{"report_id":"85e3910a-0d2a-4d06-b29f-f545b4d20fbe","version":6,"status":"done","tags":[],"date":"2025-08-31T00:36:59Z","url":{"schema":"http","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"104.247.82.51","port":0,"asn":206834,"as":"Team Internet AG","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"title":"acabamento.com"},"submit":{"url":{"schema":"http","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"104.247.82.51","port":0,"asn":206834,"as":"Team Internet AG","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T00:36:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T00:36:37Z","timestamp":1756600597,"ip_dst":{"addr":"172.18.0.5","port":46714,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-31T00:36:37.331155+0000\",\"flow_id\":207187495705136,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.75.69.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.5\",\"dest_port\":46714,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.youseasky.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:B4:45:C3:A8:93:9E:2B:CB:11:9A:DE:E1:5D:0C:2D:92\",\"fingerprint\":\"d9:9d:44:45:ee:9f:f6:8f:bf:80:2a:14:66:02:83:e7:27:02:24:48\",\"sni\":\"obseu.youseasky.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-08-25T00:00:00\",\"notafter\":\"2025-11-23T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1212,\"bytes_toclient\":3917,\"start\":\"2025-08-31T00:36:37.219696+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"yfdpco1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"acabamento.com","ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":10222,"sent_data":1385,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"realtimesearchresults.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-02-14","domain_rank":464056,"first_seen":"2025-03-28T05:14:07.92032Z","last_seen":"2025-08-26T09:29:18.2476Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":1268,"comment":"","tags":null,"fingerprints":null},{"fqdn":"euob.youseasky.com","ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":394467,"first_seen":"2025-06-17T15:02:15.832689Z","last_seen":"2025-08-26T20:31:11.667829Z","alert_count":0,"request_count":1,"received_data":118024,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"yfdpco1.com","ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-03-20","domain_rank":2753637,"first_seen":"2025-07-30T06:43:08.0267Z","last_seen":"2025-08-27T10:46:04.859797Z","alert_count":1,"request_count":1,"received_data":9619,"sent_data":719,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"l.cdn-fileserver.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":962880,"first_seen":"2025-04-11T15:28:22.753596Z","last_seen":"2025-08-30T10:37:23.372392Z","alert_count":0,"request_count":1,"received_data":865,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"obseu.youseasky.com","ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-01","domain_rank":340380,"first_seen":"2025-06-17T15:02:15.833324Z","last_seen":"2025-08-26T17:35:38.461808Z","alert_count":0,"request_count":7,"received_data":5451,"sent_data":9642,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T00:36:37Z","timestamp":1756600597,"ip_dst":{"addr":"172.18.0.5","port":46714,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-31T00:36:37.331155+0000\",\"flow_id\":207187495705136,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.75.69.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.5\",\"dest_port\":46714,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.youseasky.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:B4:45:C3:A8:93:9E:2B:CB:11:9A:DE:E1:5D:0C:2D:92\",\"fingerprint\":\"d9:9d:44:45:ee:9f:f6:8f:bf:80:2a:14:66:02:83:e7:27:02:24:48\",\"sni\":\"obseu.youseasky.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-08-25T00:00:00\",\"notafter\":\"2025-11-23T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1212,\"bytes_toclient\":3917,\"start\":\"2025-08-31T00:36:37.219696+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yfdpco1.com/sk-park.php?pid=9PO15V947\u0026dn=acabamento.com\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Facabamento.com%2F\u0026al=en-US%2Cen%3Bq%3D0.5","fqdn":"yfdpco1.com","domain":"yfdpco1.