{"report_id":"a3e413ca-4d95-44b6-a59c-3c1d34a2c57b","version":0,"status":"done","tags":[],"date":"2026-09-11T02:34:50Z","url":{"schema":"http","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"title":"HeroCRM - O CRM que acelera resultados","dom":{"size":301207,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47362)","md5":"946e982332c7980a6b77cd7bbcadf777","sha1":"ee17982483a6f6e79cc8fe51634a12931ceb6d09","sha256":"af7a49af489b82a7291e48e83f9d7b42993e048ed1a7f0712059e2019e284c08","sha512":"01ef5ecbaf30229c4f6f9f2bfecc74ac41dd132cb7172450c3a78190899fb739a2b4b3d790786f7fd92c355c482311701cbbc8264924a818548d953350be502d","ssdeep":"6144:421Yl5qc/VjNsltMFHfTlQd18yXHUTqbESkWzHOpdmNsOoastLu6Km8LxpkQ5gcq:jZULt","tlshash":"335470907d47443a327f118f4003e68c6559aee9dabdaad2f8b39123f5facd07391924","dom_hash":"domhash920a0927bf47ec933d804f1a2e5c2937","first_seen":"2026-09-11T02:34:56.300082Z","last_seen":"2026-09-11T02:34:56.300082Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T02:34:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"herocrm.com.br","ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"domain_registered":"2024-11-22","domain_rank":0,"first_seen":"2026-09-11T02:34:52.67138Z","last_seen":"2026-09-11T02:34:52.67138Z","alert_count":256,"request_count":64,"received_data":2159749,"sent_data":33409,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Yoast SEO:28.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:4.0.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/7b7f6ef7d49814eeaadbe57c9859726b.js?ver=b0c3c","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"911995437aae1bc199d126bb26428fa5","sha1":"e11293ccb88be443b7b3780cd5eb0601bd7051fd","sha256":"398c57cf7fe56d0cf358e47151948e171af00f88f961ee540dd26cfe59e9f47d","sha512":"157c9b3c5cf65695614aaff0ed244317f950d19a7a497a119ebcf43ae293c88ebb71ab91d5bec4378849a830b23896ca980094146452e29cb40950628e5c8ced","ssdeep":"96:4E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMK:nhgws4WTBYNB1C9aNwAMPyd0R3SGaMS5","tlshash":"cac1a8c975def056135a10a594afb005e134be2870deb800aee0c4957eb44cd71b7fba","size":5781,"data":"","first_seen":"2026-08-20T02:52:09.678128Z","last_seen":"2026-09-11T10:27:10.180569Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/js/nested-accordion.294d40984397351fd0f5.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"82bdbb8c68f7005071fa53867c50985d","sha1":"17491249a6ebb6897ff1c21eee1b4463a54ca7f7","sha256":"13a74d448663f3f9bc16da1c986dd30972218b9f6fd975a61a8e80c410fa5f0e","sha512":"a006cf67eef50432927c8a8329813b0df843c6b851c99042d696d9f9e7199b127b2dfac9c041c80ba4a024365ed03669ba103290bb23c943a655c8c3b51c82cf","ssdeep":"192:sgvhePaTNyWsPHlrf6S2wvu3HCQo4LqZy4biMPBWP/Y/id8AxcRigwC6yn0eAdlH:sgvhxs/lryS2wmXC4WHiMPBWP/Y/id8s","tlshash":"5e12c512301d616149cfcbef76060e2e552101e9f42d759c7478caef76b8b8297fa236","size":9761,"data":"","first_seen":"2026-02-02T19:58:20.395861Z","last_seen":"2026-09-11T12:41:41.901485Z","times_seen":4786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-09-11T12:26:46.898374Z","times_seen":135983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/nested-carousel.659b0373371215e60dab.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e76fd7d1d69870225a6b93a630ab626d","sha1":"a024f113821ca29d6e74007595d7e52c8fd850b0","sha256":"abd588fb58b756113436ef0d5273e279f42e83f6f867e38ba4900614fcd17837","sha512":"6a6fbd5cf05fa000592fbb611d8d4f1483824f2b3a3af7f2a889e5c3cae2302acc0bcc66ab8b2f3ec50f377bded8c40595d9ec186a4a9bf1ecbf03795281ec7c","ssdeep":"","tlshash":"97618551722228ba95df4cdfa413022de6400dcce853714a7ae98ccad1f1ea613bcbb4","size":3362,"data":"","first_seen":"2026-04-02T04:17:48.400901Z","last_seen":"2026-09-11T02:34:56.37143Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"55762a92470b08641a9668817a938416","sha1":"27f1646dedc5b31c438c740c63d268c0569d233b","sha256":"21b9fda577a3c788265e9e0ca9aae452e670d1d1092fa1fb18d556ec614167a5","sha512":"ea422d081a6474b8df91ea8f82be25c6b7443f873af8fcb5406e66a7988e8b4fc8bf248ca8c226ff8ece0fc103c81c16998d4ef317525e98395533d9d7db0a6b","ssdeep":"","tlshash":"2c01a2e235a2d17ebe9ece770630025cab1cb147bc504a4bd9bc39aacc495123572994","size":694,"data":"","first_seen":"2024-05-09T14:18:20Z","last_seen":"2026-09-11T02:34:56.378162Z","times_seen":10092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6e16324249d1c8622af4f75682ce523","sha1":"11ab37ef949e86ecf91d62530a3b04a4b0f234ba","sha256":"592979563c5dc981f3c140c9864fc02a47de2edcd6dde72135109137feaed9af","sha512":"cc327c3ff56d04df9019fbd11ff5b6bb45515c346876dc5cbc9f683826ed4eb271def5c8b961bc165f9f6efc4dde756c2c14a80329a862fdfb5a3bea792725f8","ssdeep":"","tlshash":"c870008a8020a0083c2008828b200288a08a03f200200020ac002c0a0a00c208