{"report_id":"9ad4071c-5461-460a-bf13-15d436ea1230","version":6,"status":"done","tags":[],"date":"2026-04-04T12:25:03Z","url":{"schema":"http","addr":"finance-estadao.cyou","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"finance-estadao.cyou/","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"title":"Início | Estadão Cyou Finance","dom":{"size":19070,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0779161b79e25e15fc1cb20392d0ac25","sha1":"d10a48773771983bcc34429835e922de4f2b1430","sha256":"28ce8a134dd30dd01e678ca2e030151fd2536792f49af86052a6a2ffe9dd8b10","sha512":"a6e3c07c46468a683c383eca84523750aa186bb204bf47aa2457f497ed46d68334f97d7e49f314e5516871661e86cf3d0c415fd22058807379848f388e898b56","ssdeep":"384:jruqEn/3/g9WIKeagKKkqXZkpmDeuPdVA/nisjjFX:Q/4wKVXZv/F6/nhnFX","tlshash":"1082b432aaf11037416383c57791af1ba9d1c64bc62b4b2572fe8bc98fd2d52c92351e","dom_hash":"domhashd4ce5c3c4d3ff952f71d0313fd92ed30","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"finance-estadao.cyou","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:25:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":3,"received_data":397591,"sent_data":1497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"finance-estadao.cyou","ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-31","domain_rank":0,"first_seen":"2026-04-04T12:25:04.181109Z","last_seen":"2026-04-04T12:25:04.181109Z","alert_count":18,"request_count":9,"received_data":37845,"sent_data":4077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"finance-estadao.cyou/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/js/main.js","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18bff4a4cdc6a187e6208a96e66c1989","sha1":"cba37587099dbcb2ff92af6037280501f2c8a8e1","sha256":"73cbf35f97c654da4105c89a4140c8f20c91fb6b3ed3a4d3c3bca9d61b554e3f","sha512":"d9077919c9effa6aa4a810ccb98863620289a994e8d20ff5a672c8d78a8ddb8d73580f5b6702c45aa043cf0060501609ed06add7af537cd154dabc95b7d32c23","ssdeep":"96:je/4uWuCVOtE6XWiwpOIOIcrwJ+DAnUUv7XnHgZpSH:aW9O6oWixbUJA4FHgTY","tlshash":"1ba1113a6a9600b53db3e07ea7df9145b5a530037c48da11b85cb4062fdcec11979bf9","size":5041,"data":"","first_seen":"2026-04-04T12:25:07.083379Z","last_seen":"2026-04-04T12:25:07.083379Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://finance-estadao.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3496994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKd8NLX452Wf1YRCxL2ojtT0XLvb4scwI6aZhv23SLW%2FXN5Fl29jhkUCajbaDq4S2qVixy3yI4K0LOl0xN4iY49Cs6Jjdg%2F7AP9N7vZKsRT3%2F%2BpmDQ4tah2uxO9eJ1ezOmc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704aa25fb58deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:28:08.672412Z","times_seen":18004,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":4,"receive":2,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/img/hero.svg","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /img/hero.svg HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=up%2FzlgbwzO093OJeH82vB5hqtlV%2FnImdwpFmJKshYgLeBjEV%2B61Sa8PdF8fuqWZQ3nZqC7miKb1JmFIFjz5kiy7fzRpmDOAE2yVCbiPTUxasSyEGQ3%2FqwridayZVqzt24VI29nh%2FSA%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-65b\"\r\ncf-ray: 9e704aa23eaa1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f017e54accde45631fd233181b429915","sha1":"597adee2974c72212e19c19152a5d6b31253df38","sha256":"77bba2c2ccb22bd02e2caa23083fab271c48096eac816f4e93b5b9723b34b117","sha512":"011ac8eaab1911d2be09e93e0eaf7295b0c5fd8454f1bbfa5345636e3bec8f0e79f7433f6dd62c783dee5d5bdefe14fd40e30bbdad9fbc368ec0f13d1f4305f2","ssdeep":"","tlshash":"5131c0f1d2885416d3048b0c63097b567787e4c69f99c610f9881b9e6b848eb9cee3dc","first_seen":"2026-04-04T12:25:07.065412Z","last_seen":"2026-04-04T12:25:07.065412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/img/service-1.svg","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /img/service-1.svg HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJUNn86p5fk4NF7rLeGdBX%2BBHuVmIPfJ91sAYDEX5p708Cj7ynI%2BveE9AutEiPbOwbbQlAK9v%2FcRmYCwGCqgghMJzYjbE%2BbhP6%2FmQLIkIPXF6QFe2Y34WsOeTJY9qtgM8RB8IYwjsQ%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-261\"\r\ncf-ray: 