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdf411fac24287aab3433c4602602840","sha1":"a5a1a3d776b2ad78055202e1264b7d096005bdff","sha256":"16b615a6f59788b2512df8dd4532e80d4545c391528855e87fc8a417ea49620c","sha512":"66f7cac89d34a7c2aab5b25720cc8e2e1805d8d2c46e75d1641659272f1da20af4527e12546becb30770ff445cfe322dc58da15fe4fdacb69392c25805d71219","ssdeep":"192:Mn8i8Kvi4/wP4zwnynX6U72SpLGAv6n8i8Kvi4/wP4zwnynX6U72SfaVAj:4clZ0KMpyAviclZ0KMC6","tlshash":"2e02fa960174656009da1041dfbd6ff531ee6cbba8dc684e8ce8c90052ad7bb8f12df6","size":8489,"data":"","first_seen":"2025-08-31T00:37:04.453476Z","last_seen":"2025-08-31T00:37:04.453476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c538ba54b701f8bda4d052cfa8d8aa","sha1":"42850d2da5102772b26a1269a8006a0aa7a9eb92","sha256":"50e1eaeb211d1e8dbcab8751efc5a31063eecc8e478d5547332ed86c5055209e","sha512":"524b9b328afa89666dbf8d27b838572366d018e9bdd60f9b4f80a865b80ce5f4722e077e16f0f93a39abcbe87358db95f0f0a7b06d1f2f5a9f1def4fd8ce2e12","ssdeep":"","tlshash":"40018b4968f420f58a4676b94d0f8419ba28d00715058f543e2c92c41f94039d2eaffd","size":673,"data":"","first_seen":"2025-08-31T00:37:04.454971Z","last_seen":"2025-08-31T00:37:04.454971Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a721fadebac58116f06d5f8f84bcfe5a","sha1":"413588bc107bd1be0cbd14345fb68c9b8ba14b38","sha256":"912e5797a8e5f63052f4171a842ef7e90701101824c00a4dab15ce20f67605e0","sha512":"6604e4300d4690a817c03e803c0b7957170181effb5710cf86d602ebd6f52699864fd3a62ebd3b173dc58e24911266a2258a212e55acf3323f39a41d6f8ddc5d","ssdeep":"","tlshash":"12c08c7b3e8220304bdf765f285ca3083820800a68a3a6077c6c09ea4ff1f47551ab58","size":164,"data":"","first_seen":"2025-03-03T19:06:17.344232Z","last_seen":"2026-06-07T06:58:42.529265Z","times_seen":39305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-06-10T02:15:25.281159Z","times_seen":406978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baacb9f01dc488db5a05a99f0572d216","sha1":"3618725e3a993e584860d32bbf1f9a82de8075ef","sha256":"6319689170f193b97cfa3af51ec94606dfe76dc122efe0c1ec48c3869f1c951e","sha512":"12abef3d939f37275bfeab7a472a740a2aba44ae8b31fba97dec4c3d96fde75f75754e8ff704ffdee6b9d15fff6584f360eef362703d19c4e4b70a23fdb43a78","ssdeep":"1536:CrWmcv/i4ExmAutKsb/0zxxcTmYtCHlgxLA49ZqU5SLonkKi1OYptyb5VawJFomi:Sc5dtj/0PS59UOYDMFVHC","tlshash":"aeb3d6adb2e67025039334a5147f410ae27b5e503c4b8194d6bee9d4ac7ce8e513bfac","size":117498,"data":"","first_seen":"2025-08-18T13:04:07.83002Z","last_seen":"2025-09-03T08:00:39.212034Z","times_seen":12555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-10T02:15:25.283297Z","times_seen":380054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-10T02:15:25.280651Z","times_seen":380048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-10T02:15:25.282758Z","times_seen":380009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/ct?id=80705\u0026url=https%3A%2F%2Facabamento.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=85a47de415034c689b0108aa9e1dc31f8db98536\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1756600597212\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=247717982566100891011110658925856171511121201229761505706711201722758215509287350091191591\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDMwNDldLFsiYWJuY2giLDExXSxbLTUsIi0iXSxbLTEyLCJcIjFcIiJdLFstMjMsIisiXSxbLTM3LCItIl0sWy01MSwiLSJdLFstNjMsIi0iXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMzMsIi0iXSxbLTUwLCItIl0sWy01NSwiMCJdLFstMiwiNyxJc045bkduV2JBWUFJeE5mUWFPcUdFMENGQVFzY0cwMEluaE9iWUJBS1lVT3pRTzZFWDAyMEltR0xjdTYydXJkUC9jMmQycE5tVlpBd2YzLy84ejc5R3JIYTFXdTNPbVhQUHZlIl0sWy00LCItIl0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwibHNcIixcIk5vdGlmeVBhaW50RXZlbnRcIixcIl9fY3RjZ19jdF84MDcwNV9leGVjXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstMTcsIjQ4Il0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjo5NixcIndnbFwiOjEsXCJncmVuXCI6XCJsbHZtcGlwZVwiLFwic2VmXCI6NDk0MTk1MDQzLFwic2VjXCI6XCJcIn0iXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy01NCwie1wiaFwiOltcIjMyOTk3Mjg0NTJcIixcIjgyMjgyMzExOVwiLFwiOTgzMjI2MjkwXCIsXCIyODcyODk5MzIwXCIsXCJfM1wiLFwiMjg3Mjg5OTMyMFwiXSxcImRcIjpbXSxcImJcIjpbXSxcInNcIjoxfSJdLFstNzIsIkV4VT0iXSxbLTIxLCItIl0sWy0zNCwiLSJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMDAwIl0sWy00NiwiMCJdLFstNTksIi0iXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0yNiwiLSJdLFstMzEsImZhbHNlIl0sWy01MywiMDAxIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W1wiZGVzY3JpcHRpb25cIl19Il0sWy0xNiwiMCJdLFstMzgsImksLTEsLTEsMjgsMCwxLDAsOTMsMzUxLDUxLC0xLDAsLDcxMywxMDEzLDEwMTIiXSxbLTQ0LCIwLDUsMCw1Il0sWy00OSwiLSJdLFstNjAsIi0iXSxbLTY1LCItIl0sWy02NiwiLSJdLFstNzEsImEwMTAwMTAxMTAwMTAwMTAxMDAwMTAxMDAxMTAxMTAwMDAwMDEwIl0sWy0xNSwiLSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwwLDAsMCwwLFwiLVwiLFwiLVwiLDEyODAsMTAyNCxudWxsXSJdLFstMjAsIi0iXSxbLTI5LCItIl0sWy0zMCwiW1widlwiLDBdIl0sWy0zMiwiMCJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2UsbnVsbCwwLGZhbHNlLGZhbHNlLGZhbHNlLGZhbHNlXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNTgsIi0iXSxbLTY3LCItIl0sWy03MCwiLSJdLFstNzMsIkVoUT0iXSxbLTksIi0iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTcsIi0iXSxbLTEwLCItIl0sWy0xMywiLSJdLFstMTQsIi0iXSxbLTI1LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTQ1LCI3NTIsMCwwLDcxOSwwLDAsNzYxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy02NCwiLSJdLFstNzQsIi0iXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNTcsIlMzbFJUVTFKU2dNV0ZseE1WbHNYUUZaTVNseFlTbEpBRjFwV1ZCWktRVWtXVUJZTEN3MWZBUXdLQ1F0WVdBdGJEMXhhQ2dsWVdGb0FXQUVNWFZnTFdsdGZBQmRUU2dNSUF3OE1EQXdPRlE0SUFCWk5GMXhCU1ZaTFRVb1dCWGxSVFUxSlNnTVdGbHhNVmxzWFFGWk1TbHhZU2xKQUYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhNRGd3TUZVcGNUVzFRVkZ4V1RFMFpVVmhYWFZWY1N4TU9DQUFXVFJkY1FVbFdTMDFLRmdWNVVVMU5TVW9ERmhaY1RGWmJGMEJXVEVwY1dFcFNRQmRhVmxRV1NrRkpGbEFXQ3dzTlh3RU1DZ2tMV0ZnTFd3OWNXZz09Il0sWyJibmNoIiwzNjZdLFstOCwiLSJdLFstMjQsIltdIl0sWy0yNywiLSJdLFstNDIsIjg4MzM5OTAxNiJdLFstNTIsIi0iXSxbLTYyLCI1OCJdLFstNjgsIi0iXSxbLTY5LCJXaW4zMnx8fDQ4fC18LSJdLFstMzUsIlsxNzU2NjAwNTk3MTk1LDBdIl0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTYxLCItIl0sWyJkZGIiLCIwLDgsMCwwLDAsMywwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwxLDMsMCwwLDEsMSwwLDAsMSwwLDAsMCwxLDIsMzgsMCwyMCwxLDEsMSwwLDAsMCwwLDAsMCwwLDIsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMSwwLDAsMCJdLFsiY2IiLCIwLDAsMCwwLDAsMCwwLDAsMCwzLDYsMCwxMDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsNCwwLDEsMCwwLDAsMCwwIl1d\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=Yw1res0jDP\u0026pto=1160\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1756600597.V31D6YG9oW9qfZES\u0026suid=1.1756600597.zZzKGBzimsbQo5WW\u0026tuid=1.1756600597.ZtKsprTK3QBz3B8I\u0026fbc=-\u0026gtm=-\u0026it=5%2C658%2C46\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed507dfba886a9993549fa87477933f9","sha1":"5acb933c78be9fb04b76f97e4f4ed8bccfe8a648","sha256":"da0c3179f07d08eab099ae535ed06b1b72e9480de7ea8445ba2bc463a325d9bf","sha512":"27755824538544f70fe34fdcb4d7e3d32a35f9ecd3547a7f271550021977f18eca44031288d2a9362a53e121d511b42fe943703117d6b6d88b4f2031cf7f8e95","ssdeep":"","tlshash":"f461e7aa811b0c7b67bdb879e214daaa77f7b97c2847d1a01139ef4e2d937348d01081","size":3321,"data":"","first_seen":"2025-08-31T00:37:04.448843Z","last_seen":"2025-08-31T00:37:04.448843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yfdpco1.com/sk-park.php?pid=9PO15V947\u0026dn=acabamento.com\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Facabamento.com%2F\u0026al=en-US%2Cen%3Bq%3D0.5","fqdn":"yfdpco1.com","domain":"yfdpco1.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:36.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yfdpco1.