023a08","size":22,"data":"","first_seen":"2026-08-21T10:03:59.570808Z","last_seen":"2026-09-11T10:27:10.200292Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"8882e5218066c4c58e6dfdf7fa753080","sha1":"c52f2f876df85503909158051f3e574eedd95886","sha256":"5b069d903403271f9d8075bd035e4942a864471523ca965febc1938ebd0c5299","sha512":"2d499dc5a897905c05d00fe941bcbf6ce9bf27c65e0355cc10d05710c223d43c582749ea130ea686f7a316e906344671ccc6d582d4102aceabedc223960db7f8","ssdeep":"","tlshash":"1151643436c97e7b17a79f953c33f91720ec090841419db1a8ed84bd06aea78218be96","size":2875,"data":"","first_seen":"2026-09-11T02:34:56.38233Z","last_seen":"2026-09-11T02:34:56.38233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"04a9b59b7e49f913a3926f6431334155","sha1":"35f2521d3ab3f75895b02da9c6b5419e1a35be59","sha256":"94c4eed60653e14337c021261a52581e9b6f93ae9ba512912ca30ce656b3ac64","sha512":"40068c8ae55d5f7b8bdd0fcf5eabdf443cd6b033788c1686b0a96adf4f645bfd34d50ea7f0017c9514e3029752b213826373450e791760bf8310e0c303aaa750","ssdeep":"","tlshash":"57a0028530a76805c505d1605967fc00446415cb818eaa181ae5ee30e515598748232e","size":58,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-09-11T10:27:10.204923Z","times_seen":19290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"712d7bb4ead9270982876d1ef67145d4","sha1":"1a119f3b8d1bb5be48e728646f6a845f6c6bd426","sha256":"ad50e85bcd43b800924a54d9081e843a014d97d0109881e2117ef8c3296cb3eb","sha512":"4cf2ca24176586f2d53de39106f81957219e76c8f5aa596eb119266a2d87f6abc502bb5db52c66cb93281e71d630aa4d2914fe34e0fcf6c56eef042e953cd279","ssdeep":"","tlshash":"1d21a6692e621f24176eabe070c97a9f8cd01b352ad4bd591780d0b402cbcdef0592f7","size":1261,"data":"","first_seen":"2026-09-11T02:34:56.384854Z","last_seen":"2026-09-11T02:34:56.384854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/9c56d1e9b8285820a895efaa6b4dc3a7.js?ver=7d1a3","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e6f3316f1b9c225a21f549c3acc7f58","sha1":"fc1f5bb1b38ee28ffc19d70b085ee87142d4aa8c","sha256":"5979032fd5e35bd07c7989ec67264a0fd41007e11678ad46d162cc67e47b17ce","sha512":"bd57490d0f7f9da2115c497a3e54722743e012278573aa5d12326d9024b04843388ff67ca2cefea3e101b3bf3dafa095e62249bd3b94159b8da93c9e5a3f0f24","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/+:JsNGyrjiiNW65RmH0IW9v7G/+","tlshash":"17c172941a54fc2b21e139d8e00ba735652ec0373c1af981fa32eced54e4fd183aa531","size":5723,"data":"","first_seen":"2026-03-04T12:53:07.400641Z","last_seen":"2026-09-11T02:34:56.369256Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/d287ffb65090e3ccddfa49bfb3c60c7d.js?ver=6c86e","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9679fe476776547befea2305c99b10d5","sha1":"c9da6166a5d8e642a3b9c8283a89e04ad7e343d4","sha256":"dd73f85423ad73c481febcdaa85a8eacd3c67080f5dfeb44f5783dea92079558","sha512":"2c13a217abeb1134d7b37d55008e9424b2f2173a7b10cfa48c5aeb157f55a0fbd84e483fc0306a19fd4152b35c3b10c8ca3d9084190464c244c465c15f6e29d5","ssdeep":"96:1u/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiT:1GIhNBcAD0NRv8XlD3wXY2yH+EoaY2T","tlshash":"46b150c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0a7b3d","size":5097,"data":"","first_seen":"2026-08-20T02:52:09.609066Z","last_seen":"2026-09-11T10:27:10.187858Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/54ee1a53dd90f9f92df05db80d025a67.js?ver=d94c6","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"261264364e86db2f6f43802c98b6bee2","sha1":"a70c2bf505298e3274b963cdc1ca7a83a591ccec","sha256":"219f3d1bb76955d4f9979d5fb7e75de6ba0c0e75af089e51c325494eff2d639b","sha512":"02cd0f5d69a670e453350a7592d829496acffc95577e760fe768c6f0618bd498612f4f9c6566d6df9091b1588bb628f1bb9a69b757548f4ffc4f04e9f4a728e1","ssdeep":"384:+twgZ+EVxFm6cKJsqdldgglQtHuaQkba/iZTSXDTZmMo7YtD/MHJiIVkoh/vF7N0:IwK+EVxFm6cKiqdldgglQtHuaQkba/o0","tlshash":"c3b2d9053163ac7a50cf815be067420e7b374899b40570ed7abc6cdb95b8d9a33ea335","size":23940,"data":"","first_seen":"2026-04-04T15:57:11.880706Z","last_seen":"2026-09-11T02:34:56.354966Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T12:14:18.781797Z","times_seen":1053727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/44b2867ac3eb39f912d1f769b308cb7f.js?ver=8b086","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fbbdaf10fbdd4d6a43d62946c4f73e6","sha1":"216a2ae633c5a24acf2dd9ce4e6e60911f237eae","sha256":"8c25c6da93eb19dab8e9088cc7e2f7e79f7794b625c28732568ffcd24da58fd7","sha512":"9d0a9944e29fdc51946ef5b3919de5f453400e1ca50e5f48f863b892f5c9226ff625a18c09dd7b522843194905f2b2de21e5ca656d31435d9666ab720c98687f","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziN9:s+uhIA2","tlshash":"d833d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50603,"data":"","first_seen":"2026-03-31T11