpcrBI5xlTSuU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4523a7d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"6c673e6f26abf05719ea50c7bac16960","sha1":"3949939f6ba7dc32a3526fffed8dcc06a88adab4","sha256":"8ed2927b9c8ebd128300c66ea9c93b44880096536ad9b5834e853f65c5d128b6","sha512":"be480477600467ac1cde88015041a93238a19e50f31d59c4597fae0a53d233c63e21e213badbbaad0602d745c7843e3ee8cfa2925e4cfc161aa728943900f8c3","ssdeep":"96:L0TEM60P0y//az/rRNYBN02QPz3oiiZw2CmVhka3X62xDuxqhUK3:L0QMfj/GbYBN0573oiyVbX62Bp/","tlshash":"34c17c67f611dc46dfb6bcb889928952470d2ec0098802711ff3c856946f0d8ab07aaa","first_seen":"2026-04-02T18:28:46.409837Z","last_seen":"2026-04-02T18:28:46.409837Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2018/01/l-villa-anna-300x214.jpg","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/l-villa-anna-300x214.jpg HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5391\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 10:06:29 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OW%2BngHCyLHEq05WVBIC7I9m0Xfbft5jiTJFHWeknAeu%2FrmKbTUV0mWYU8Sv%2F741m5lfIYIwz4h1xoHuM8pGmhTHQLhcamumt%2BmOSxGjk%2BcOesmGpQYiFWmojrThYX9dLVWn82AUF0rVgzNs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4527a850b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5391,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Optimized by JPEGmini 3.14.12.71901706 0xc9fe91fb\", baseline, precision 8, 300x214, components 3","md5":"a6a5232e3eb033596787e6f1f479421b","sha1":"6b1704f7d6a2482f5c071162365675a4d8b14731","sha256":"f6fec2b2c270222ac2ef46369dc07d4b7791fac37afafb0ec13823912c013c2c","sha512":"007ee78b2e6f1d6101f0457fed57c319b12de025ca491b816bb9071dca8bfba65118c4f5b887349d4652d3e31d2bfa707bcf1c377120321ad96c837c1a46bf67","ssdeep":"96:10x2OksV/JNOp1c3sqY6Rz+lw1lY7AW17ksKSfa5bH8H:WAOkC/JNSTWV1lYkU9lC5bH8H","tlshash":"52b15eaf6741db46ef990e7d161a7b084d02ad20746153d6b3f3f8082d948cdeda85c5","first_seen":"2026-04-02T18:28:46.410799Z","last_seen":"2026-04-02T18:28:46.410799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment.js/2.19.1/moment.min.js?ver=2.19.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/moment.js/2.19.1/moment.min.js?ver=2.19.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15129\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03f26-c841\"\r\nlast-modified: Mon, 04 May 2020 16:13:26 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 85573\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pEZnE3G8EysgfEH9UcGmwhn6VE0dx9PVMVhMDmKhg7BUcqTJWJn3p1xyEw%2FelEiFcJecUNFPUsZn0BXvPOaZcC6jj80PQsMa4bna8oxuDx5NS3u0MzUY1%2B83x4iEaTeK5tGFgXCg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529ed51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51265,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (51265), with no line terminators","md5":"8793f63b81247c95dceb2edd699efbdc","sha1":"4e6718addc8fda68e1de3113363333c6f4d707b9","sha256":"cc6f2ff8d5a26719a3362f82bd46276702ad1f316d74ef1c00a508741f3e53d2","sha512":"0f3e333bba7a32b17e55c383e8f51b034f212b5aefd210efff01aec525232266946314722b680b0ba790595ab20cdf483355ff91403cce4ca4252fe011539ddf","ssdeep":"768:j+2V/togj4Z8wVF3rSRtrFIRlaVMfsspqdesO9BEulko4Y3r:6WFoy4qC3rCznUss1sqiTYb","tlshash":"e93382ca3646b122576612b5083f080bf33d5899580f4e1df548e9e93879c6e527bfbc","first_seen":"2023-03-07T12:04:29Z","last_seen":"2026-07-23T15:55:02.715487Z","times_seen":1486,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/slick.min.js?ver=1.7.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.7.1/slick.min.js?ver=1.7.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 9216\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd5-a68b\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 624815\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDvUBKK33Ob4FqdYVXz1EBMQ4UmTiH2TSbBCJyVHsHXv8d8ck7CfY%2B0nwdXmz%2FDpHkWaKIhd8MBaCwwWi%2Fth8aHeuuMqJgyEX8tCYVVdZVUbOk%2Bgg%2B3Ha2QdT7aPRXvwkistaYYg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529ee01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42635,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42634)","md5":"dddcb86f38674ab3fdf13ed66635a5cb","sha1":"4310dfdb9412e0e0be9b0a121060a5f2f80e85d3","sha256":"05c732e60d7db00915ae57acdd91c0e13e223e1358f7ed657b750be9c6d3a5aa","sha512":"983161741f5756e0f9e24bca1625ac2593386829cb795ead5f86c6b300ad308a9fccfe02f571ee1abb954167d672c16d15ef69e36acd419a2a2154966c012896","ssdeep":"768:HrkkX123A5OHitaSWzYdlNWYcx16n7YdXRRMd2KYCQCW9Shb1ez7RFmYH:xZtaFYdlNaNqePiYH","tlshash":"4313a549d604276285d721e62105c40eb3f7fb3cba22c0e435c9d3ea646ed4896d7bfa","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-07-22T22:29:35.184623Z","times_seen":295,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js?ver=4.17.47","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js?ver=4.17.47 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8389\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d8e-966e\"\r\nlast-modified: Mon, 04 May 2020 16:06:38 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 727125\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j99yiYK8HOaA45H580GRZSFnr52wWIrCxTG8exutxfkr7RBe6cKsMdDmwNmb1wqYlczx055b46tPfc%2FtrasUkPCHAqkCyG9Knq9Rt3GQxNodHh16ir8DOU%2Fgo3jin9opKZ1N2HAQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529ef41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38510,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32039)","md5":"8a36160a466cad1a9e414321f4784baf","sha1":"4ed91e4ed7e1a2a7e5f05654e2f62695c9e6ce40","sha256":"e5899ac40c0c8c8a4cad594af3863ff8d8c2a4a9c561af1b59605b50748119f5","sha512":"1837b2dfb459031164a45789a2b114c0da086e44f0b320bbdfa28d498b9cbb55895852bda9377362e6fc013c64b6be83c247bb9db15a8a8ca9cdb0ce43292846","ssdeep":"768:+85tRKDmhd/onYDM38NvdyMmpu3II1R+qlyTo/KR6MJodCBSEpfh6Aq8Sd4KI+po:z5UrsNvdyoII1llyTjpWnvAMLI+p+7","tlshash":"eb03b604b1b1729795bf7495102e6507e266cc3efc59487168ce10b83dbec89a1bef2b","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-07-24T12:29:28.168288Z","times_seen":1644,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2018/01/slide-5.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/slide-5.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 358631\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 10:08:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BERhIHo71k82DpSzVuNUbCwB%2FCzkL5y2Np%2BcPKPSc9j0HixKcoWOXDkkgri3zQ9%2BIu47ryWa3ySMot918CfDwUjlTRLa%2BPuDveFBUWkrUpy7fr0UzuqVEBWRWczyEmQDQH5Q2y4M0EBkGM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a970b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1772 x 851, 8-bit colormap, non-interlaced","md5":"f0075895c35fe888266d077241be3efc","sha1":"82840920e08710b57e469f40c175bede06c8c565","sha256":"9a4d00fbe05ea967d20f2ca666385c6696cff157fadacb469230f4c8d62a7c18","sha512":"52d0b805dec5614dcb262f359339a9ccb95a555190361864f6f85233e01cbf8c8cb66c68505b67664f247b3a6314534bb5b732bfe3d8cd9427dfac1b9cbf6d49","ssdeep":"6144:ClUpJqWyltl4DnLr8RveXjgiX/H5ND0pobSwdZqkoTZ9yW0idQbT0EjDAKL4p4:CGpAr+Lr8ZeMW/HWobSwdDoTKfzgEnD","tlshash":"8574231448122524b25e0fd7326808a8efa772a05fccbdfa236dd604f56e3d62fb454b","first_seen":"2026-04-02T18:28:46.413806Z","last_seen":"2026-04-02T18:28:46.413806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":386,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2022/08/jardim-da-saudade.jpg","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/jardim-da-saudade.jpg HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 547282\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 15:40:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fvu4DzlBCbSa3jpgFZ2uZKl8IjnCv55POP%2B6b828E1sOmTRMpNnhl7PqF2%2FuFQioX90TjUvGfiZI0xEJDmjsEz5s4xwsrNhatDjA3%2BvdSO0G83lwaKkSbTEAcwG32n5kPjySD%2FesFkGqnN8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a990b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":547282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, manufacturer=Apple, model=iPhone 7 Plus, orientation=upper-left, xresolution=190, yresolution=198, resolutionunit=2, software=15.4.1, datetime=2022:05:24 18:10:22, hostcomputer=iPhone 7 Plus], baseline, precision 8, 1280x720, components 