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 17:21:22 GMT","end":"Mon, 20 Oct 2025 17:21:21 GMT"},"fingerprint":{"sha1":"E6:52:CE:54:2A:35:6A:D1:3C:B8:5E:9C:91:52:23:64:0C:B5:68:39","sha256":"65:A0:C8:99:6E:AA:54:56:1B:AC:B8:20:31:EC:04:09:32:42:58:43:E2:BF:3E:18:00:20:EE:B0:4B:DD:EA:EA"}}},"request":{"raw":"GET /sk-park.php?pid=9PO15V947\u0026dn=acabamento.com\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Facabamento.com%2F\u0026al=en-US%2Cen%3Bq%3D0.5 HTTP/1.1\r\nHost: yfdpco1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 31 Aug 2025 00:36:27 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-sc-h: 21-kz4p\r\nvia: 1.1 google\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9406,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9239)","md5":"cfee63715b08d99ac636052215260392","sha1":"155ca031a05e19d362c1edf77b2a8ed23ea095f9","sha256":"505087b59e42c959a2d96eb9d177fe3132f00f663e72dafa53845b0b3f23be5d","sha512":"94f9763de060289f7071f25823124c12dcbf8b74701872cfea03cc99a5f38d94c20f92757a7f837dd1b921b1a77fc5ee4b17349e95723aa7ab304a16d374beca","ssdeep":"192:fFE7N353Fn8i8Kvi4/wP4zwnynX6U72SpLGAv6n8i8Kvi4/wP4zwnynX6U72Sfah:NCclZ0KMpyAviclZ0KMCh","tlshash":"2b121aa60174a92008da1001dfbd6ff571ee6cbbf89c684e8dd8c500519ebab8e118f6","first_seen":"2025-08-31T00:37:04.445599Z","last_seen":"2025-08-31T00:37:04.445599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":538,"dns":146,"connect":129,"send":0,"wait":218,"receive":1,"ssl":261},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-30","alert":"Sinkholed","trigger":"yfdpco1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bping.php?hvsid=00001756600597404015326356482103\u0026sc=03\u0026wsip=170762441\u0026requrl=http%3A%2F%2Facabamento.com\u0026vgd_asn=50304\u0026gdpr=1\u0026vgd_oreqf=one\u0026vgd_wlstp=0\u0026cc=NO\u0026vgd_rpth=%2Fola\u0026vgd_tsce=L973\u0026vgd_setup=c21\u0026prid=8PR11258V\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22mQjm%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%229A%22%7D\u0026vgd_bid=369582\u0026vgd_l2type=dmola\u0026vgd_oresf=one\u0026vgd_cdv=O2203\u0026mspa=0\u0026r=1756600597406\u0026crid=848515096\u0026lper=100\u0026wshp=0\u0026cid=8CU6073RK\u0026vi=1756600597845957949\u0026lf=6\u0026ugd=4\u0026vgd_cage=4\u0026vgd_len=544\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco1.com/sk-park.php?pid=9PO15V947\u0026dn=acabamento.com\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Facabamento.com%2F\u0026al=en-US%2Cen%3Bq%3D0.5","date":"2025-08-31T00:36:37.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 14:23:06 GMT","end":"Sun, 02 Nov 2025 15:21:45 GMT"},"fingerprint":{"sha1":"8A:AD:EC:24:18:61:91:32:CB:FE:A2:A2:46:54:57:42:48:99:1C:87","sha256":"F3:78:C4:50:E3:0D:70:79:69:27:EF:27:61:15:6F:0A:E4:2E:85:69:51:9C:50:97:37:BD:FB:06:54:1B:26:99"}}},"request":{"raw":"GET /bping.php?hvsid=00001756600597404015326356482103\u0026sc=03\u0026wsip=170762441\u0026requrl=http%3A%2F%2Facabamento.com\u0026vgd_asn=50304\u0026gdpr=1\u0026vgd_oreqf=one\u0026vgd_wlstp=0\u0026cc=NO\u0026vgd_rpth=%2Fola\u0026vgd_tsce=L973\u0026vgd_setup=c21\u0026prid=8PR11258V\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22mQjm%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%229A%22%7D\u0026vgd_bid=369582\u0026vgd_l2type=dmola\u0026vgd_oresf=one\u0026vgd_cdv=O2203\u0026mspa=0\u0026r=1756600597406\u0026crid=848515096\u0026lper=100\u0026wshp=0\u0026cid=8CU6073RK\u0026vi=1756600597845957949\u0026lf=6\u0026ugd=4\u0026vgd_cage=4\u0026vgd_len=544\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 00:36:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\nexpires: Sat, 30 Aug 2025 00:36:37 GMT\r\npragma: no-cache\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqQEUuD8ezsdYx8qOBQ1t9yZvso8bmHsjLoPV%2FFCmFrMKTXbD9lEgQFKD%2F9tcSfe%2BlUkdFiOauUNpwJFtQZZ9tRzED8Al6N8UJi%2FEigxANC2lg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 977874674829b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"6f1d74c7168076c7666246504a8c03f2","sha1":"00656377deb1a4393e0cf0055385b08b2b81b46c","sha256":"8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde","sha512":"e502484faa0dc2a1f23c7f715879db654f29d0af1d6f616467d3d1fc578c2d16fccaacd76c4a5ecae8451dc912323473559d29edbd322fe85b8f1e83a7cdf2f3","ssdeep":"","tlshash":"53900447f1401103d135403007075340070c5030145403050071507ddc1d7553d07410","first_seen":"2025-03-07T21:51:05.009549Z","last_seen":"2026-06-10T02:15:46.216349Z","times_seen":195723,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":59,"dns":21,"connect":1,"send":0,"wait":136,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:42.