:04:14.057817Z","last_seen":"2026-09-11T10:27:10.187389Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/8666fc38436bef03b533870e9ddff11c.js?ver=b43dd","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c188111f8d91e8463f89acac8e1ffe20","sha1":"ac4c097ef254ee7f71e0cf191faa0953efcab8bb","sha256":"960a8d440932f08baf55cd08a37c610517c6c2debf8394a30612b4eec10ccc5b","sha512":"65ee5c046f556ae9fa5d0f1f512000bf9497a72fd47aa90f90c93738e6aa334c47ca2732b5ab8f18f6d6c1b71a6e7a621abc5f3caf6d3fd8f15ec947a110afbb","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSs:9P4k0vfSA4l","tlshash":"d282e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","size":18676,"data":"","first_seen":"2026-08-20T02:52:09.528189Z","last_seen":"2026-09-11T10:27:10.186418Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/mega-menu.857df1cf3198ae47b617.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b23882ec24ae53d851983713c460861e","sha1":"9801afe2fe3370bd4796857b24ea963ef4efb3fb","sha256":"6c23b9cdd8f3c31936014ac47b6c5c0a5b3a4162a2941fa00a20ab6e265ff169","sha512":"56d75d450569e4af38cc65fe6241ce2f065ebacade22025b8aa8dde5875247ad912a1ecd0fc5710ea067e46a8fdaccc1204c6891bec66bd8ffa2ce67dc3d9ab4","ssdeep":"768:ESIkWrKLRe3/l0A7gn8A3e+N8D9GT/uryHWmGP/Evr3CXKDn6VASDI6fDHzqlyGW:9WiRyt0A7gn8A3e+NU9GT/YyHtGP/cD+","tlshash":"35c2a77131426935418fa26fb1036629a72211c9b506a4ad7838ccee68f5fd333f5bb6","size":28208,"data":"","first_seen":"2026-04-02T03:20:56.480873Z","last_seen":"2026-09-11T09:45:08.23764Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/c90bc22cb203fca748f852130ddd0c0c.js?ver=aab3c","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a90e087d4305ac83741589c3a073addb","sha1":"4f44ece31dfb471519276ecfc283d6a2ef307995","sha256":"c38f0e5f5520140a116532a17e3b42d7713dc9f85635c58fac06fae21d41902b","sha512":"f2352e24ead2483302df7fb480b59656910b0c98f4d6ee099c18ee7ffd85720b5d0e3a0f6fba55fde073ee5b38a88dfd9293c9b81c2d8d941203b2c9d6203599","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3H:On8fajqZFwtdykZwRXcoWI2P9o7S3H","tlshash":"cb62337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a63f5719e006","size":15072,"data":"","first_seen":"2024-05-08T05:22:20Z","last_seen":"2026-09-11T02:34:56.336171Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/5060ecb73d243425485d49d3bc1ea8a7.js?ver=ab361","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"baf07315015471df7bda37547934e016","sha1":"da1dbf551408f51caf68ebb5b44477d05fecd321","sha256":"bcd8482491d261c223749a5b352d5f29eea4560d9dd7bfa030dc270327c37eee","sha512":"4a2841b478b18f269782ba418c82b756ddbfd8b67d213ad594b5e4ad6d816b993b948269bea3fb509ec6d05882f557c76fa8eb061efa9179eac12629cfaf45c4","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLOR4:5rprxaefKI0LP19m4q1WW+h4Mj7","tlshash":"0952c8adb56679724eb721b8f03bd24b71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-08-10T16:39:17Z","last_seen":"2026-09-11T11:12:59.211994Z","times_seen":11195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/f95cba8dc2dd5aca7fa3042885bfd6f4.js?ver=5ffad","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae88273d227299fbc92d47703b60e906","sha1":"ae143d3ff107e8a063ffe34ecaa72734a46c6ad4","sha256":"8884e83caa4ccc37213d910c02692e41978fe6babcd2e44786b5fb7b1e1d67a6","sha512":"18606cf490f165f54e625635ee03eb557b3761ad78a4e06ee8c6fa1e115ab4dfd194b21fb2940e213cd8db1f24d5b437b739a6f27571bbddf6ca61e433ed57b5","ssdeep":"","tlshash":"c8316766724a5d3a045ec2b72b4baa9fb166948f9400807c303efecf0560dd123e33b2","size":1831,"data":"","first_seen":"2025-10-29T02:18:27.495745Z","last_seen":"2026-09-11T10:27:10.180081Z","times_seen":1454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/8377d96f6b6d3d7cbd3261cdff36fe19.js?ver=d8b49","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"df373c33a1ff54bae7645176119ba334","sha1":"9e028b0a42e1020690f077c1cb4586471bcc9006","sha256":"713009ef92c8d48c658c9654ddaa22ee5d111da2f8b0ba922b3029d9b34c600b","sha512":"422a41f169d34587f72b5ac5502886c84d2e99a979e0b0a080dae6e2fbb583defe5cb218e72f9ff80f7ff4ad0c7976d65087e3a951582bb8408509b614da3871","ssdeep":"3072:SJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvN:SJLC4dkEUYnafpl9v8cIWybV4y+oGMMQ","tlshash":"eae3f8897360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7e99813ffffe","size":143405,"data":"","first_seen":"2023-11-06T15:28:03Z","last_seen":"2026-09-11T02:34:56.316795Z","times_seen":1052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.7ed04741ba7d5a80c556.