3","md5":"7dfb827891a68192c526668837aa1e9d","sha1":"10895b3d904d7060508f74eb235a844ff517e055","sha256":"f0c6b580d3d9c8feec725d8a67e5790b3920b1a5946256a96dfb38947a946c39","sha512":"214f2ff7104633abf6ac654ba853019b98518d98855a2a1eb623fa2851ef383247a3e3c3edcfb131db4d9d4465b18c8224357d7b9527a40dada5f7b0da00bbbd","ssdeep":"12288:AJBgCECAkr/D9jBwvkKLRaxi/R/tZvrHFR4TlHy+5JDJhgATcBKdZku/:ZJCA0/J1pKgIRTjwS+5JDJhg170","tlshash":"bdc4234b5fe93cddc2ed8678c6c6e7e8cf2af3180f018899d2a560b49f25134574879a","first_seen":"2026-04-02T18:28:46.414658Z","last_seen":"2026-04-02T18:28:46.414658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/js/i18n/pt-BR.js?ver=4.0.7","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/select2/4.0.7/js/i18n/pt-BR.js?ver=4.0.7 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 426\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fcb-38f\"\r\nlast-modified: Mon, 04 May 2020 16:16:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5X5KQc5OBXtRwBz1vfpvK4ztOyi3coMZ%2F2iQOf3EpQrkYsuzrCy2PEbO82JRujcN1LXdWnghif0pMXt6vqaKIK0YaSgHXLRtFQxw4I6e9h40y4msbiwkb1jdDYLhQmzqUR7GXq8B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529eef1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":911,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (822)","md5":"455adefc29843859370853eaf55e0ba1","sha1":"50a3794ccc3ec0ce500e0abd97e5b597b36b367e","sha256":"a554bef08b5984947f8395bca02c3768defcb32c08d4db67200791526050f928","sha512":"4875bebe9edd9a10e4d99f0eedfa4528517e15510c4d3a186703b19b7db397c7b81170aa46699587df2d0f1f38c5f66f67d17bef91ee540c29864a7ec7662718","ssdeep":"","tlshash":"3111d0ce39c1b04466533162687f350eb52a5d5b894cd1d9d2671086fd10286c13ae2f","first_seen":"2026-04-02T18:28:46.415609Z","last_seen":"2026-04-02T18:28:46.415609Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets//img/logo-azul.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets//img/logo-azul.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 19969\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:23:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9Bu81U5EiCgpmxlxWDYr9W4duG34B6njXkk0J%2BChjMbxD8gNEpxZnj8iZh9d6waMKEgAlUSeM05bsc%2FkGuy%2BibUurNvBnEvSHpPHf34lMfuJyDTcC8cRhoNg0L9bRHguVU8IwSytwLMnIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4503a480b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 663 x 192, 8-bit/color RGBA, non-interlaced","md5":"db0ec78798294e8ef3a9406ff3420d9b","sha1":"259f858f3b6d059b229e78b5f12d50655bc863ac","sha256":"98cb19fec2cbbdc75cf2d4d0759b93bff0318019c4bc04f7aa147376b2b68e94","sha512":"65c93b1d68cf99903f05887b3f65d5e2c39bdc658455440b18df3ce7ecdc79344a940293bc0a864355c3d38254072db98a32daa565200adefbca76707bea0b9a","ssdeep":"384:cdHvcNNCFVU/8r7+aQEUHV0vh+IXG9X7EL6DrEkQOIayEWRZL7:clIe9r7IET+9rE+NQOjeZX","tlshash":"5192d10f38144b8cf8c72934e7e92fd264b90fa5cdaf5426e40b15102283b65b4b47ca","first_seen":"2026-04-02T18:28:46.416441Z","last_seen":"2026-04-02T18:28:46.416441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":217,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/04/logo-fisio-300x158.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/04/logo-fisio-300x158.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13029\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:51 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4K1DC4Ug1lCcUdysYKhyhsrEGJSEBY5wWlBsgqB%2BqiC50HiENfyxE3Y6U20kwuE7aM4RiQGRcpzqz3vQxbiX%2F4Vmz3ibdQQGl2ia89eI36Z%2F4EPoSU4IXyG2O5X8puPTKDb2N78yrSsAw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4503a460b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 158, 8-bit gray+alpha, non-interlaced","md5":"e737d2020ca358f0b7c5d1ed631afde8","sha1":"d511116f2911d5b2553d73224211562791ad45d0","sha256":"02da3d637c695ac764bd22d990d6b0c60ffef066afcf3a12e5cef4216cbe8c99","sha512":"9a2a9ab01520bb35b8530e3dc36588713b23be769b548bee037edda576883c66eee2323a0a7957412d0c6c4642d47b32254fc74d2c15cae174c6043a6f69e8f8","ssdeep":"384:w3CaJgz7U0FymdQPboIfSyndFVezMotd610u1:w3Iz1FyVboIfjdFVxud610k","tlshash":"3042c07d22d208e03bbe434a9d267ccf8b8a1b80ff213678cc6f164166b9744dd1413a","first_seen":"2026-04-02T18:28:46.421204Z","last_seen":"2026-04-02T18:28:46.421204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.9.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 417\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:42:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEJRAAYj79YXXA7Y1DRnIB5LB%2BvOfm8OufESA5RbB5GBfPobzUBGIivTwUa2zgeuwtSOWYtHamfeooVaw7jNjn7VuzeXq5SkA10ji4xxuMfgTSilIXr4O%2BM30d97CqIrxeAMypYrbd%2Fa%2Fp0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e452ba8f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":934,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-07-24T11:40:13.942593Z","times_seen":109344,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2018/01/Slide-7.jpg","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/Slide-7.jpg HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 321623\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 10:08:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O69Tz5y1rv7KY3IEangWHXBFEW%2FN6kP2BGHHFl4sES3E4S3m%2BHphBL0mFV5ogx7g8ZpuSs7pXGhp130eAFM9YmZODBjr%2BXdJh8sEUT6MFd49qR7dtmAu4%2BolI7f%2F73z5hrGp6QIRQ84IbGo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a940b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321623,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, comment: \"Optimized by JPEGmini 3.14.12.71901706 0x82794a0a\", baseline, precision 8, 1773x852, components 3","md5":"01d76d492de0ede7646d62e1f0483e5b","sha1":"a5a133547b12177f159c0f70ac133d727cac8800","sha256":"d3208f929a36db7d7f39a753b24a8d1b4d8897b92d38f30ea7375b95e9245c54","sha512":"9e6f1f5f1af088d23017b8c6af1495fd48a1214447d974ac27e2db2da785d3f819c5436e3dad5feb77cb65374048e14cfdf4179a707643bfba5c9b697091e0e9","ssdeep":"6144:uSWfrNrUk8VzCXXwL5t8we5gisFhXdqkIzc+gMnte4rgkMQyuY:oTwhCn+tcoliJJn448DSY","tlshash":"c564239a195b08b11b714977fcc16a1770a2e139b26030d4bfbd2d619f09b79b4b833b","first_seen":"2026-04-02T18:28:46.422714Z","last_seen":"2026-04-02T18:28:46.422714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:12.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 02 Apr 2026 18:28:12 GMT\r\ncontent-security-policy: script-src 'nonce-5PyNMMiKLWznLnMRAIqWPQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54465,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36028)","md5":"09d61227bd40cff2e048f974c50e5da7","sha1":"77d67b79b0149eb1120034a8ac7192399211dd2a","sha256":"7ae6ea592a099bf9784d8b3d5fdd1371f4a79e020782fd02001e97233f65833b","sha512":"772f16921f47a05534a398433441adda07a285aabac9d693604853db007d28c029fb73712a1b7aa25c9370c2e59cbbf73027df4a93d8ca4a0f7ea09353944f7e","ssdeep":"1536:y+kOdJcycwFDUp20kK2ru4ImgxbTOUtjw:y+kOdete22ruRo","tlshash":"03336a1448072416dbd74de223da3f24fa2d8211724690b873fd57a7aed7dc362aa39c","first_seen":"2026-04-02T18:28:46.4235Z","last_seen":"2026-04-02T18:28:46.4235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:13.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Thu, 02 Apr 2026 18:28:13 GMT\r\ndate: Thu, 02 Apr 2026 18:28:13 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"609d186f1b9b4b02a9e7b2bdd0dd0705","sha1":"f07c9720b1747df33bc46d050bf67b75964337bf","sha256":"c1f7307bc2da4f3f9ac325993d250922791e34b948ea9fc0399cbf4c5b259f14","sha512":"293702c92c412ea1e6f7e2f6941598cfb03bcad4c4297214c26fe17ab75020ed08306f51af8a63c28ad6cab9dd433f06a9000255af9584bdcefa27fb2f177340","ssdeep":"","tlshash":"e2b012670510cc1c0c008f02c9a7d3f8f1029025dfd0c0f080241fec4218067541da01","first_seen":"2026-04-01T15:23:54.036142Z","last_seen":"2026-05-16T10:38:52.872533Z","times_seen":15156,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/04/logo-poli-300x158.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/04/logo-poli-300x158.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12197\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYtKcQSOtELSXA21TgAJ54L0fHJfTmBbuE3JlbEW%2FO%2BtAjOu5kXgiz7FHGch2b06DXmfco0Ljyyc0BDuQ6LWlJ9cBe1AtGvDaGTdcCRBYvscYFQubaoXfbPKyPcQiOJkEivUtpq%2B4qJA%2BOA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4503a470b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 158, 8-bit gray+alpha, non-interlaced","md5":"125d12ec619325c3a4fcb2eac02ccb22","sha1":"626dfa69f2acc5f6839789d6e6ab98f5cffce641","sha256":"6d7dc387dd8f97d7c7144a05d7fec9fde2c3971e9c3f43ea7f94ba34f868765c","sha512":"09ffb16e5417d9e2d893b22553311b4b99c0f6a2fe423cec97d40b574d180377325a77cece19006053b9338c426eb8b16e822b6cdd0c067ab7634977601264d2","ssdeep":"192:R5Q3WUSIEvCh7DkRfSUgeloylW1vo82626XtCaoyBvoLQRKZRpxtJ/VnJeHY7kyt:R5Q3RSSUgeVsvp262oDoyBgLQRKZRpxH","tlshash":"7642c0fc1599378ae91f175818b882fa129475824620f4c3231f2c9a9fb3b6c952ddcf","first_seen":"2026-04-02T18:28:46.424968Z","last_seen":"2026-04-02T18:28:46.424968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/03/material-icon-1-150x150.