9e704aa23eab1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf7a749e90fc7f604619627d82025946","sha1":"d8040cc7bb83c0a14b03da98e45f599781cbb655","sha256":"1c40c3952462ac8cc3a2e240f5bc3cf96dd5e82c8a185e576bc6811eb834fc7c","sha512":"cbd36f6956a3c92cc974a0f56962cc75dfc963d6fbfe19583abe99f3849b6ced2ee6ae0b4741e4c90e49e58bc0aa570327e7c03ca8ed914a1f93c0bcd4cc1314","ssdeep":"","tlshash":"34f00ca2e3880014c6008e8dab467f29328be0ce8618c048f4405a0a9acded7b8d22fc","first_seen":"2026-04-04T12:25:07.06859Z","last_seen":"2026-04-04T12:25:07.06859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 04 Apr 2026 13:12:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksMsIZopYFukHeE5U7geX5UTQ1ETTbrIYQmsTDv0cdXgdcgBFu30P%2BjUOLTyJPj8%2BaQSyNcV%2B98oJI%2BYDM9F%2FY5wz3V2H%2BZDgXVwCvIHkAilOZyEZPBnALDCEmSGnHcLD4z7fu81nA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncf-ray: 9e704aa24eae1ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/img/sprite.svg","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /img/sprite.svg HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jkurzeLpASm9LqUExojA0uY4aFtUPJOws1KatYjVy01PUQ%2FJH0O8KBf%2FxYzSm9VS1cmTl5I94hpGmYCMlxlMEZNDILkEFvg1vEAJTt%2Fg4asdGy5tLvoGQ3l6n70wMd5fFpS2yi%2BYg%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-984\"\r\ncf-ray: 9e704aa25eb01ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a698caca5fa2ef7cc0632fd205fe8046","sha1":"431b5fa8aa45a538a5f0dc5e15f2be5322b4f240","sha256":"3ed2174b9324a8b5c8396548cbff3ab0273273e7fcb00225ce9c7cd06456ef29","sha512":"21f3833f96aeb9f82cf37f182ab6464ba8607d2c4bb99c228dfbba95d54f166bb538eb75b50a4072f0cb12cff870c2019d71ca8ed17a1cc826b542e1429c225b","ssdeep":"","tlshash":"0541796161a8581cdb41410a9b3d74ab25af96cf4bcd496834a008b15f2d39b79bf3f8","first_seen":"2026-04-04T12:25:07.072127Z","last_seen":"2026-04-04T12:25:07.072127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/favicon.svg","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGnT%2BGq28vvVCwsQPxNBDEY88G4%2BQBVTSRQin4sNXNpu6wMKk6PhAyzjsiFv%2BgBdZO19h71VVTR03qBu3gkYtMXTSZYBem0F2rZwdEUWKc5Tyxg3RUQmLa%2FYaMagNOs%2FEu8Ct9Gr1w%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-100\"\r\ncf-ray: 9e704aa41ede1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"363dab4fda9831ac77ca6eb9483ef74d","sha1":"4493843a26f1b8c2acc6ee315598afcd4f5402b2","sha256":"b2fd2752308c8de9558cd957f2a4e76668a85a9768d1c72f303247ac74aceaa1","sha512":"90aaa86ad692cf162d61de8e17a297fa991a20a670d8784fd9f9bcd9c0500f1493f58bff848e8a50f5c6d03b92ac7d3d8a6e499e66057b66832dfb0374023435","ssdeep":"","tlshash":"a3d02e65e0998600c6088d03aa2a381e614ee8c6d9c58928f5a0011a1ac99a3298931c","first_seen":"2026-04-04T12:25:07.07422Z","last_seen":"2026-04-04T12:25:07.07422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:24:42.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEOngTtoYNs9FSz3X5WaYQNQG42xT2apw90Qk1J%2FGVfepmufTLlEiRuCXRIN5pr1MfsuozkC%2F0Xz55yzqqcvrpott9g8AY3DVRx4fyObwuCOZT0Aa7TgEdmyDu138X35hhMUHWGlYw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e704aa0fa3c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":19330,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316)","md5":"4bd474bd6c83642f8e4de639193a7b39","sha1":"e797aa2b7553fe9b9d32ce408ab63e18afcf3846","sha256":"f37a821aafdebec5fdaac1f0148106c10f4e42cfb53bf50744149d3c9be6fc14","sha512":"5b56bca86e8a25a7de07266e2e3996a2881c8e0982382d0e28bcff01bafb0d1a2c72113f658a00c97cfe3321c02693a9a4ebd019b822028c024a39d56f37d999","ssdeep":"384:RruqEn/3/29WIKeagKKhckZkpmDeuPdVA/nisjqK5VFF:a/SwKGkZv/F6/nhXFF","tlshash":"6082b532a9f11037016383c57791af1baad1c647c62b4b2572fe8bca8fc2d52c96351e","first_seen":"2026-04-04T12:25:07.076276Z","last_seen":"2026-04-04T12:25:07.076276Z","times_seen":1,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":66,"dns":43,"connect":1,"send":0,"wait":46,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/img/service-2.svg","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /img/service-2.svg HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0I2z1Z2svTwNxsstpjwvC2gwi1O0QFeCIJW8IDqDvfon6JYzyEGlreYB3Tt69ae09iKHrMleaMj257TF43IqK6nU60fLoQ3tJn6JEL3XL8tvqccbpw6cRpln1qVV79oLBU5rMRhfVA%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-260\"\r\ncf-ray: 