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1707\r\nOrigin: https://acabamento.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nCookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://acabamento.com\r\ncontent-type: application/json\r\ndate: Sun, 31 Aug 2025 00:36:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/munin/a/ls?t=68b39914\u0026token=85a47de415034c689b0108aa9e1dc31f8db98536","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:36.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acabamento.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Jun 2025 06:02:55 GMT","end":"Fri, 05 Sep 2025 06:02:54 GMT"},"fingerprint":{"sha1":"94:D2:C0:FB:17:3E:70:AE:D6:F0:2C:62:70:78:A7:38:50:A3:60:4C","sha256":"0B:95:D2:83:DD:F2:97:10:B2:EA:CC:22:A5:41:F9:CF:EF:2C:3D:E1:30:15:AD:BE:6C:85:1A:4B:7D:7B:92:0F"}}},"request":{"raw":"GET /munin/a/ls?t=68b39914\u0026token=85a47de415034c689b0108aa9e1dc31f8db98536 HTTP/1.1\r\nHost: acabamento.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 201 Created\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Sun, 31 Aug 2025 00:36:36 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nx-log-success: 68b39914cf4fbfce0552cb15\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/favicon.ico","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:36.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acabamento.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Jun 2025 06:02:55 GMT","end":"Fri, 05 Sep 2025 06:02:54 GMT"},"fingerprint":{"sha1":"94:D2:C0:FB:17:3E:70:AE:D6:F0:2C:62:70:78:A7:38:50:A3:60:4C","sha256":"0B:95:D2:83:DD:F2:97:10:B2:EA:CC:22:A5:41:F9:CF:EF:2C:3D:E1:30:15:AD:BE:6C:85:1A:4B:7D:7B:92:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: acabamento.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 31 Aug 2025 00:36:36 GMT\r\netag: \"dc84tne41y9s0\"\r\nlast-modified: Thu, 21 Aug 2025 13:15:38 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/ct?id=80705\u0026url=https%3A%2F%2Facabamento.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=85a47de415034c689b0108aa9e1dc31f8db98536\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1756600597212\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=247717982566100891011110658925856171511121201229761505706711201722758215509287350091191591\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=Yw1res0jDP\u0026pto=1160\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1756600597.V31D6YG9oW9qfZES\u0026suid=1.1756600597.zZzKGBzimsbQo5WW\u0026tuid=1.1756600597.ZtKsprTK3QBz3B8I\u0026fbc=-\u0026gtm=-\u0026it=5%2C658%2C46\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:37.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"GET /ct?id=80705\u0026url=https%3A%2F%2Facabamento.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=85a47de415034c689b0108aa9e1dc31f8db98536\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1756600597212\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=247717982566100891011110658925856171511121201229761505706711201722758215509287350091191591\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=Yw1res0jDP\u0026pto=1160\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1756600597.V31D6YG9oW9qfZES\u0026suid=1.1756600597.zZzKGBzimsbQo5WW\u0026tuid=1.1756600597.ZtKsprTK3QBz3B8I\u0026fbc=-\u0026gtm=-\u0026it=5%2C658%2C46\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 31 Aug 2025 00:36:37 