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/03/material-icon-1-150x150.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13262\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQY29c9qv7o1UZ8NnSXK%2BJR6E0XsCPIYcxbta%2BQbtUTkqZ5nAyXzG7uRYlNsG3LfXdgnap%2FmpP8hoGXb343CIRgb6QXjhVlDU09xTmRSOsT9JIlEZ8gnzeaYKYLnx0j1QN%2BrgubVpD9Tda8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a500b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"ceeb6bb5f3a90b321a8415328b6f709d","sha1":"552d563a5e4d9e16bc9fb17ac4e86e6b054d1915","sha256":"84aa33887a5671106bed518c0567d691a8025f427d04bb0db26772eab8e8e8c2","sha512":"d72ee859ae74e08cc6847530ad91b8a844e2e4b8143f3015e31d85d492c9611bd828d9fae546582024416f1f01aa61e8c8ce5485dbdbd271e6a7e6fac65d5328","ssdeep":"192:etN2ZThwxEgFVjqn9e1++sLFCIM4YNFDJWxpgj3GW1yGANTyItlT68+1gEFFwmgO:eD2kEUVjAFLFyNFVupgjaN1tlT6PFT","tlshash":"7f52d0b2f2c2fba902155249da079183c5dabcc60644079327c77523609cf5fa5afcb8","first_seen":"2026-04-02T18:28:46.426002Z","last_seen":"2026-04-02T18:28:46.426002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2018/01/MG_4594-b.jpg","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/MG_4594-b.jpg HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 203945\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 10:06:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udrtex%2FYhhxSRytIrHCcAj8bcZkb%2FlcA1%2BXTJqsbHJVWf2dUoafiE%2F04g0Nur893MwcTiMf6%2FXHEwAjMGx0bO7vGoIlIUVsDz6VTs3DeQ5QN6XRtSg1sMdLq04P0bLCkR77B1J1ATHW21rQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a960b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":203945,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=1333, bps=182, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=2000], comment: \"Optimized by JPEGmini 3.14.12.71901706 0xc1ce644e\", baseline, precision 8, 1066x711, components 3","md5":"fff4d838e116f0c2cf2580b4193a77f0","sha1":"1fcab4c0c61503710681b07769bf062a9ea6f0a9","sha256":"f2a9210034c762585e6b6141807934c1b198fa7ef487b3fa7f04f88ba1b764cb","sha512":"142fa0957db8d641f5fc6f9f055bcd98242ef35a55b5ae4917a6a3eed4d690409a9ed699e1a265c2390fd9ab819817b5f44fc23168debe4cfdc794b720c4d9d1","ssdeep":"3072:X5a25aR1C7Ni8ZIctKTc65cQQokdeqz0gJ6+yW9Y+hCm7pkvCwyBGygY43wlrRNu:XE2EMa3T5cQzLqAhX+cgkdyg9q/4p","tlshash":"46141228fba727a3edd61e3699eeeb905b230768d7530443718d741517328c5ac3b0aa","first_seen":"2026-04-02T18:28:46.426907Z","last_seen":"2026-04-02T18:28:46.426907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/reload?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:14.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /recaptcha/api2/reload?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuffer\r\nContent-Length: 10037\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10050,"data":"\n\u0018kUYUkUlSyqkjTSMaN2w3RaOh\u0012Ž\f03AFcWeA74CZSA696HPekAVVRNeujc8cTj0WBI8rdSrY7_qPQmkyhrAvqIQI4gRgF-__tR4PoqmfHISaYDc4ZZLzIXjbjx8vRX3o72fhbG7iIC5BUg_Aui2cvMQcK78fga_WU867eHPbOHrr-8PlrB4wbVTuQIAWsUzVSE-2jSVtkrnYGj9FE8QA8uI-9f3AfbptXq4Y3DIyxG81zFlQGkjnl4603Du8skxOFtdKOJ4xplQmXZO5mPKtsf2BakCLOs-lm-mWpG_YlEjRJveSv0NkmqRNqRgbjd1kvxR5rBld4waMXkkAkgkyGdIb8a11xnMeaQE0133xapgJVRBnoPTcZvbYGHRCceExfHpA3kVFpisqaWoHFONCa1M34R_K0VPExdl_igGniqNYCA8p4DxBFtC6zhk2rbUGVfVskr9qMzfyFB37aXrcr7Vgqm0SCUnPL1i53KXUGYt7wx2_XDx2cWJSIy3mAy7FthNrLPISm1uUjTLpCGhKiEo-ac7sB7UzAqXSzsNCC42CtYm-iQqCich8O3tYm-HBUZL8qsOy7KnFNA6t-OPeOElCT-VyCU35xiQcwRU9RDIVgCp93kHxYWLfYQkBo3EIbPwmGKMRb9pqYw7HNDq3dxmndexa7L6WIYB8y90qrAc7HFxFDbcZWJ36fBEG_l6PPtCmvGfmKblBoHgnw3HVni88iecvwcofisADQ_E1rahpEVkKToPA20jEnI9q1GmMWN_3Pazfc2Lh5-ZmQcJc-YNe4-Z1r3pwc96QS5lDMZIMO386u0Q0oLUv3ly7jNY47fkIncdu4DodGI-0fjMbAA_zZOH8didGGwCcG07nIwifvxyHxlJvVGo8bHUP6t2-FbmTp56_Tv4r0bw_EMJzPnaCz5xxZhLScDh75ZHw9HbTuXl0EQo-dyXfiFCApVD7gLAFK-bWLNbl0kqiJRCEZhkacSlOaaiD0VneNoyLSpFBsglx4-IGLDw9U0akJ_VlJcsLVohfz73Hb3wcW2f8ORBGMt2N02heT6aua3A_vmfcCvh7FdOo62qgJeUEsyVD-4n4I5JRFpEl7JEtAxRSW_qNFvcfLXf74HDDm9I7FrhvpM-EFjTA5JXqOT-5h1p10Hg-Wic4FQdBK5bQgT2UzR6IZ0clfY3cM6RV-zhwvorOWO_AsA_xq1MrM2Q_KQWudrWd7k7bAxczUahS2wSU6QP5TdY9FcAyBaEZC1EF4uTHUzSK_pu4XFn3TE9o6NzQaRLGTaripUUSaheMsat61aVgXlTBK5cpYfevdnof5V6i_D1MO0PR_GkozvMhhmm6wG_-FKjtaOFF3F7IrvhJ3ms77WdC381fAF7hmplUsA7m2ydTAS5LcL8BtHDihDve97asy3vzgNSavQDbyEGG9kCqK-8NsnQjUcnuov-_C0ezRIJtBGHvCEQZi6H3bw5gpV3FvIylZQ_mKoKLFW8fbgXyarnrNFqaxOABzGBbIu9Xd4xAkLONJwaNWsL55ru5bTJzSvRIwknIeRNS9iM9QR2YsyC5KGM_50cqIddyL*\n-2670753152\u0001qB\bhomepager(6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb‚\u0001¿!0wKhM5Gz9TiG5QdIj9o4Wp_jLY-t8zVQlhkvbKcRa5rlR2Wq7jiauP5Bj-4MUZTjQWOk6DaUtvg_iegKT5LdP12i5jCSsPY5h-YESYzbOVuc4-FAwwhjjXAJV-a0r31DhfftzKJRkzV8NazzKIcltBJQ0pkTeYtSF7bgciVW1TddeGrU5tXYMmy62UL1455gBuSu1ds1D3rFJ0WKzhh6mN4hb83sMXTDIUOEyBZ0ltgfacvqL3K9Hz2CxhBykNYZGnm_nnDSBJsZ83HsMrEHXZP9pB5E8pDv7jA6KQI1j5oTQoAC8FNta7FgCkyGuY_CE-V_6kiC3Rs9q_YZEpGS8jR9_WORO5VrVcAibLLtF4HIFuhraMgOKB7lIvnTaWf6yS-ZY4ELddQuUJ7JN4Gonh0efcPiX434UqjjJU-6AEsgo6EARkznGNehX76cpxDC8bQ9n-HINpTvEV-J9D59Xt3fPoB-5aKQ_1Wr_kBSvQc-J6akB0jcJReB2DZ8stVDicCqKSqJz2Gs0l1Xucdp_AJJKwETVc9RvB5gvukTfcfu5GdkxAoQmwBHGchGCILtH1Uv4aRWHR9Jn34kWWvWNH69FymX2hz-fX7eIG3pSwT7NP9pwBZoqr0rbbSSERJxt6XwhcQykNshU4XwNnVa2ds6fG9FFoz7UaviME64-04joqADRUAhE33UMmC20T99wKYlJoXL7meWAGK43ylXwgBHKKupCE48GuReyT95u_5QetkPRXPeLG9Ex8Ukaqki5Pb6X6Koyq2a0ex1rD7pB0VDpX_afOMlUCmj9tkPCK_yCELEkuVr5eQeOLctR2nYGmzW-IOZN-44qvU2pKNaDFoH-rEXmWg2nNbw0uXvLggm7MKBm1XoWkx2HIrpO4Wr3kiK0bMyfN79QoWG5iuZ3FOQqB3LhkCakS-mDAaHrhhyzRdJb9oka0DDwSBmiGownv1XecfyXJ7Zx0ZHpulXNOwdP6oERqDnJV-Z-CpQyw1MJaSmBUvRjxWD4iSCrNdBg76oK3XX9jt-f98g_20oChBOeIaE80mv6hx6mOchi6ncVpS_sTAxkNbs8vojxkUHUOL569Ykzk0zCXeuaD7BGr0X9VCKEPqNq5YUajP6fNrFZEHolp0rTefd8HXlE4lTvgSeh_MZE0YAMoQ29T9hc7543pEu5bt5YCLI8nS3jcRppNtdlt4vjVfCMGKs40mH0hBaaOMdaD28vh1jfcOuFOq9QoDvZaPSKG6w4y1jlgBSfWrp60qNJyhaxR91s-oYhtED7WxtzRNRrt1LofRCdJ8JU55z8vBTlhRKuLs4bzy3IXvWHFJ04xVgScjKKW-1eI40a1injZ_t6F6QZqWz9cTPDINh3CW4bfQu-O81bDpMRpjrBgxR7LbhdzjrZoRKMO6JCwmLjkD_cW95Y8osbxxzfevBdCqc2227tagF7Jrs1BHXgt0ekW_BI7nsNqSvPdP9vE5VEx1bdbySZIpY-6oQTgRWYOs6M3a0pnjasS_OGNXslokrffQapLq8-7GEZljC2Qfhz7mQzxzq8PcZuJKJVukLEcP12C8RZzUjygzuxYOFVF50KpljnTwd-GqEOxXX2jQmwNso6t3rXhP2xHtZ4Aqb3sC_KXfh96L9QwkP8fwdvNMUfyYsOjh3NMNGDEXQqoirpZeZ5GJIdoVvzZAajHMtnxFsPqx7CPbE2_XIJuUTYZwRP94Uls2C8e_aDMaRF94gYfgidUcE4CX8mpQ3UTPpr-KZJy2izaiCcGo4gxFrhpwObTL433nARvCvSY9R28rdAxTTeje55O6JBr3QUbxGcFdhvxYj5izLgSPqDI4JFx2PQWvF-MqstyVMCYS60Srlt1o8nvRe7YLtm8XRCtjLKcvp7KM1Pu2Hgjid9D9dI6Yf7sRm1Od5uE2cctTbWV-aUGcwwqlDobSuwR7Fv0obpoxvSTtdi2LAOq1fCcwKoFb0k4TjliiCUKbNl0pURpQnYVctb7pAtwEvSQN90CrhYvWXrj_yePaBD7oLljzLWJO1dGmv6n1G5fN183nkPpTPETux8MpJSqnv3kB2rUdBo9ZYEdhGpP8hb5oERn1u7e9OkF6ZZ-ljqsSOgQ8qGDoUalEXbZwltMaIozVv0lfSYNKRM23numjOvM-px0pkDxSPBSQuUCZQtt0zxkSWuIbUyuHUbZRWpGsZZCo0Dk0GgQweFG61ByW_Xk_xuG5FD54jjaRvAK7iAA2H8kxLaWd9V9pY9zCvYb_a0GMpD6VPkZDWkNbd85ZMkbAedM8BX3HcHk1GxccmaFp5b5n_OX_meI5UwxlbtgAyfM8BP52sJmSPgQABYKaFhsi3IXvSAGZ04x10ScjKKW9aCFG0awSDyW-ppNMg-5HH_XiF_MdkwC1serQjHT95MDHH9ijrwRtV7PcQu2ErPYCuBT-Jh0VH2bwXQY-lnAmktjU21Z_SH9586xnK4U-mAEp8ow1Lonf29FeZeDWc_02LBRQOR98NX6kgEdhmmKLwq3V31qRSRJMdU8IMLmWHfa-ScE8AY1Ff8eNZxB54vv0bhcAW7G9szBHT2p1zAV-OWKqMWwlPXhQKTN6tf24PdhRnFUcpy52cHikntcPtv_3o8z1PTYBSlTJhGtorxpzWTWqlE4qYmo1LVOO9rIpsb5FLUatBrAZgkvEDbav61FdUt_l4KlUS6abVQ5nwKmCXAT-Ka-pAhtUnPj-e4MOdC0F4SwUbOR_lrKXgu0Bm0St9y_Ykks0X-Xh52KM9eDKMHtSKdS-ZqIpsqtl3oWOV27Icerj_VYvOGGag7wmDwejeXV6-A_JUTrCbsjB2dDKJh1HQApQykMbNLDHIXkxy-LvCJ758doT3FbOpoF4cq0069WO6EE6EtyFbrogLCGutxHXA-qzH2h--dCck4713da-2AUOJF11UAjy2YOetp3Fz3jSK1Q8xn9YlBoWG5axOhPuRK5o7kjiq1JeheCrIjmyi5L8pi9okUnzXFVhR0NIxd5GQmsxnWW-JdEHcbsDDReOxuFKgsuDMHg_aQO7tQ3JT-hRjAOe9cFmkyh0veS8t9HrknkSzCWuR5AZwpwXbWlu6_H858BXsqdhGnP8td5oEOpFu7jiauP5BQ4YUdpTaHHak_y1IGyBO8d_Ba-bQhoyfbk96NCtk4700bnDjHXKxSBXQMtRbmTw5VBcA5mUT4aBGpCM432Y0Mrxa4GsBv_JwTfjnhUcNsCYhL0XLPag6JObhTzWAOqveoOLxaDWIqnRa-adOaIbJJunDJW-uLLaBdwoEDUx9_UupyA1Qnv0fYKemNJa0-jyWxRtNaFa8txkbvnRpzP59yCpIjdEffZ_hJHLQ8zR7eghqiM4QdpjvITwecI954AY8CoBu7KKx42KtDy1ytgBigMYJC5n4Gl-iACp8ss4chs0KROPVs2rL711vDX-iILs0nwm_wXOmDRbVxBG_1oyypLbFeEY_1wD_mMPxcHMBY4HHCWOR9Bo1SvXIhrDW5WuaGC4gXri-tVeFiF3I-nl4CmiKzBJkmu0jPsxmvXtJ-7GX7qz_Ob_ySKnA8nFwAmCCxApgkuUbNthasaOxrHKI0nC-0KvZWFrpS2mu8Ut5zAIdCsmgisC3UX9dY6pIllyWmPfuW5HpA2XcCZiiQRZhL6XATkvSSPcA_wIzsrFDocAFS53QKlh3ecgJ4Bssm6l0NgwR6RqZmCqIquwyiLsNQ15Ank068kgFuRrkkvjQAYCDEXOR1xlzogAqRZ_6JJ6Y-3UjVUd6jBMJT5GPYdRbBUsNw36Dyux67VvZVIZUVvj7Ncf-PMZw6tXvreiiPIJZiwoImvkbXKL5K4WzzsULuRt2c_9Iu6nQDkgO8F-ZzA1T5ck7TbraGB6M7zF7PRN2fHKdAzj78Yx68MMkw4ZrxgvjEJPePF6j5zGTsfc6hOcFSo2MHnye4CZ4rwE3UsUu-Qt5p5nftuRnZfRWdLn8UoTbDSgq-J9I_BFEaqEGYTdxKG2cUnVnpdAqcOXM_n18DmyO0BZonvEnQuQbHNvg_B4ssxFHvVwWkJJVSoEoBmw6SLrk2xz0JaSnNZe1-z2XxhxOaYOOaJKUttUT7c-eQOd00xTsHZyfLY-t8zWrzgBWiKQB7D3pGtmHwlCWJJJZGul0XkfWlQ9I-zn42miafS_2OIZ5BqB7qe9uuRs5fsHDIei3GUaxt0HwnnTXIN_aPAL0xujfIPtlvAZcnt0rYa_mQFLJCzInpvFTcbb6RKbFCk1OrfB2g_YAbsUbZZPCLGK1l9g¢\u0001È\u0002tbMywyMDMsMTI2Nl0sWzEsNDU2LDIxNzhdLFsyLDM1LDI4MTddXSxudWxsLFtudWxsLG51bGwsbnVsbCxbMTQsMTIuNzg1NzE0Mjg1NzE0Mjg2LDAuNTYyODkzMDgxNzYxMDA2Myw4MV0sWzAsbnVsbCwwXSwwLDAsMF0sWyJoYWRkYWRvcmdhbml6YWNhby5jb20uYnIiLCJjZG5qcy5jbG91ZGZsYXJlLmNvbSIsImNvZGUuaW9uaWNmcmFtZXdvcmsuY29tIiwid3d3Lmdvb2dsZS5jb20iLCJ3d3cuZ3N0YXRpYy5jb20iXSxbOCwzOTZdXQ²\u0001¤\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Ê\u0001\u0003W10à\u0001 