9e704aa23eac1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"109fd0a9dd4b63016b4b346caba20fdc","sha1":"2ab54685fc693349ab14b6e431760f87017c40aa","sha256":"1f33861b1d748bb2faad88a673e103ade87ed2c51a18b558d15bd343062e1d8a","sha512":"2b9383ad7029ab6f139e0fdddd4f8bc13cd1cc0abd2fef88b0906afce56521c5be5f8b3fc30b24704ad52919cc3dd663e226e9502f2ed193aa7bae22e323b388","ssdeep":"","tlshash":"18f00ca2e3880008c2048e8dab463f293387e0ca8a18c458f4415b0a9ac9ec778d22fc","first_seen":"2026-04-04T12:25:07.078696Z","last_seen":"2026-04-04T12:25:07.078696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/img/service-3.svg","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /img/service-3.svg HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWeIYd4uVvPd7iMeTjY8AkLpwyjM6knFt1%2BOct9jMRy%2BSWB9%2FSOr%2BIkQUdge5TWjpNdwWzQvdtRMrvAFgJnRuoozYOYZuUqPvSXpfqh4RXxMg%2FCgB31k0cSnu23OlbQ6WxF4RYThkg%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-25f\"\r\ncf-ray: 9e704aa23ead1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a697420b4ff7fb3051e45f2f69ca6f44","sha1":"732d2e41f84121aef66c1b7654c0dad1a36ee4ca","sha256":"becf421da67f95934537c462b69cb1166faba2fb6210cb33eeedb0b536cb05f9","sha512":"cec467f197ab3951f41bacb0a59650edcdc524cf2a7a527a699653dd202da8fc8bdd97a43e1ac2f19d412e45ac2b150a317a33308e599fb8c24e195bfbcc7ab2","ssdeep":"","tlshash":"77f00ca2a3880004c604ce8dab563f6a328be0ca8618c048f4411a0a9ac9ed778c22fc","first_seen":"2026-04-04T12:25:07.080727Z","last_seen":"2026-04-04T12:25:07.080727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://finance-estadao.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2509374\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTAn6qIWTAr%2FqDVm6YOjDVFBJUhmtqoIh%2BXuhID66YnEhdfuLWEf6CSsBQDvroRs3RRv9ie2abljYoXcm6lzGfcAZZFxcE1MHA9avN5zvc%2BOi8ibW7dw4ib46fKl2p9hvjU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704aa25fcb8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:05:33.986787Z","times_seen":21876,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":4,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finance-estadao.cyou/js/main.js","fqdn":"finance-estadao.cyou","domain":"finance-estadao.cyou","tld":"cyou"},"ip":{"addr":"172.67.219.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance-estadao.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 14:52:06 GMT","end":"Mon, 29 Jun 2026 14:52:05 GMT"},"fingerprint":{"sha1":"40:E6:28:94:F5:95:E2:9A:05:5F:C1:7C:CC:B1:71:65:DA:09:E9:DB","sha256":"F0:04:DF:D2:97:88:42:BA:42:66:2D:B0:9A:A3:56:B3:B3:F7:E1:E7:20:99:44:89:E5:74:BD:ED:24:B4:A6:1A"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: finance-estadao.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccBsNbxgS65bhvHLrqs0VWidK6XrKATRJzo7lib12Hf2JpnAmgUjp5yEaaRUknqs58qUgLAMpkaNL40j3fZFXPV%2F179BlLPwvIQPj4A2MWqrNtcZMGSDgYTyIHAkMd1JxNVXKPbWsw%3D%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 11:31:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69cd0219-13b1\"\r\ncf-ray: 9e704aa24eaf1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"18bff4a4cdc6a187e6208a96e66c1989","sha1":"cba37587099dbcb2ff92af6037280501f2c8a8e1","sha256":"73cbf35f97c654da4105c89a4140c8f20c91fb6b3ed3a4d3c3bca9d61b554e3f","sha512":"d9077919c9effa6aa4a810ccb98863620289a994e8d20ff5a672c8d78a8ddb8d73580f5b6702c45aa043cf0060501609ed06add7af537cd154dabc95b7d32c23","ssdeep":"96:je/4uWuCVOtE6XWiwpOIOIcrwJ+DAnUUv7XnHgZpSH:aW9O6oWixbUJA4FHgTY","tlshash":"1ba1113a6a9600b53db3e07ea7df9145b5a530037c48da11b85cb4062fdcec11979bf9","first_seen":"2026-04-04T12:25:07.083379Z","last_seen":"2026-04-04T12:25:07.083379Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"finance-estadao.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finance-estadao.cyou/","date":"2026-04-04T12:24:42.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://finance-estadao.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://finance-estadao.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:24:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2509374\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPIO%2Bc2gp%2BV5GA7sMMknaKC3s3NFGJD1eIQQ669lIgVrMfj2UkW42ChtrcdvLTKO1qIE%2B23GkmT%2FUQzCCQArTatAVU2dfUH4gUIcfdo2oKBGkbn8lz6OgJkhMVWdw%2Bt5GQI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e704aa40b978deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-04T23:05:33.986787Z","times_seen":21876,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}