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8; Max-Age=29030400; Path=/; Expires=Sun, 02 Aug 2026 00:36:37 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://acabamento.com\r\ncontent-length: 1145\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3321,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3321), with no line terminators","md5":"ed507dfba886a9993549fa87477933f9","sha1":"5acb933c78be9fb04b76f97e4f4ed8bccfe8a648","sha256":"da0c3179f07d08eab099ae535ed06b1b72e9480de7ea8445ba2bc463a325d9bf","sha512":"27755824538544f70fe34fdcb4d7e3d32a35f9ecd3547a7f271550021977f18eca44031288d2a9362a53e121d511b42fe943703117d6b6d88b4f2031cf7f8e95","ssdeep":"","tlshash":"f461e7aa811b0c7b67bdb879e214daaa77f7b97c2847d1a01139ef4e2d937348d01081","first_seen":"2025-08-31T00:37:04.448843Z","last_seen":"2025-08-31T00:37:04.448843Z","times_seen":1,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":114,"dns":1,"connect":36,"send":0,"wait":59,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=765\u0026%2Ad9=FIj-WymyJlVPcJWIVWJvv-9JVjjwPjVTrF9w\u0026%2Agv-=%2ALl\u002666g9=%7B%2266rr%22%3A%220U%22%2C%2266rzq%22%3A%22%2A6g%2A%22%2C%2266d8%22%3A%22%22%2C%22666r%22%3A%22cy%22%7D\u00266V9b_9=\u00266d2l=jjFW1wPT\u00266r=cy\u00268d9=\u00269Zb-=j\u00269lrZZZ=\u0026AVd9=\u0026D9=\u0026Dtb-=\u0026LZlbb=j\u0026LzO=\u0026Nzz86=j\u0026Od=jIFwwccFTIPWFTFITWT\u0026V9b_9=\u0026Vd9=ywTFPm\u0026Vl=c\u0026Vvl=\u0026Z68v=c\u0026blSpbg=Nzz8%3A%2F%2FvrvVvZlLz%2ACr%2AZ\u0026d6d9=c\u0026gmzq8l=9Z%2Agv\u0026htmlsrc=1\u0026kkdd=3%2A%7CW%7CHAuhn%2A39\u0026lrbd9=\u0026p68lL-=c\u0026pu9=W\u0026q8g8=\u0026q968b=\u0026qVLfrrfl18=\u0026r9O=Ummcy\u0026rNLZm=%2A6OWfdLzr\u0026rNLZy=TnUjFKTWI\u0026rbd9=PWPFjFcTw\u0026rd9=P%21owcIy%293\u0026rr=0U\u0026rz8d9=\u0026t6N8=c\u0026tg6z8=c\u0026u98b=j\u0026u98brL6z=\u0026v8%21p=\u0026v9%2AZvdL=\u0026v9O=\u0026v9zj=\u0026v9zm=\u0026vrz=ne_211yyvuyl-LbulbvSvb-ek-2bLbv2keb\u0026z6rl=~TIy\u0026z8d9=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001756600597404015326356482103\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222150414619734510268%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=rzTbHMb0AdSEUYGFz9kWLuq4_tbp_m-YkkpKl_ZUXLlAc8rl9NM1OxrQOXsMJd6jd3JAoEUYqCeRtaDnTEGKqHfpDm_WcAeIf1dZ5tb5rTDUDh0AP_4c9zt_POsC4ZaVWsRTSwYJrI7ZsHuaJUu0e6_xr_5YBIHMQX0QiL0J-SLkrJ0NPiruBw%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1756600597590%7D\u0026stime=1756600597590\u0026l3d=%257B%2522bid%2522%253A%2522369582%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252529a%253D%2526%252529x0O%253D%2526-1a%253D%2526.-1a%253D%2526.9Pb%253DljEV%25260b250B%253Dm..-%25253A%25252F%25252F6P6s6kbe.noPnk%2526191a%253Di%252659-beO%253Di%25265Aa%253Df%25266-H5%253D%25266P.%253D7~%25252ACccVV6AVbOe0Ab06260O~ROC0e06CR~0%25266a.F%253D%25266a.t%253D%25266aJ%253D%25266ank61e%253D%252691Cb%253DFFXfcMuj%252699Ba%253D%25257B%25252299PP%252522%25253A%2525228w%252522%25252C%25252299P.z%252522%25253A%252522n9Bn%252522%25252C%252522991-%252522%25253A%252522%252522%25252C%252522999P%252522%25253A%252522iV%252522%25257D%25269P%253DiV%25269sa0%25252Aa%253D%2526Aa-0%253DF%2526Aa-0Pe9.%253D%2526Bt.z-b%253DaknB6%2526J1%253DFEXMMiiXjEufXjXEjfj%2526P.-1a%253D%2526P01a%253DufuXFXijM%2526P1a%253DuHvMiEV4h%2526PP%253D8w%2526PaJ%253DwttiV%2526PmekV%253Dj7wFXZjfE%2526Pmekt%253Dn9Jf%2525281e.P%2526abPkkk%253D%2526bP01a%253D%2526e.J%253D%2526ekb00%253DF%2526htmlsrc%253D1%2526k9-6%253Di%2526kkdd%253DHu%25257CW%25257Cu%25252A9HAhn3%2526m..-9%253DF%2526n1a%253DXEFOfVtV_bsui_fEsf_66Oa_sFFMuFsjPXaM%2526nB6O%253Dneb%2526ps1a%253D%2526s1a%253DVMjXut%2526s6b%253D%2526sa0%25252Aa%253D%2526sb%253Di%2526x9m-%253Di%2526xB9.