œ\u0001è\u0001°ê\u0001"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: same-site\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\ndate: Thu, 02 Apr 2026 18:28:14 GMT\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: _GRECAPTCHA=09AKhCRwiRrbdmz0-bDsiXjLy1czUAFVUzhs5v3ur2rGe6FGD-6QYUMdy2GDlkcstw9xgB5-ZpHyIM_ys8WlzTmxA; Expires=Tue, 29-Sep-2026 18:28:14 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Thu, 02 Apr 2026 18:28:14 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2665,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (2660)","md5":"42be259bc0a465d911e8fa1e781edca5","sha1":"bdecb9c0b56eaaf4ab8ffa66690a64223dc03f19","sha256":"8bc9dc222e55c7eeaf50e43b5f958fd3a6e4f7cecbdaed90f27d3006c2385fdd","sha512":"68645fd01f3da54aaaff49aa7c59055d7ea3b381ba448be5a5037ff6322a2a9e7a38656fbdfdf83202beabbdaaa9ba20864a9de449962b424b99264855cd2c43","ssdeep":"","tlshash":"c5513c96c982cd16e0d030014c0bf8d2e69e95fb45648dfb55ee1d7200663c87625caa","first_seen":"2026-04-02T18:28:46.427874Z","last_seen":"2026-04-02T18:28:46.427874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:14.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://haddadorganizacao.com.br/\r\nContent-Length: 1750\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Thu, 02 Apr 2026 18:28:14 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T11:51:01.918502Z","times_seen":17501236,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T18:28:10.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://haddadorganizacao.com.br/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: public, max-age=0\r\nexpires: Thu, 02 Apr 2026 18:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljuqRMDgq7u1SQaX8D25z%2FdXp9wmXvxa1u2D%2BtD%2BpKVuxxXq4%2F89LxH46sQzovwPkiCoWBunHI%2BKxrs%2Ffi3cGdkkwoY497i67AX6Ei7NKDqxaHVbmhI9ersWDUczY7x7dtgQvygNsHzqsq4%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e61e44af834b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"MailChimp for WordPress:4.12.1","description":"MailChimp for WordPress is an email marketing plugin that enables you to build subscriber lists.","website":"https://www.mc4wp.com","common_platform_enumeration":"","icon":"MailChimp for WordPress.png","categories":["WordPress plugins","Marketing automation"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Slick:1.7.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"WordPress:6.5.8","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery:2.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.17.47","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Contact Form 7:5.9.8","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92329,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8586)","md5":"8ff58b17efb1255d21915860d45ccdb0","sha1":"76aeba436ff04164db33a6d9bbe99b72b0e5d185","sha256":"7d629e4eacaf90dffa0ecef942a064fdebb2426a3fd4c902f906907edf14ea12","sha512":"ad98d9729244dcb8497e5b5d72b45c9d4fd5ad759811797b20cc7aaa7921f4828d2eee24ab66274d5b264abd866fe6fb03fe3294693f69b4360644114fbdb96d","ssdeep":"1536:RapL4OmPYqIGfeTJyMLXXMA1JdIcdxpUC5q/5gyA/h/af2wIVily/kjauG:wR4OmPYqIycdxpUC5q/5gykh/af2wIVz","tlshash":"0993a5b6118b1c3e2fa1e7b02451763dc99faa7ae8d3b9a6b5f34913e580ef0c41045d","first_seen":"2026-04-02T18:28:46.428737Z","last_seen":"2026-04-02T18:28:46.428737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":60,"dns":44,"connect":1,"send":0,"wait":554,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets/css/app.css?ver=6.5.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets/css/app.css?ver=6.5.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 21161\r\npriority: u=2,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:20:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzXDzCPhfY55R5tzZbY5wJE93nDJdUf%2BDIZogWLtqYOMw91BANJdOgOWV0Lpu%2BtS35QKMZ5uAXlKJhNAsXcaiOAWjCxpjNg%2F%2BrlNJPMQiLMa1213HrXjcaacw1fk4R4g4oghwlTYPyGESjg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4501a410b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":229915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a69ec27c674123fa6b8af7cd10d381e7","sha1":"53404dc7805dfbda1cc65901d8a94986b8fe34da","sha256":"28a3a10101f3d9a5e43103e98b5a715d4386a63d118a924c1f7bde18eb8b946e","sha512":"c08b8e2f1ebe809569db1bb6d899dbfe1512d665868bf0c86bb583f9dab2c6fccac039e01c3f24bf24ee9699eb709433ffe7c54d3bbcea9725127633fc43df5f","ssdeep":"1536:UJYA8n8Za+fsaXH4dIs6m+ETntuBrH6wLXJzobZjRY+UiEmmvQeTnEBUay3M:r6fo3Y+UiEmxy3M","tlshash":"c024027aaf8b050db4678b3e6092fbe8a31a5740dd9267bbf0333420d54a5d51f5ba30","first_seen":"2026-04-02T18:28:46.429674Z","last_seen":"2026-04-02T18:28:46.429674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:13.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 18:14:15 GMT\r\nexpires: Sun, 28 Mar 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 432838\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-24T11:51:21.665615Z","times_seen":943565,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":40,"dns":2,"connect":9,"send":0,"wait":12,"receive":12,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:14.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://haddadorganizacao.com.br/\r\nContent-Length: 1750\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Thu, 02 Apr 2026 18:28:14 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T11:51:01.918502Z","times_seen":17501236,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2022/08/logo-jardim1-300x84.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/logo-jardim1-300x84.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 10413\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 15:40:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umfTx0WYnp0o%2BZJU93evsEcI2DYI8jicTs%2BqDgaqFi%2FD2Xau7Elcv0kH6GE2OCfzPOYLWNqsqrJqtIAKdGBvxWaZS5XI1VTba%2FduvWwZaaCEZgKliM41Le9DGz4Zykiu8oRLAqxmvwRPpEg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a4b0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"fec7f65dabc9d3cb892bb7e766833d59","sha1":"068cc818f3f975d7907fedf4228ce742a47a7e2c","sha256":"dc1df02f0ca2e7539891c47ce945c7bc940c45a8c807d8c02a46923ba9adabe6","sha512":"6cc88bcacdbd3cb8d6fde649ecc46c8559ee1643e04ec2608d15535fc27689d553f54f7b663d78253c39381fb781a6c2923e97797166d3ed38b3dd6bf61cccae","ssdeep":"192:Bxnh6Uhxvg59sU1iaDGnGSOqu0hvcWKgqS0oQpV7AJB9Hm8kJG7iaasHWpu:B6Ujv+9sU1OnGjacWZgoAI9HD0G7KsH7","tlshash":"9822b0eb8f4a63ffb5d5025361d2abc13fd06ae6564703acb3271c548f95ba07068143","first_seen":"2026-04-02T18:28:46.431165Z","last_seen":"2026-04-02T18:28:46.431165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/js/download-script.js","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/js/download-script.js HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h208AUbRNbo%2Bz5YeAVQAXJQqrE5L29xTMj2HAAxQ3XU2w%2F%2B6TNnuGWr%2B6OJXFA1FA7LZ6%2FRhgaeQHXiEuc0KjVeaO7b1%2FpLWZJ1KZ4kLJsziyuUioi65At%2BCN%2BOBhgIhhpO1ZUKCGlZNn%2Bo%3D\"}]}\r\npriority: u=3,i=?0\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\nlink: \u003chttps://haddadorganizacao.com.br/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a8d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":72277,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators","md5":"a6563e228a827f7dea5d4c1c27942b4b","sha1":"c2791be6f5734e3942196405cae7266bf4e3833c","sha256":"e5b9d486f238c2a4284b89953a1e3235ccf43cc77db95f071347b6bf13a2dd5c","sha512":"47589d59c7918588cd292af0f4bc5417ec5bc8fae8438def9b29d8e1dd5eba3ed6b26e15f4a4cbf81289b097fda1d1b4811d949d75dad586b5b72054092fa8cd","ssdeep":"1536:yapL4OmPYqIGW0UA1JdIcdxpUC5q/5gyA/h/af2wIVily/kjauG:lR4OmPYqI5cdxpUC5q/5gykh/af2wIVz","tlshash":"866374b646861c3e2fa1e7b01952763dd98b667be8d279aa74d34c13f980ff0c41085d","first_seen":"2026-04-02T18:28:46.432874Z","last_seen":"2026-04-02T18:28:46.432874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2018/01/slide-2.