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a33153776d116907c819701786818a4b","sha1":"09d945f449e97d9b1e4a30b3eb79f4af55b8d4bc","sha256":"5cbe2ae6aba7c14f53bb5a42dcf79ca6f6b29d47d322c0bf0d51b6ec4e6e16b2","sha512":"488ea4127bb2703df01c8322f55ce2c989c9695969668ffe3187ec7d68a61a4224d6717499d80f43378b6652e997fd89aaab60a82a363d8715a39c62429f2de1","ssdeep":"","tlshash":"4121ad72789276ef01df5657638b232ff6442ce86046a2957cf844b51cf0e553378ba4","size":1118,"data":"","first_seen":"2026-04-02T03:20:56.442477Z","last_seen":"2026-09-11T09:45:08.215109Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/0c6c5e7c5e132cf6617fdbd01aa9c8a6.js?ver=45f36","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"009ac9969322740eebf7f2ce05986762","sha1":"be447aa82eb44400d6089584d67510e96f2ef658","sha256":"7db63943c7b7093dee52e9ca5daab10db76ca2629c2f33874608dbf8761eb693","sha512":"0956e184c34d51c0cc71752079ec24250ac2f54b131863ca40940652bbe521f71400fda835d1db1a4c45e417c1c78349a9a0388bd1cd686483b39ec0efdf8ec6","ssdeep":"96:Bopx3DT76mc5Ro2Fk7LJPqkho4KYXh7NMCl2oOVXLyVqOWeYuGXhqnuvV8k+:Iv7yo2FmL9PhPXx6EOVWz0uI2k+","tlshash":"68d1449806949e1b26e03ad8b09b6b741f3dd0723c16ea81e651edec18fcfd147e6532","size":6243,"data":"","first_seen":"2026-04-04T15:57:11.977675Z","last_seen":"2026-09-11T02:34:56.359173Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-includes/js/wp-emoji-loader.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"131d82f5ac4c28e6364d94d23191ff1f","sha1":"995c698adb87183af07d6d859601c20ffa4cff99","sha256":"cac7fbd9be4afe7f67c4fcbf3e8933b0c930e70d4e527f8c6e68edf0895a2e81","sha512":"d9e1272ec303a1a4388b8102289febed20e542dcbb930b4c3f09d09e8bd1643c458a6f3a7ff498de3c95a7280f09bd94a8231a8e8a91fc6276dc34df0565bcaa","ssdeep":"96:orsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJO:cs7NAME0+eWjQvJBv","tlshash":"efb1a659eb7938df33fa01f3653a4d47eb614436e784d038c9ae631428b1893c375a1a","size":5166,"data":"","first_seen":"2026-09-11T02:34:56.386524Z","last_seen":"2026-09-11T02:34:56.386524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-11T12:30:36.400134Z","times_seen":53316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/882400089b37dad81c318b35c8e70805.js?ver=b38cd","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d862ba0d57d8146c188d18b0071e2b19","sha1":"c154103e41f326b352cf9408e6ff440ccd9cba3c","sha256":"7dbfa4b93b2612a3593357de78753449bd9f5e9aabba416896affa9282376aee","sha512":"8d1406ea52d460be69e7ee6d8dbda11893a0f2e8dde3ec1943dc91dc81dde634a1d4cabcfebd226bd3d01527affb540f4c28efd0663c7a4bf4c2d5982be5100e","ssdeep":"768:9/XscBD1+WE9A5yLce/gvd4dedEdkdPd2d4d5dqd1dIdMd/dpdedUdUdojPm7L+V:tsOD1+WE9A5yLcWgvGEeSBYWfQfOCZvR","tlshash":"1513b55171aaca2941cf88abf463164fb7215c9cf413f0da7afc8d82a564ec7a364731","size":43923,"data":"","first_seen":"2026-04-04T15:57:11.89013Z","last_seen":"2026-09-11T02:34:56.328076Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-09-11T12:26:46.889702Z","times_seen":160168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/4a6b373178d241b89047210a606d4c5e.js?ver=4649a","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aa1befb3787621f6fe0f8b7801643c9","sha1":"681cd6a43f1187c3a3bac3c2a7a5f9552c0a7fea","sha256":"50377795b5a2400bb2b08c0d3c86f7494f63f09a1000bdb2d40c789736b41113","sha512":"421963b38ef84ee1affefb29d85078e37334d31f236c6f90d3847d0d67c9e2f178f58e50ed83fcfddd69d1c84246a21398ebf82c8d8e98692adf930169398075","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Gl9:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnz","tlshash":"16e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","size":31929,"data":"","first_seen":"2026-03-04T12:53:07.270655Z","last_seen":"2026-09-11T02:34:56.351765Z","times_seen":541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.b3891112675eb0b0c4d5.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3188b95abb1a444304b4b1d025a870bd","sha1":"d3c4eb3d777e002c083175c25f4863a2eb799b30","sha256":"5aef826c365755b7840ce53952a087c34a814f86de523e34be4437b85cbfd8a1","sha512":"937240bceb571d1a2a7f0131dbb092a434ebac2208f247e9c06f124fbad1aa16f479f1a2244766448b244070621c31b5e8e3d4d156fafcc70814f2cdfb8a3365","ssdeep":"192:fmg5/Xw2+jBgo4L8M54bt2tzQt6P+WltcPoIOTeHthxVKZqRUTtgd8+tyHfy8bt8:fmg5/vg94hIt2tMt6P+WltcPoIOTeHtF","tlshash":"2ff17755704662b208ce5abf3502181f674381a6f005a96978788aef64f8fc377bd772","size":7683,"data":"","first_seen":"2026-04-02T03:20:56.424396Z","last_seen":"2026-09-11T09:45:08.24386Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://herocrm.com.br/wp-content/litespeed/js/5060ecb73d243425485d49d3bc1ea8a7.js?ver=ab361","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/f7e691634ee963bc9d624785578447ec.css?ver=b593f","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.669Z","timestamp":1789094057669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/f7e691634ee963bc9d624785578447ec.css?ver=b593f HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"d57c-6aa36737-69fc04f10f6257ec;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6542\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54652,"size_decoded":7002,"mime_type":"text/css","magic":"ASCII text, with very long lines (54652), with no line terminators","md5":"9f97ed50d941ce5e205c46e02b7bb2a3","sha1":"8d37724d3caf33e5d174c8d2ad3825b0a666846c","sha256":"8bc0e20367b002c33a33757071841a2538595e03e8ca750a1ce68a364ce97457","sha512":"91387b135e67f0e35f409835614b9e3c22b24c328476d48ed58a9357410521d924b91c36b78214038ae9a5b9084d373f36cce8dac6a287f9d55e75825d9f8847","ssdeep":"384:ls4JT8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmh3ldtraihks05ArOk:wFLh5mP3RbclDdis05Xk","tlshash":"d8330ca23d13b269226f442b82c7364c526495c1ee0375d9f944c523dafece63b36c6b","first_seen":"2026-02-03T19:47:48.734591Z","last_seen":"2026-09-11T10:27:10.181806Z","times_seen":991,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/0d9f6d87bd16ce9640a9d6b55a315b5b.css?ver=60df0","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.792Z","timestamp":1789094057792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/0d9f6d87bd16ce9640a9d6b55a315b5b.css?ver=60df0 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"701-6aa36737-5438f00f21cfbed;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 286\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1793,"size_decoded":723,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793), with no line terminators","md5":"c329a1f8486b82d9b9c7cb4d7060f346","sha1":"85b874b1c09c4f163738d439cacd53e6141f4f2b","sha256":"808a659eb4e85607c6efe022bff149c3076853c5570a322bd35e5e8cb9458904","sha512":"414974a35c9d401df85422ca92e886a3e0b57c6cd071023dd97d2987157fc9976d777d7b44c0c8d4a8caac81b0c1b862828bdaa67e5b05345894964a1dbe81a4","ssdeep":"","tlshash":"3731f650bd07662c787fa60f8413129c658494dee581ccc6dba1f60aa2fcde33336935","first_seen":"2025-04-08T12:29:44.439106Z","last_seen":"2026-09-11T12:41:41.841324Z","times_seen":43412,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.798Z","timestamp":1789094057798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"8f82-6aa36737-32e03e99472b55d9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 819\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36738,"size_decoded":1258,"mime_type":"text/css","magic":"ASCII text, with very long lines (36738), with no line terminators","md5":"5e833c7989586e8ea3906cb9e22aa513","sha1":"30f1ead6497922fbab536cf6f0ddd141f59b244f","sha256":"06ee81e29f8cbfd73c6088cc21a186ed0185ed4422c1111fab73102334a23851","sha512":"5dba295073e1f2a7cf8af5327e778413ed5eb3fea1df7d62265ceae56f35163490d93d5746524b8132737ec95281d19d9018558888daa45265e48afcf21a9323","ssdeep":"384:uszah43nCQGqdhmF8wtwSwTw4wBwOw820lt9D8wkwO:XUXWpY7qdB","tlshash":"2cf26bb6645b610462f78e5330c578063c19a08ab1d69596a71c0ddc8fff87a63bb33e","first_seen":"2026-09-11T02:34:56.310288Z","last_seen":"2026-09-11T02:34:56.310288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/7d1a8ab598736b74fb1d38e2222f92bc.css?ver=a8240","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.800Z","timestamp":1789094057800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/7d1a8ab598736b74fb1d38e2222f92bc.css?ver=a8240 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"3cf-6aa36737-a6489f49b3997bb0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 314\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":975,"size_decoded":752,"mime_type":"text/css","magic":"ASCII text, with very long lines (789)","md5":"7f0c37a39bc2d4a5ce6da2b43638bd03","sha1":"6bacc888208d5b393b40b854558a62fbf246e0f1","sha256":"3057f15286a94c2b1e4ad5972c64466a2f413a865b6d6e4b48d5b966f6c845de","sha512":"96e2569c52fface9b87166f83e1e4f8696398e9a7976a9f0319f449aa980fb70c02dbabaa62797ee64803a52a44327240a6a1fa3f838ccebfac3b45f3a191040","ssdeep":"","tlshash":"67115e2e080b0680319a1a0338d1bbdadc8962d57c895b3af136dcac88f5f5e73a5f15","first_seen":"2023-04-22T18:48:35Z","last_seen":"2026-09-11T02:34:56.313294Z","times_seen":650,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/44b2867ac3eb39f912d1f769b308cb7f.js?ver=8b086","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.894Z","timestamp":1789094057894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/44b2867ac3eb39f912d1f769b308cb7f.js?ver=8b086 