-%253Di%2526z-B-%253D%2526za9-0%253D%2526zse%252528PP%252528bc-%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yfdpco1.com/sk-park.php?pid=9PO15V947\u0026dn=acabamento.com\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Facabamento.com%2F\u0026al=en-US%2Cen%3Bq%3D0.5","date":"2025-08-31T00:36:37.620Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sr/754870121/SAFEFRAME.html?ule=765\u0026%2Ad9=FIj-WymyJlVPcJWIVWJvv-9JVjjwPjVTrF9w\u0026%2Agv-=%2ALl\u002666g9=%7B%2266rr%22%3A%220U%22%2C%2266rzq%22%3A%22%2A6g%2A%22%2C%2266d8%22%3A%22%22%2C%22666r%22%3A%22cy%22%7D\u00266V9b_9=\u00266d2l=jjFW1wPT\u00266r=cy\u00268d9=\u00269Zb-=j\u00269lrZZZ=\u0026AVd9=\u0026D9=\u0026Dtb-=\u0026LZlbb=j\u0026LzO=\u0026Nzz86=j\u0026Od=jIFwwccFTIPWFTFITWT\u0026V9b_9=\u0026Vd9=ywTFPm\u0026Vl=c\u0026Vvl=\u0026Z68v=c\u0026blSpbg=Nzz8%3A%2F%2FvrvVvZlLz%2ACr%2AZ\u0026d6d9=c\u0026gmzq8l=9Z%2Agv\u0026htmlsrc=1\u0026kkdd=3%2A%7CW%7CHAuhn%2A39\u0026lrbd9=\u0026p68lL-=c\u0026pu9=W\u0026q8g8=\u0026q968b=\u0026qVLfrrfl18=\u0026r9O=Ummcy\u0026rNLZm=%2A6OWfdLzr\u0026rNLZy=TnUjFKTWI\u0026rbd9=PWPFjFcTw\u0026rd9=P%21owcIy%293\u0026rr=0U\u0026rz8d9=\u0026t6N8=c\u0026tg6z8=c\u0026u98b=j\u0026u98brL6z=\u0026v8%21p=\u0026v9%2AZvdL=\u0026v9O=\u0026v9zj=\u0026v9zm=\u0026vrz=ne_211yyvuyl-LbulbvSvb-ek-2bLbv2keb\u0026z6rl=~TIy\u0026z8d9=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1 HTTP/1.1\r\nHost: realtimesearchresults.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco1.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":17,"connect":130,"send":0,"wait":0,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:40.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1707\r\nOrigin: https://acabamento.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nCookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://acabamento.com\r\ncontent-type: application/json\r\ndate: Sun, 31 Aug 2025 00:36:40 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:36.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:E4:C6:70:2D:8F:86:68:CF:5D:7A:6C:62:4B:B8:0B:CC:F2:4A:30","sha256":"81:A7:F9:EB:A5:70:77:98:6A:07:25:32:18:5D:46:26:72:12:36:ED:D3:73:60:A7:01:F6:86:8A:27:08:78:56"}}},"request":{"raw":"GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1\r\nHost: euob.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 43210\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Sat, 30 Aug 2025 23:37:33 GMT\r\ncache-control: max-age=43200\r\nexpires: Sun, 31 Aug 2025 08:01:20 GMT\r\netag: \"1cafa-NhhyXjqZPlhIYNMrvx+agt6Ade8\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: OFxA-AUH6DBJdAQbFqlRFO2-hhl1yNHCIqR51VNX7-93-R_7XwtphA==\r\nage: 16516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117498,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"baacb9f01dc488db5a05a99f0572d216","sha1":"3618725e3a993e584860d32bbf1f9a82de8075ef","sha256":"6319689170f193b97cfa3af51ec94606dfe76dc122efe0c1ec48c3869f1c951e","sha512":"12abef3d939f37275bfeab7a472a740a2aba44ae8b31fba97dec4c3d96fde75f75754e8ff704ffdee6b9d15fff6584f360eef362703d19c4e4b70a23fdb43a78","ssdeep":"1536:CrWmcv/i4ExmAutKsb/0zxxcTmYtCHlgxLA49ZqU5SLonkKi1OYptyb5VawJFomi:Sc5dtj/0PS59UOYDMFVHC","tlshash":"aeb3d6adb2e67025039334a5147f410ae27b5e503c4b8194d6bee9d4ac7ce8e513bfac","first_seen":"2025-08-18T13:04:07.83002Z","last_seen":"2025-09-03T08:00:39.212034Z","times_seen":12555,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":2,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126fe8c135ea42839a9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f6741d1d089537e3b12f8297155d233d86bcf51640721c15a0709325258c4ea394777be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c7c4c71015aa1877e312b55a1ae417dd9adf42a99b60a261f2ba3aea3979e71ebcfc248b5038e523d65cceb92a9e471d280f061856b4a95b98a260709a6323efac14931b09ca46adc59a259a0980a961ad9c57ed82a77c3c864873b82d8e9f38fedeb0538a53dbca984564328ae81719ab65ea1001713dd5946979284ccc6ec9537d86a88def5c638ef763b6cc45b2d85b296402c92a731ad0ce890469a35e03f4c4858ca3db308cec4ab78f8c978cb1ff384d9d8718554482da51e181330097bc48d6dbf42d8daac22e5c625b2d0629a86e9df7384b7eb494d78c8b11e0b9bf9494a0cb4b4db67a43a98e240ebfc33b37ea82d8850dc13cbb53fc11e3bf9a89066232267022b174110abe59071d402b659534529fcd953cdcc5d55aaaad5a8bd72c3eae1fa80f8aff44248229d4487c25f07f44a3a7cde220b1b199569b3645a87b295718072d63b8aac29cbbe0d997e06263e481659e7b79691652616c8791a90b4bea9acd81740c7e4af7784ce6d7adfd7143a69f994d0513fdd63fe1cdf5887449873a982108ab24bf0879a90d81170e58b567f9034e2d4a2a116807e604741c5141c03e0e706d0b2769fcec2970adf8d852f1c6312fc2fa104aa55b0897584721e7053307c63f31ad3d47147b36ec0a7f73dc5dd0dd13661a511603ec0ab825b48e471e99c4f9954644258b6262d80a7cb7a94146dd89719a0dfddff8742c64f0c7440e07d244e8ec14f4eb039e7fdc12993c1ae4a043ab0607e4d58930b42bfda975863cc3d2288ced916dbdeec9e0561ef7d\u0026cri=Yw1res0jDP\u0026ts=210\u0026cb=1756600597423","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:37.