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/slide-2.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 542872\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 10:07:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMeOh1S5gEIF%2BghzoJs4x7TnU%2B5a0uoTrOze7llVCy%2FGVkgoFV3lkwXIgls6THxu6G5sNULZU9Nq8jqJ6PzLreW6ChHknZ4ps%2F9%2F8x4jJccm0kQliTNW0q9GvLE9bOpRnxwXuYWk3m7grgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a980b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1773 x 851, 8-bit colormap, non-interlaced","md5":"0988e27af4cb47b1897a39ac139ae007","sha1":"8fdaed001669316dcf6e9fcf8457bd2ab5730952","sha256":"50b1043a71ccf778b1eca5780e222363fcf8af6d33f442062123307a5b8185c0","sha512":"846aa4fe4d37aceb25ea85e973aaa85a95d487058ea886edf7122ba435eb6c8a41c13a38b81497a218c97e4c7db334c80fdd5d39cbbb8752963c3bed800a1deb","ssdeep":"12288:xg86yZPoj/SaGmKtxD/6+byPBeHv/jXSm0rJp09:i86yZPoDSanKXDS+byPBSrsrr09","tlshash":"68b4238d425d7333d09478bf5828ba04e53e4faded5904c56e72bb066836bc2377e618","first_seen":"2026-04-02T18:28:46.43371Z","last_seen":"2026-04-02T18:28:46.43371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:13.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 11:27:38 GMT\r\nexpires: Thu, 09 Apr 2026 11:27:38 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 25235\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-07-24T11:41:24.211658Z","times_seen":694682,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/1.1.0/magnific-popup.min.css?ver=6.5.8","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/magnific-popup.js/1.1.0/magnific-popup.min.css?ver=6.5.8 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1283\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ed4-148b\"\r\nlast-modified: Mon, 04 May 2020 16:12:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 416346\r\nexpires: Tue, 23 Mar 2027 18:28:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEzSblSGSwidnmc3mo23GxLfYO6qmHwLN5DOqF3Vr95sv2Zr7BoOFY2Noe5e6V9qliw0A%2BwS6JZ63ABvT%2FwTebSrW4U842RFtI1WzhLH13rJIon67vufm4MjUr3a%2F5Vy4bYE1osT\"}]}\r\ncf-ray: 9e61e4505c51568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-07-24T08:46:23.400095Z","times_seen":5027,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":44,"dns":3,"connect":3,"send":0,"wait":9,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 13501\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 01:24:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wObhbWn46pgVFPXUxx827sxiwfglxT1n0QUZhhTt7cqk8%2FWXSlANRcV3QQw8EVGqsuTTRDU%2FQ2AlehI%2BItK%2BwMb88mEZlh1au7C4Qcl9hIU6PscISz6JJ6aU57hAt8gbK5oqfhzeuWh7Yes%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a890b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":38590,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38582), with no line terminators","md5":"92f8c01350c630f414f5d0b015ad6864","sha1":"eab40ab4e77f92f2fb17684aaf44b579a51b8034","sha256":"17b79ece7ef9d1454a90156690d33d64387b67a7a7548fc826012512e287a937","sha512":"c2d619d5cbec24aaa5da29a80031ece9ee65b949f38e00e75ef6ebffa0a38b3fd3f32f271a941d3e0d1f001b90d0a30d3a9cf342e409fe3fb75ac47a3361ff9a","ssdeep":"384:rO70wDgKuJz+ZbNuSPlVTzkRnddaJQUky7nrTDKUgigNC1Qaa3rJBFgTsVNmlio4:w0qumBs/0Xnaiwa6ssUoqAMnwtB","tlshash":"08039589b690b4e302e360b4405f444bb1b79b56a81ecad0f315fad07c7d84ea1a7f9d","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-07-24T11:22:00.628596Z","times_seen":21576,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/moment.js/2.19.1/locale/pt-br.js?ver=2.19.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/moment.js/2.19.1/locale/pt-br.js?ver=2.19.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 833\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03f26-83f\"\r\nlast-modified: Mon, 04 May 2020 16:13:26 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZ4EqTO2JNaifsHgOvLNmdlx4gXW1iEV046rIGtPycOgCjVnOHBRd2ocevlF9KPCStgiUwWTY5RtJMbtz8pLRw%2B0Y5Bh5W5LNb2EnYA%2BHji7kQIXbcEYRYs0uYBe8mojTuG6dxDN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529ed91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"893ce9ce016631bd8de5daeab31f60cc","sha1":"1ecc016bfc64cc0168c79e790e1b821d2bfb1771","sha256":"9d38e7e31748a0d71f64bba56c5841f1618c9056d8ed0858c2fcf92e1e56bbba","sha512":"6edf7ee912f24a35ac595e0e8ff08970479db6d97760183fd6698ee1739badd50063d43919b2a9ebcf8956978103e3ce81929eb702aa8e9f3ec386ffb68c6796","ssdeep":"","tlshash":"464134e113de462247d6166d945eaa803a30cd678d1e3d05b75ea0803fdcd9c61f4cf9","first_seen":"2025-01-06T06:30:04.507253Z","last_seen":"2026-04-02T18:28:46.436307Z","times_seen":5,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2025/10/Novo-Projeto.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Novo-Projeto.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1056776\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Thu, 23 Oct 2025 20:46:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hykUPW74sbadS84NASTTd8Q6kJMnpOiB1OI7xkSRtUnFfoeVRFDnCXYBTS6Z%2FlxMfyk0%2BKVcN3Ej%2FCo4c0DMXzr%2FiNji%2F90fOZGCPwhbG%2B%2Fc69mvklP%2BqhwzE%2Bx7w1A1DM3wtgGXh%2BuFFJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4531a930b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1056776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1770 x 852, 8-bit/color RGB, non-interlaced","md5":"40f9cafc8ed1ef09e7707c226eaa9aa3","sha1":"2d1e038dc4a89eaa9e4b38d0a393694543bf887f","sha256":"a0df572de546af19870cad7dfc369b8d5ba9bffa52fd9c9623083104d122a70a","sha512":"8121e1af870a65b33f3d74765865bd86995c059df56d9848e3a92954741dabffa6b5e30803cf47d1c65600af82df6a76d79f0a308fe712bfffeec9382be75313","ssdeep":"24576:5gcSWO5foqMQiwvKWcOqpsk8CcW7AC6jfr8MEaC5W:5gcZqi2uOqmC6boTaT","tlshash":"792533d6b92ca9c72ddc0beee57bc0e943685735d7b88ac182c5fb2722219c1508673d","first_seen":"2026-04-02T18:28:46.43731Z","last_seen":"2026-04-02T18:28:46.43731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":623,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/slick-theme.min.css?ver=6.5.8","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.7.1/slick-theme.min.css?ver=6.5.8 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 657\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd5-956\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2552115\r\nexpires: Tue, 23 Mar 2027 18:28:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3AnPO2KdpwxXvchvKoNvr%2F7fOYkWRiZ2HSpDQX0mbyo6Cm0sb6vGGGzz0al8ANCnoCj1pQWzo9YDfTxJmUirK5ihIuygPTINjWsgEk4%2Fjt2QVaWmHE94oFR3pryg6H9o%2F3iGiBV\"}]}\r\ncf-ray: 9e61e4503c2d568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2332)","md5":"8a027447d99592734da0715287305e13","sha1":"7c2e6e74fb60177782cf7ae30f5fec71b7790874","sha256":"e21aa5b0d3fd28cebed9e03c5544f4924e11b0c453792ed018720cf8c679b0b6","sha512":"d7b120085111a6064a726d23d1f12ad58089bb2016773f4a52dbf512356e68ecfca439e1ff49d9c6653a0415f069ac6aa22f4f4179d15aa95c0c1d36ee182ff4","ssdeep":"","tlshash":"e44143685161b2ca4067c620bb83828530c37953b67319f8f52f532cc0cd0992fe8b5a","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-07-24T09:31:07.190753Z","times_seen":15986,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/04/logo-cinehos-2-300x158.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/04/logo-cinehos-2-300x158.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 19523\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hV1rCM5pm2m9dplEsLzBYVyoApXE9NLm5qan2hHYth0XxEsH5%2BxcVtEiMfZbJSvYA0mfU%2FznyJyskx1X9tEtoa61HbPebcW2s9FZAyaHZXtnZEh8IlXtT6XU8eyPHdHygjpdq15XNMsKEOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a4d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 158, 8-bit gray+alpha, non-interlaced","md5":"e8fa7ed1897ee306c44508a8b3763407","sha1":"ff2bb1c8c7b45a69c753a858d2bdb3f3425615d3","sha256":"1b30e946aa9488f178ea3b9381b715f474c220f5f42b47f33500e7da22939aef","sha512":"f5e658dfa85821d3abd39a79e2eab799d52ed500491164dd01be245551140224f08a5603e075cc49d72d11d80971d90c09dc35eda2df5a7b8fc1c695d3468852","ssdeep":"384:uJvsWhm58WcIFx5mXH1/NFnp9ltCbviJfra1m++UsM+yC8:uJvlhmV5mXV/PnppCLQfrqB9NC8","tlshash":"5392e1c14ac3ff34fc12d40822d93e0967a931c74fea3ac87a612bec942104538c29f4","first_seen":"2026-04-02T18:28:46.43896Z","last_seen":"2026-04-02T18:28:46.43896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/03/ZENAIDE-TEIXEIRA-MARQUES-CALDEIRA-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/ZENAIDE-TEIXEIRA-MARQUES-CALDEIRA-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6547\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 27 Mar 2026 