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"c5ab-6aa36737-b1758959c23dde79;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15264\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50603,"size_decoded":15721,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50600)","md5":"1fbbdaf10fbdd4d6a43d62946c4f73e6","sha1":"216a2ae633c5a24acf2dd9ce4e6e60911f237eae","sha256":"8c25c6da93eb19dab8e9088cc7e2f7e79f7794b625c28732568ffcd24da58fd7","sha512":"9d0a9944e29fdc51946ef5b3919de5f453400e1ca50e5f48f863b892f5c9226ff625a18c09dd7b522843194905f2b2de21e5ca656d31435d9666ab720c98687f","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziN9:s+uhIA2","tlshash":"d833d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-31T11:04:14.057817Z","last_seen":"2026-09-11T10:27:10.187389Z","times_seen":832,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/8377d96f6b6d3d7cbd3261cdff36fe19.js?ver=d8b49","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.897Z","timestamp":1789094057897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/8377d96f6b6d3d7cbd3261cdff36fe19.js?ver=d8b49 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"2302d-6aa36737-5ee5d5aee1801bb3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37535\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143405,"size_decoded":37993,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df373c33a1ff54bae7645176119ba334","sha1":"9e028b0a42e1020690f077c1cb4586471bcc9006","sha256":"713009ef92c8d48c658c9654ddaa22ee5d111da2f8b0ba922b3029d9b34c600b","sha512":"422a41f169d34587f72b5ac5502886c84d2e99a979e0b0a080dae6e2fbb583defe5cb218e72f9ff80f7ff4ad0c7976d65087e3a951582bb8408509b614da3871","ssdeep":"3072:SJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvN:SJLC4dkEUYnafpl9v8cIWybV4y+oGMMQ","tlshash":"eae3f8897360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7e99813ffffe","first_seen":"2023-11-06T15:28:03Z","last_seen":"2026-09-11T02:34:56.316795Z","times_seen":1052,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.417Z","timestamp":1789094058417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/e4fc4dfb46df9dfff0c2f2d2a8b63824.css?ver=5e8a9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:49 GMT\r\netag: \"33dc-6a85c4e5-2dfaa34a7b99939d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13276\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13276,"size_decoded":13674,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-09-11T12:42:18.719306Z","times_seen":55595,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.611Z","timestamp":1789094058611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"2121-6a85c4e4-bc597c8996526bff;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2496\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":2952,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-09-11T12:26:46.889702Z","times_seen":160168,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/c6211667833ac801f0a381f1326b6424.css?ver=4d967","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.783Z","timestamp":1789094057783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/c6211667833ac801f0a381f1326b6424.css?ver=4d967 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"4d3d-6aa36737-4eacd0dce1ac75f2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2648\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":19773,"size_decoded":3088,"mime_type":"text/css","magic":"ASCII text, with very long lines (19730)","md5":"76b0739a9001b292c38599b0bdbaf5c4","sha1":"0e2a1be81ce3fd3bbbffab8048661a5605dc7f8d","sha256":"1b2bd947b12547cccb1cb12eecfccd2cd9ffc205d785618a3f465fb8e739977c","sha512":"1d2f247ba2a2c7e9ddf4bf1fde2e5b76ddd559dfaf6548c63606b06db306da63d13ae3bbf99e9ab82be17f1d836f8445b18f489a72d94bc8f691b4aad6e3433c","ssdeep":"192:iMW1QG+jfq/QSha6Jb5mLH+D5t5h1Zbtb6zkQBgVkyd43g:idQGKfq/5w6oHUh1FN6gAgVk4Z","tlshash":"3592cac0b8d3c021161faa5903daed2d97b97890dbc94890a875d5065edffe3a2d0a37","first_seen":"2026-04-04T15:57:11.911488Z","last_seen":"2026-09-11T02:34:56.318997Z","times_seen":7,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/71ef0bd9948ee75723e65ebddf06a9ee.css?ver=87042","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.796Z","timestamp":1789094057796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/71ef0bd9948ee75723e65ebddf06a9ee.css?ver=87042 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"151b6-6aa36737-631316c3d6f395f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1734\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86454,"size_decoded":2174,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8188117b5ded008a76df48c463e8ddf1","sha1":"3dda15485f193999539def411e5601042e51b126","sha256":"444ed2902c48fc2cb1f4392b0a2415d392954a936b68158ede0e704a3527eee1","sha512":"d79057554839f6af8023d98fffca0cd7886ab41e51e5ead8d7b0d0aa327f05219d4a5c2ffdf4dad6736107bccf45fe7df291b11ad23c0f452f42b535b256a7e7","ssdeep":"768:P4mva62JaMWjCOW9Cwrr/c75byX3fIbVzu/ju:r","tlshash":"f783ef7650176050c3f74da330ca6d49b80d905ab39a9063e31c99d8cfeb9ab17b937a","first_seen":"2026-09-11T02:34:56.320821Z","last_seen":"2026-09-11T02:34:56.320821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/2026/02/mockups-featured.png","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.821Z","timestamp":1789094057821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/mockups-featured.png HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"223b2-6a85c4e2-2ebb74bbf360fe59;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 140210\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":140210,"size_decoded":140609,"mime_type":"image/png","magic":"PNG image data, 879 x 549, 8-bit/color RGBA, non-interlaced","md5":"e05616cd9c9559e257e81a8ecc451949","sha1":"43477cdede86a37cf6d3db93e2ba0134d5f1d379","sha256":"9c64489a32e426f382fd59edfca2c2697a3c621e7562972ad383cc54fd94c02c","sha512":"a4ae68fb2654a4477a355bae10b6dc2d15d0fb6925ba1114414d206b47f14fb84ce18871bdd3d8e77ff929be75b47f0c0c0a40f519eea1aa8a26f8ef5026ecca","ssdeep":"3072:K43yxz5kUM9AKySGqlNFbhG86EuX+8k/aRrJebfKfnzCyliJXpuf:K43SWUMaybxhuZk/k1xGyOXps","tlshash":"0ad312dd29f2a12f98f935b763976471dd3eb8fbc1004aad9c17b418a2015f4d782067","first_seen":"2026-09-11T02:34:56.322471Z","last_seen":"2026-09-11T02:34:56.322471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.b3891112675eb0b0c4d5.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.635Z","timestamp":1789094058635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.b3891112675eb0b0c4d5.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"1e03-6a85c4e4-2f488f003717682d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1889\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7683,"size_decoded":2345,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (7640)","md5":"3188b95abb1a444304b4b1d025a870bd","sha1":"d3c4eb3d777e002c083175c25f4863a2eb799b30","sha256":"5aef826c365755b7840ce53952a087c34a814f86de523e34be4437b85cbfd8a1","sha512":"937240bceb571d1a2a7f0131dbb092a434ebac2208f247e9c06f124fbad1aa16f479f1a2244766448b244070621c31b5e8e3d4d156fafcc70814f2cdfb8a3365","ssdeep":"192:fmg5/Xw2+jBgo4L8M54bt2tzQt6P+WltcPoIOTeHthxVKZqRUTtgd8+tyHfy8bt8:fmg5/vg94hIt2tMt6P+WltcPoIOTeHtF","tlshash":"2ff17755704662b208ce5abf3502181f674381a6f005a96978788aef64f8fc377bd772","first_seen":"2026-04-02T03:20:56.424396Z","last_seen":"2026-09-11T09:45:08.24386Z","times_seen":243,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.7ed04741ba7d5a80c556.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.633Z","timestamp":1789094058633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.7ed04741ba7d5a80c556.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"45e-6a85c4e4-adbaf2b9555b2a8f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 430\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1118,"size_decoded":884,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1075)","md5":"a33153776d116907c819701786818a4b","sha1":"09d945f449e97d9b1e4a30b3eb79f4af55b8d4bc","sha256":"5cbe2ae6aba7c14f53bb5a42dcf79ca6f6b29d47d322c0bf0d51b6ec4e6e16b2","sha512":"488ea4127bb2703df01c8322f55ce2c989c9695969668ffe3187ec7d68a61a4224d6717499d80f43378b6652e997fd89aaab60a82a363d8715a39c62429f2de1","ssdeep":"","tlshash":"4121ad72789276ef01df5657638b232ff6442ce86046a2957cf844b51cf0e553378ba4","first_seen":"2026-04-02T03:20:56.442477Z","last_seen":"2026-09-11T09:45:08.215109Z","times_seen":246,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/70d4a1ba0dd38f64524b969836838f09.css?ver=87522","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.795Z","timestamp":1789094057795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/70d4a1ba0dd38f64524b969836838f09.css?ver=87522 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1456-6aa36737-9de74af1061e9ffb;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 710\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5206,"size_decoded":1149,"mime_type":"text/css","magic":"ASCII text, with very long lines (5206), with no line terminators","md5":"7bfe541f48646070d5e901bcce90f45a","sha1":"701d4288ee57b2c22c602d122624303dbfb97a9a","sha256":"4ada91f83b55c0318229073b7d8c1a5439d8bab52a6b7199003b5a0a759f416f","sha512":"0b9fcc7ad05aad2b0b276b31ba74bc262952e6acec1ec9f24ffeb485309e666cc1d687e9488916ee6a45c62954904c3617902e95e4063c69dbf8cb8eb6f93c15","ssdeep":"96:zy7aME5lVHfU1xF0s52QkkhG7sY9yDryr5ZOtmosx/K4i64+W4WWz3WzdWzx/XWn:e7aMEvVHfU1xF0s5NkkhG7sY9yDrU5Ze","tlshash":"c2b1dec0780f426a242bee850fc65f3d11b014e1dedeb55ca9579d1973edba29ee0834","first_seen":"2026-02-02T19:58:20.421897Z","last_seen":"2026-09-11T12:41:41.908246Z","times_seen":5003,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/5060ecb73d243425485d49d3bc1ea8a7.js?ver=ab361","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.814Z","timestamp":1789094057814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/5060ecb73d243425485d49d3bc1ea8a7.js?ver=ab361 