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=Yw1res0jDP\u0026ts=210\u0026cb=1756600597423 HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nCookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Sun, 31 Aug 2025 00:36:37 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-10T02:15:46.208014Z","times_seen":395316,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:38.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2481\r\nOrigin: https://acabamento.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nCookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://acabamento.com\r\ncontent-type: application/json\r\ndate: Sun, 31 Aug 2025 00:36:38 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:47.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1710\r\nOrigin: https://acabamento.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nCookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://acabamento.com\r\ncontent-type: application/json\r\ndate: Sun, 31 Aug 2025 00:36:47 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acabamento.com/","fqdn":"acabamento.com","domain":"acabamento.com","tld":"com"},"ip":{"addr":"185.53.178.51","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T00:36:36.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acabamento.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Jun 2025 06:02:55 GMT","end":"Fri, 05 Sep 2025 06:02:54 GMT"},"fingerprint":{"sha1":"94:D2:C0:FB:17:3E:70:AE:D6:F0:2C:62:70:78:A7:38:50:A3:60:4C","sha256":"0B:95:D2:83:DD:F2:97:10:B2:EA:CC:22:A5:41:F9:CF:EF:2C:3D:E1:30:15:AD:BE:6C:85:1A:4B:7D:7B:92:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: acabamento.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 31 Aug 2025 00:36:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_kSj5hg6EdYFzjeTZKfi/rw006ZUdzRdRWNojwB8JsrRMZ+gGiqB/wEHCikyX7Pt1N0rhfLJca7MoMU31R/g+DQ==\r\nx-buckets: bucket003,bucket077\r\nx-domain: acabamento.com\r\nx-language: norwegian\r\nx-pcrew-blocked-reason: hosting network\r\nx-pcrew-ip-organization: Blix Solutions\r\nx-redirect: skenzo\r\nx-subdomain: \r\nx-template: tpl_CleanPeppermintBlack_twoclick\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8719,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"81d0ca0e78edc44153f5c4582c9d26ed","sha1":"3d33c2a68259f2657401e5220a248f6c64f33744","sha256":"d427b3416deef0ebdb9893691005995aa891ed0226053b33e8bed4614071e02f","sha512":"732d03d60e445808909b71cb3efe904a3b9e482ff0fc6b11e2b9f87ee9ac13f0ce7d0884e49e72d7f4cedfcdd92287d33776c295377689a2c81e1e39ac630210","ssdeep":"192:DR8pKfsTxcYoHSlF5W1RoINoB1yi/3o/V9:DexcYoHSlF5cojon","tlshash":"ca02b3026b921046f22bc0a5ce59b71562289247d50bcdacfaec7b988f491e420d3fcc","first_seen":"2025-08-31T00:37:04.452098Z","last_seen":"2025-08-31T00:37:04.452098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":443,"dns":93,"connect":28,"send":0,"wait":51,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acabamento.com/","date":"2025-08-31T00:36:52.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1710\r\nOrigin: https://acabamento.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acabamento.com/\r\nCookie: cg_uuid=8cc0db496a6ae8798ed22b87f7f72db8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://acabamento.com\r\ncontent-type: application/json\r\ndate: Sun, 31 Aug 2025 00:36:52 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}