02:55:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dX9tH3UbB%2Bcdv3mSErM8vL86xeXq3cOrUcIXy8CL9FtF7ku7yHH%2FeJ12ilWau5BoADEkFNg6xw2U4OqJa7uNr2zLgwvubVoINQqnVGiJLGlUMHQ2xPiXjOc%2FbN%2BHhUktWZz4J9NnMnm942g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4527a830b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6547,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"10f6b1ed7bbe50851e0b14f733b76863","sha1":"64d18bf14921855293e0db8e18d9ab416ee13369","sha256":"bde26c3a5f0bac5f4f8f0b374c0893733c74d978e22583fdb3c8b34d91b58b9d","sha512":"fdf166089a370e253359e713154728745cb33910db96076d67767528858a66c31dc6c08436e81e4b5bce8b436c7930808783f8d587cf8c27463a17bed2935605","ssdeep":"96:LjZscL+hP/kuSgI68JElhRkoSuJRaSrrz3kF5yIN/XY/fpEGM6ggDQcW52nmP8Cu:LjZukuSAnPRjvaSLkXyIN/aOnmQN5SR","tlshash":"c8d19f2e7c824691f0405cbd09eaa91f2e316f666da2e1e021f1fdc1516afef3c0565a","first_seen":"2026-04-02T18:28:46.439916Z","last_seen":"2026-04-02T18:28:46.439916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/select2/4.0.7/js/select2.min.js?ver=4.0.7","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/select2/4.0.7/js/select2.min.js?ver=4.0.7 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16145\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fcb-10b24\"\r\nlast-modified: Mon, 04 May 2020 16:16:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 218312\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhQDnKBl1NXALESSlFfQ0REaT7Vqh9p%2FCu9Y3OvKjQa67DTtQ7XwHSqM19bheydOlQvPX0il%2Bx9Pu7T4piJaAyzGpExwKEx0eRzoSXHj%2F8jiTBJwOjwAFQbD1vn2YOVSYxyATArd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529ee61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68388,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64213), with no line terminators","md5":"8dc1d646da6cf3ba68ac8c97b7b1fde2","sha1":"1dfc915bb5ac4913419c7763e360e2db0bf1bbbf","sha256":"1870b7c456eb7af4346917168392449543a7717617c53b4c3ae03be1c5803d3c","sha512":"6355026f7e7f5a940c8fc4a54f05b8dd0faf6913a5062b89dc1069745eb8e86e168d7629e35ecdecece598e5564f13936a214866dd425a76f2f06f49eaed84a1","ssdeep":"768:b2oLNdg5pTT9aPCExIViVd9QHhwvKGookOlxNkTTeUBo47R0eq/+nnZprIfcUw0Z:lrWVEqViVd9gekOv4lqGnHrALgg","tlshash":"ce63c948bd537235427f20e7256f400a3136ab7eb00959a8b458cde86ebdd14726bf3e","first_seen":"2023-03-07T13:14:39Z","last_seen":"2026-07-21T12:50:17.704397Z","times_seen":570,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets/img/favicon-16x16.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:12.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets/img/favicon-16x16.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1065\r\npriority: u=6,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:12 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:23:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsbZNJel8yDL%2FcTvoFU1GL4X8rNeHxMcV5FmPouDtCukoV0lKJa7%2FZm27wMqDBHi8L8e%2F8uLmgf5TutNOG7vM3eM1osR5XUlJvoNsh2Ca83YMc5T6WfhLcW4rXZ2Qdz98wFzHU0z5521P7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4598ad00b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"0a370d598c6f510a95655a4605396cfb","sha1":"cbbe0594a8a585c2c5cb22a79240818f6e2114ca","sha256":"315b3d628822555f8c13a94624d5d6b6bc706468a8fe9bc84b9ea1bcc5d4d29a","sha512":"5b0e83ea07800c4edcc0d1aa6792a0a484dfce6a3df79868d16143b666f5c6b192c125bf530c14d3916fad8c482e2b6b74099b327d55b830cd0ea5318e086e37","ssdeep":"","tlshash":"2e1175f34b74ec71d801aa37c6930713ac248d1f544f8ae7ed1dc9994c067861469a82","first_seen":"2026-04-02T18:28:46.441677Z","last_seen":"2026-04-02T18:28:46.441677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/03/gold-star-icon-1.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/03/gold-star-icon-1.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1907\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:46:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlPec8ZwjzDfbSZN5PYIBbGsK42G9DSO7ee6JcSeexvd3ohrb1LDiMy%2F24j%2BOGEaRf3D39hpGz991WRMTXBENI0GskLAWH46SRzzicakcuZudsri%2BnmjDa%2BHuozIFSyMq4HzQF4rNmznzxQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4523a790b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 70, 8-bit/color RGBA, non-interlaced","md5":"7d1ea2ba2a4b8016042862e602f753e8","sha1":"86f15a472c9b2e4a43689b8b2e0b38e62c056758","sha256":"aae00ac36f38ee3598bbcf2a3a5ee396dd823bf5ea7f7bf5c21c955ca4b79060","sha512":"5724422aa5a2890a874694dcb994abd03bd6b8d22cbd71ba10710515941c6da2c3029dc26a541c9671ec4736262f14b43d73ba96ba32dbc09d0dd66ac582e55d","ssdeep":"","tlshash":"24413b120df62807195567a191d0bf8edbb6f8b9247c14a231dcfc80ba4244cc763e96","first_seen":"2026-04-02T18:28:46.442624Z","last_seen":"2026-04-02T18:28:46.442624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/04/ANTONIO-MOTTA-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/ANTONIO-MOTTA-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4246\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Thu, 02 Apr 2026 18:25:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5pKx8m9t4%2ByrBC6owHSCXDw4HlNKp7NaFLwIxxZDCxKavTUFijd4z%2B1zer%2BxW08HBnll3oqD8eJsV3PneUrZRt03KzbbPsvvg%2FJEDzzDM2tw2B5NBd1c4FjiEgvLnv7f%2BzHGhtsaW49NYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4523a7c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4246,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"5570c13a7fa22e98dd658b1af8336d26","sha1":"57a9ced13804a974e754d630f077602ff2d813a4","sha256":"978f471a0621651c41820c9e0fc5ca35023167e0a765bd88dda52a13e8f5e42a","sha512":"209dd944ec620a77c05d771437ff18f4e7c3908629326af6ae565415a293ac3baf7a2d4c7c48dbc1ea0c202ac008d0210e5987ed439069dc2532237353e3db2f","ssdeep":"96:LUbzeOMy0z2YhYMjmo5PPWgOCLlCtfjnCR4:L+e6W2qY4PvvLiTCe","tlshash":"2f915ded912f40a2f8610e349e43d31bf15eeef564a9cd2b2172d50172e09ed48e2787","first_seen":"2026-04-02T18:28:46.443556Z","last_seen":"2026-04-02T18:28:46.443556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqBootstrapValidation/1.3.7/jqBootstrapValidation.min.js?ver=1.3.7","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jqBootstrapValidation/1.3.7/jqBootstrapValidation.min.js?ver=1.3.7 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4261\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-498e\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 572089\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNYQ5oGQMROqQT46Jg8ZgjUXIqAUiGJ77KjiHX6tT7BR5tF55ICfs4iX9n7j7TOJwRoBBGUrXuhOOo%2Bent47SS4oKCRfpUMU2r51nXyA%2FxEkupd9VA%2FwXNMd%2FjnFh8ultDpe2Vyi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e452af0b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18830,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18672)","md5":"c9d170f84b4df2299797a9b78ceeba64","sha1":"406ea2e97b368442d8d75a46e11edb52688fec32","sha256":"1164ca0dbe884f218dc08a764f76beb90f2205d922691543226c2f24055c520b","sha512":"247573123c77cec874498f85f637345655bb5415de0c824d5d1d31718c92bb540b85ff83bbc671f69dbcccfe4c8c85bba27b15cb4a8cb1596cd183ba19383603","ssdeep":"384:7sKJ4IcdCbnb1wHbCbxnvs+6QNfl4boLorJQy9un53C8EDBREL2nCU1duN24H54E:fxifDBOL2CDp","tlshash":"ca824089b2a139482f7736f770cfa103d0f6787c9609a444998585f96be5fc82353b2d","first_seen":"2023-03-07T13:19:39Z","last_seen":"2026-06-07T00:44:42.371668Z","times_seen":21,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.min.js?ver=1.14.10","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.min.js?ver=1.14.10 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2802\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec3-1d18\"\r\nlast-modified: Mon, 04 May 2020 16:11:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 624693\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8K5kErdmS8IVNeJPkrpRd8DcMx3PTL8NAC8G6HB2IMZxEvCzOOdc%2F6u6iBvQm49osO%2FRW%2BdZCzYMS6xDe%2FfYcs%2BpiU7xhVfv9cjiPxl9UhUE9G0S6EnuhxReaXa%2BzUi3x82kjSzq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e452af0e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7448,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (526)","md5":"35d9db48e3112f35d81e70b98457aa42","sha1":"7baded3da3bae7598688ad6c89800b88cdb49fdd","sha256":"5f8e21f061de1874e4af063f095a389187c40583c9033946e406a8bb825ca358","sha512":"9187ebcfb9d574cc3a443f6d692969b47d41ba5bacd09fff729e58fe7b3e3adc22f6e1c98b2ae23f2b98514eee5a150040a5a213dc82863f02e5eb46d2537842","ssdeep":"192:7jFaLZ5Asd0x9ufi+1rniODiLpMBiPdkCYheGevbMoNmA:7jMZOjbu6+1rtDwpMB8CCyeGeDMMJ","tlshash":"7be1d8d4719ab0a252a334aa01bf1207e3bbafb555cc0808e61985d03e79f4e1597f7a","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-07-24T02:56:32.437762Z","times_seen":1032,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/themes/haddad/assets/img/apple-touch-icon.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:12.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/themes/haddad/assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 10010\r\npriority: u=6,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:12 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:23:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BCJcX5YEiHpDH5Q2DWma2QUBIMaE1TLn%2FCdtPxkdss4F2EK%2FUyx3PtY3VFK6LID11xlF%2FqDxpGQIXnY0tXySy8GB%2BceANGp5vIS%2BKx%2FPyqfLSu05Hf%2BHy%2BvGCT5jIohhL926t2GzKrHSTY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4598ad10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced","md5":"bb98f8a57c5bc1e80396922f9540c866","sha1":"9e7fffdfaed780f310dcdff3a39d64a82051b89d","sha256":"aec72ebbf9085d1380c87de6e94d8c0652bf7b961807ca28e4e50603ae6d8808","sha512":"e20e9609dbb5c7ee02b74fe2c610416a3b72baffd86091efaabb989f0cf927ae4c16fbc184e4783897749a6a0bed3f1bb0256234ccdd8be54753be7b5b7b8105","ssdeep":"192:01cTnHGiqoYzOfukyxJ7xpOk94it5w0Q/2bVNk7tT:0+qnzlk6J7xpOJijwr2pN2J","tlshash":"e222afd92778cce4a51d2e085340fc7c6d166739e5b04c12292a3d1ca4623e5e4e6e6e","first_seen":"2026-04-02T18:28:46.44589Z","last_seen":"2026-04-02T18:28:46.44589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMAKMUAAAAAEfknfWH5pOU2tvGveXbJaDs0dxb\u0026co=aHR0cHM6Ly9oYWRkYWRvcmdhbml6YWNhby5jb20uYnI6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=si548ynm2g4w","date":"2026-04-02T18:28:13.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 18:14:15 GMT\r\nexpires: Sun, 28 Mar 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 432838\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-24T11:51:21.665615Z","times_seen":943565,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 890\r\npriority: u=2,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:42:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjCmnGr3UpCLnM6eZJS3Zs1yQSdFe5E7nU4a5FsUGq6QQAs3SMNP4mHVpTugA9WPwC%2BhV0tW0vXZVU1Yit7fBw96Idi%2BZoqHMiMdWvtXsTepTNgnTB8kl%2BaiWMd3pYUW0KtqTEtk9uijxwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e44ffa210b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-07-24T10:14:20.292107Z","times_seen":84806,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/slick.min.css?ver=6.5.8","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.7.1/slick.min.css?ver=6.5.8 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 394\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd5-559\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 56239\r\nexpires: Tue, 23 Mar 2027 18:28:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QK5WA8EZ1z0nvxKEOQ12VxijNLDJku13nruBgVouFAl1S88tqULOooMaZe%2BFtaqhP%2BCfgpQOJ8%2FQDn61YETZIXtHEqcB7%2FHlYmvXXRsU%2B%2F1dWcB4dyEY969M63G%2B%2Fd%2B0VABi6mIC\"}]}\r\ncf-ray: 9e61e4503c2a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1327)","md5":"6a62ad0f300504c583e7797c79c2d8ab","sha1":"e6e4f113fc2d008516d21228dac93bb6a2fcbb53","sha256":"50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72","sha512":"c879273f5fc0c11fb2c76e9c075cb4723bd050cbc46b63c5cedd5cf4b952e29450e4d39364559b8418a0f97f46f5e616ffc9b4ff8397371f29c49eb3e7bc7477","ssdeep":"","tlshash":"c2219d551496115a4027d3125ed3da9a38ebf1525c3607cef7408305ce8fbae2dd29e7","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-07-24T11:31:59.795057Z","times_seen":19758,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":30,"dns":0,"connect":1,"send":0,"wait":13,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/03/funerario-icon-1-150x150.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/03/funerario-icon-1-150x150.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11264\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:46:51 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwvl1fSkRIQmX0Mo3ghaw6RbnfaQBZ%2F0Rfn%2FVGcqb%2BOzutWR4RM4U8JS0KfjoVRe%2BT1JfTpUbcShRUb7iDYbSAIuuVQAzxDJRqSerhpIkdayWpoutiwHWpbAe2eXeXH3DDxxEhUlQA0q11g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a4f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"24449fd6c9cd2953a63bda3f76af4550","sha1":"64e0ee7f72ebb80db1c810081857689f1d48bd42","sha256":"124703deaa750d6af028e3c739117121d4cfec346c01e282279aef158ce628a0","sha512":"89ec3e503c7b0ba5ba9d073a791ac6dc9498943e94bb4f68d032fa0cf5a86bcff75c578b743156ab65033a69657dcbf7821d1fdc6fb409f344392404d29e4fa5","ssdeep":"192:MQcxFSsgLmM+PpUn1ymHolHxczBRviLTvR2RSwTMWMjmw7JQPzIBl2jTVaSwG:FsgZ7Hola0p2RLmjmRPUB2TVa/G","tlshash":"1532bffe29219fd8be44e9577c9a20dc803165544bf68bd90d2a58e0d4ba120f9c6a73","first_seen":"2026-04-02T18:28:46.448376Z","last_seen":"2026-04-02T18:28:46.448376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/03/bronze-star-icon-1.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/03/bronze-star-icon-1.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3143\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:45:29 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7Wa1C1GFPiMHehERaqNCq0I6DiUzZxr3zUhc5AlesiTgk4oxHdSKxpuOludBCWl47e8pGZl9EfINUwNnMc0D6mZVFaEbu8%2BAv4rA73w8Qvy2pBfrOeY8gyb%2FZvrPIDG6jju4Yqo9ieF%2FNE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a510b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 70, 8-bit/color RGBA, non-interlaced","md5":"e6e4ddcff628b270a39402e888004052","sha1":"c56e413ee88491b03cbb23e5d25f4e8931b6bcbe","sha256":"a141ceba8695e34a34cd1ac830baaa9662a88c799be20e353a50f6fda642f963","sha512":"5797c8eb32c4148a439d7005273d5b1e69e4fd43894ecab4061728aabebb2f842c68582628800cbc173b7054bd966be25c73c84884f7263fbda0d64c9b522bf2","ssdeep":"","tlshash":"73514d5d8d29e7c69b0396b202dda5776a37a6f1fec53d9524f88bf9030184c981c292","first_seen":"2026-04-02T18:28:46.449285Z","last_seen":"2026-04-02T18:28:46.449285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4002\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 00:42:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FU8hSkTFPbAI2KVLl0v3DXyfzWOYj4hm59SCR%2FFWiihGkxwc%2BO6nBuGjOqeEXOqAfNr8Pk38Tx6ZVrQXSK5VFwPwv5MSJqYQb4WI6lGwqu8ewrErnPV3n87CDpRIOHlCM2LRG28jTTv%2BX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a8c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13423,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13423), with no line terminators","md5":"0b1719adf5fa7231cb1a1b54cf11a50e","sha1":"0c8258ee3cbe887b0e77ff79db940fadfe56f95e","sha256":"111da58b16b15c6bac6126be92d0a83c8d1dc4139b6361411a744deda5242c66","sha512":"9d5883c86d46a60f0f9be2c720b43ce0e3333fe547642b32fe04c1575468da6682833bf6f09899abbf336e0bc8dca46db5ef85f5c45c9a47d45908a70c466ed1","ssdeep":"384:IsIRHeRJ9J/ERD7JgeYhzwjls1qrBp1pgQmsOs9BqohE+5Z:IsIR+X9J/ERRYhzwJ6qrBp1pgQmsOs9H","tlshash":"c252e8e1432955321eb106e391e513d176a075aef44bcaa1a898dc2e18bdcc324f3fb7","first_seen":"2024-07-17T12:28:39Z","last_seen":"2026-07-24T09:38:48.852689Z","times_seen":16075,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/fonts/slick.woff","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:12.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.7.1/fonts/slick.woff HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://haddadorganizacao.com.br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:12 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: W/\"5eb03fd5-564\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Tue, 23 Mar 2027 18:28:12 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4mPkThJrv1A5A1SwbkmcGtORQU%2Bl82p4QJDdS%2BIdQYqukq1%2FuwgfBVoNid2YcYm1sV88WLwdI0UNj6ipFv18kvRDh35DxU8VceJX8DRRrlg%2BszKRGqI%2Fz9yxEucuC5YVA%2BAK35A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e458ce891a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-07-24T11:56:13.090185Z","times_seen":25239,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/magnific-popup.js/1.1.0/jquery.magnific-popup.min.js?ver=1.1.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/magnific-popup.js/1.1.0/jquery.magnific-popup.min.js?ver=1.1.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6546\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ed4-4ef8\"\r\nlast-modified: Mon, 04 May 2020 16:12:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 243455\r\nexpires: Tue, 23 Mar 2027 18:28:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CDoPgAeCxpXKMAHqiI3IgatRY3J56k9GAvE87THwoaFKLuP1GMC43wR8cXbk7C8GLXagVF8EQEJvgV%2Fe9hQn7mVF3SnoK6mMlX%2BRmxZQiJgsBGRCDyMFIs%2FU6xwOx2qp3%2FA8jXj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e61e4529ee11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T11:31:59.797816Z","times_seen":71692,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/css/dist/block-library/style.min.css?ver=6.5.8","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.8 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 14071\r\npriority: u=2,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:10 GMT\r\nlast-modified: Fri, 30 Aug 2024 01:23:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRdqIjOBjI%2F00DKBZ1oCQwMO1tTk10FfuRY1EGrm3fzo4GtWtkLmZdWWhezu9%2FPRR7EIVt%2FaM4Xv9GIPVVhlr8ejgfXaP9%2BJHiCThgop4xQSFhHILHE6xSBps4v33iVgB84h2OHllvp3QV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e44f4a150b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59701)","md5":"51a8390b47aa0582cf2d9c96c5addee2","sha1":"b16a640874025d085c38119a1a02a3460f83f2de","sha256":"98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20","sha512":"711162ab43e59e0ff5f050cca4278682194248a13ef2ee1f00ab276b6221e7a4dddeb9645e8798e7f67a34f0001c8f63469f2b2c3e6d4e2519ada30b6775e191","ssdeep":"1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps","tlshash":"f4b3515413b0dcf939ffa73a5e4ee248a513aa41c64a97e7e076d190618ca490df3b0f","first_seen":"2024-04-03T06:24:51Z","last_seen":"2026-07-24T11:22:23.195575Z","times_seen":16612,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css?ver=6.5.8","fqdn":"code.ionicframework.com","domain":"ionicframework.com","tld":"com"},"ip":{"addr":"172.67.69.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ionicframework.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:29:35 GMT","end":"Sun, 24 May 2026 18:29:21 GMT"},"fingerprint":{"sha1":"9D:D0:EB:D9:87:16:78:79:EC:B5:AC:B4:E0:0A:B5:72:0F:7B:6E:BE","sha256":"CE:1D:80:EF:3F:90:01:02:3A:12:A1:17:91:15:2D:63:62:3D:7E:DE:97:DC:AB:9E:97:C1:53:DC:A7:05:1D:D6"}}},"request":{"raw":"GET /ionicons/2.0.1/css/ionicons.min.css?ver=6.5.8 HTTP/1.1\r\nHost: code.ionicframework.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 8313\r\ncontent-security-policy: default-src 'self'; script-src 'self' *.ionicframework.com ionicframework.com; style-src 'self' *.ionicframework.com ionicframework.com;\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 15 Oct 2025 14:38:53 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"68efb1fd-c854\"\r\nexpires: Thu, 26 Mar 2026 01:28:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4742:1C6B08:B1F50:C631A:69C48981\r\naccept-ranges: bytes\r\nage: 17627\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775136863.256674,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8ccdd812cad4e4c5eb3cdfd40290f3425bcaea26\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjszSPLL4dSOXwgW%2FQeitNjcpBZcurAqIM6KgMFSYPQxYbeMik%2Bpw7Jm2EtDpMLiMmy4kjjZ43i4t3oEgLQmIr3Vkz2Dk%2F0Rw0meLWi53Ha6BQJPNnNW9Z%2BFm0wQQxwbu1V6qYQ96iEd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4507bce56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":51284,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"aed7997754b0bd942995126653dfc81d","sha1":"89568702c732f4c0b629e068f56bc3812cf5f5a2","sha256":"95d37d2b4f6dc57aca2141a52aafe6e34fb6cac97983f8205c7befd824c62d42","sha512":"e79677cd4bed1609de5ad33c5a6e09e223f33e0d1835e300416382bdcea7e984cfe0c28ac268d41cb311b2ed0717747e4e98740b98e0c21e5f409e3652238541","ssdeep":"384:R48wBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:R4jhhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"ef33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T10:41:49.428708Z","last_seen":"2026-07-24T11:29:04.873755Z","times_seen":5735,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":55,"dns":20,"connect":2,"send":0,"wait":16,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2015/03/transporte-icon-1-150x150.png","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:10.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2015/03/transporte-icon-1-150x150.png HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 10573\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 09:47:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fe%2BGU%2FaezQLqGXLdF6AF3Lbk%2FpAeDnIsTDHUZdRWWwl%2BVFPa8oWh%2BrxCi2MP9hLIEMlpKDVqYPQJQ5JsKAwBy0AydrC5%2F%2FcuFnaiDqhD5ZKTQF4svMSdDRm0z6yKtby8E5gmyZCNy%2BVjj5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4505a4a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"6e21c90f583cfbee719c71e53ec62c23","sha1":"43bf3134d899a99ced2b3f023868ced30727ea25","sha256":"b0682535c7f0939bc424b790af4cc45f8b93a002b4d7672d1663d99a28338d8a","sha512":"b703abf7eed718358e322bfd3d7d36a744657c47a0921a17b6213f03eee56d26a31909ae74ea2cab4f61008bbddd93ef138c1de72db24723cf5811608c8212af","ssdeep":"192:jqBVUuvTv8NsFYo+w1r6OEa9r2moO9lGTevh3wILnvu/ervjnz5wWDwhM29n0H:jqBV1ywpw+MO9xjvuKTShMe+","tlshash":"6c22bfc56a335719b4556882460b1d1458f8e8e27d8b3ee4e08b3adab3383748add71d","first_seen":"2026-04-02T18:28:46.459463Z","last_seen":"2026-04-02T18:28:46.459463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-content/uploads/2026/04/JOAO-BRAGA-NETTO-150x200.jpg?lastmod=1775154491","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/JOAO-BRAGA-NETTO-150x200.jpg?lastmod=1775154491 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6040\r\npriority: u=4,i=?0\r\ncache-control: max-age=691200\r\nexpires: Thu, 09 Apr 2026 18:28:11 GMT\r\nlast-modified: Thu, 02 Apr 2026 18:25:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5309u6sSIy8uvdrvaKqtqM3ikRYVZrtVkNR%2F3NTMX6ge9OYN0fE2onCDxh3FfYYmWFck7iygnB0Vu%2F2FF2tTGGRXEeG8Eh9oB8j52psS5nbQxnW1SzcybcrS4g8w%2F56szLKh8TcADOqs24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4523a7e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 150x200, components 3","md5":"01cf5d77f0499516d07269b606e8d4eb","sha1":"9feaccb34b02672f4f7dbe00e540f7dd06fd3d3d","sha256":"db62d139d2e8bf489477fa3b862b7770ac2a4fb1ccf9a35f238334b3c4b1212c","sha512":"e463ebd41a794842158e9f292630e30db0678a33286057d951a5914b9e43bebc43af0dbc1c1c5c8bc0f233abad48966f8f2f11e67fcfb5e238a0870dd6d0fb52","ssdeep":"96:Lb1AgeYH0cTHgNSFEQTy0uWD7oA+hG9EJG/Q90Yar3m6BbcfykRF7R3D2EIZCh6U:LbLU8imxTyLMRBn/Q9E3VeyyFl3Sk6Z2","tlshash":"65c18fb111bbc1c6f70ffe68e112fb912e01a1c34d09074426b5db9117b1fe52965b84","first_seen":"2026-04-02T18:28:46.466815Z","last_seen":"2026-04-02T18:28:46.466815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haddadorganizacao.com.br/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18","fqdn":"haddadorganizacao.com.br","domain":"haddadorganizacao.com.br","tld":"com.br"},"ip":{"addr":"104.21.68.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haddadorganizacao.com.br/","date":"2026-04-02T18:28:11.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haddadorganizacao.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 19:16:57 GMT","end":"Sun, 31 May 2026 20:15:35 GMT"},"fingerprint":{"sha1":"26:F1:CA:48:D7:14:D9:E6:95:4B:74:8A:2A:7C:E1:6E:9D:AD:7A:5A","sha256":"CC:66:B4:33:2E:9E:79:1A:C6:95:82:E3:8B:05:A8:6A:96:2E:45:7C:74:60:A1:21:1E:87:43:27:CD:09:5C:DF"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1\r\nHost: haddadorganizacao.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haddadorganizacao.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Apr 2026 18:28:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1460\r\npriority: u=3,i=?0\r\ncache-control: max-age=691200\r\nexpires: Fri, 10 Apr 2026 18:28:11 GMT\r\nlast-modified: Fri, 30 Aug 2024 01:21:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dAyDpQf1jRE%2FXwbJWd1ywbnUXncUo3yH3%2FyrP%2F3BpsLzduKKSBnytDZcZSWTUMV1DykzAMODfV%2BlhuXEja4bnZrfLGO1KISRf2VOBIZz6Ek73z%2FiGr%2FDvtvnslc3Bh8qXRtLkv0YvI1P8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e61e4528a880b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4307,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4272)","md5":"072d3f6e5c446f57d5c544f9931860e2","sha1":"ee6aa3d65b474309376468b24bb6f829a4514809","sha256":"2cb546fbdda7995d374fffa4b2f6530bbcf57d014639ddf76de45df43d593045","sha512":"19ceb31ec694ac5c42a0a7b02cfc1c31ddfc033dd62916a1c55bbbdd2435e21f73127c539687633e96f2706b2d75c37609b44a9c9462b63f9f96795cb4495968","ssdeep":"96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps","tlshash":"6d9133c438927870a2637453f4bf14d57279aab2713ac4c1a24dd4e12db39cee0a7a7d","first_seen":"2024-04-03T08:25:08Z","last_seen":"2026-07-24T11:22:00.715178Z","times_seen":32891,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-02","alert":"Phishing Block","trigger":"haddadorganizacao.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"haddadorganizacao.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}