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"3509-6aa36737-220e65346efe2baf;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4671\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13577,"size_decoded":5127,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13478)","md5":"baf07315015471df7bda37547934e016","sha1":"da1dbf551408f51caf68ebb5b44477d05fecd321","sha256":"bcd8482491d261c223749a5b352d5f29eea4560d9dd7bfa030dc270327c37eee","sha512":"4a2841b478b18f269782ba418c82b756ddbfd8b67d213ad594b5e4ad6d816b993b948269bea3fb509ec6d05882f557c76fa8eb061efa9179eac12629cfaf45c4","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLOR4:5rprxaefKI0LP19m4q1WW+h4Mj7","tlshash":"0952c8adb56679724eb721b8f03bd24b71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-08-10T16:39:17Z","last_seen":"2026-09-11T11:12:59.211994Z","times_seen":11195,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/2021/09/logo-herocrm.png","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.820Z","timestamp":1789094057820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/logo-herocrm.png HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"1d18-6a85c4e2-3c9e3d7747a8fa93;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7448\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7448,"size_decoded":7844,"mime_type":"image/png","magic":"PNG image data, 499 x 96, 8-bit/color RGBA, non-interlaced","md5":"e3cb7557e92aa580933e6c9628dbcbcb","sha1":"52b95ce81069027e1f3266d2036ca3afdf28fcea","sha256":"9785e1d092d74528091211003294d45f0014e92a8ef678f539792c6f34314f8f","sha512":"1144f6e19998b2dc32406b9a8a11aa3ece2bc77fe909f42b927884f01d6db0ab564958ccdeebc2e25e20a0a02bbf990d937135c32de2b4841c49f8eeec07bf1d","ssdeep":"96:Q2dnpBL0/Qfy285UIf9/NeLvqEqIjcWD/m9Ff7T7jBxsM8HA+CYiIOLwHaaskKYN:HNwm85UIfzWLfa7lxs/A+gLmaqKYN","tlshash":"d7e19e8c2cfb12441b85ace3e4e9148a4e23e987a7d5b1fab749c045743c233970b94f","first_seen":"2026-09-11T02:34:56.326592Z","last_seen":"2026-09-11T02:34:56.326592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/882400089b37dad81c318b35c8e70805.js?ver=b38cd","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.903Z","timestamp":1789094057903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/882400089b37dad81c318b35c8e70805.js?ver=b38cd HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"ab93-6aa36737-e811a600f44a63a8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10021\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":43923,"size_decoded":10478,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (43878)","md5":"d862ba0d57d8146c188d18b0071e2b19","sha1":"c154103e41f326b352cf9408e6ff440ccd9cba3c","sha256":"7dbfa4b93b2612a3593357de78753449bd9f5e9aabba416896affa9282376aee","sha512":"8d1406ea52d460be69e7ee6d8dbda11893a0f2e8dde3ec1943dc91dc81dde634a1d4cabcfebd226bd3d01527affb540f4c28efd0663c7a4bf4c2d5982be5100e","ssdeep":"768:9/XscBD1+WE9A5yLce/gvd4dedEdkdPd2d4d5dqd1dIdMd/dpdedUdUdojPm7L+V:tsOD1+WE9A5yLcWgvGEeSBYWfQfOCZvR","tlshash":"1513b55171aaca2941cf88abf463164fb7215c9cf413f0da7afc8d82a564ec7a364731","first_seen":"2026-04-04T15:57:11.89013Z","last_seen":"2026-09-11T02:34:56.328076Z","times_seen":54,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/a11ea1498b22ce580f74202c4cb62c34.css?ver=6df2b","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.785Z","timestamp":1789094057785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/a11ea1498b22ce580f74202c4cb62c34.css?ver=6df2b HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"280f-6aa36737-7802181c5bb6cbd7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 922\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10255,"size_decoded":1361,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-09-11T12:42:18.686044Z","times_seen":58848,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/810706773d56f9068e5762912033b6be.css?ver=842cb","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.787Z","timestamp":1789094057787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/810706773d56f9068e5762912033b6be.css?ver=842cb HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1276-6aa36737-c6254291b9a30953;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 357\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4726,"size_decoded":796,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-09-11T11:53:22.273571Z","times_seen":20138,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/5aaf5b5f104498f9b322b664fb7dc8dd.css?ver=81922","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.789Z","timestamp":1789094057789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/5aaf5b5f104498f9b322b664fb7dc8dd.css?ver=81922 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"3f2f-6aa36737-af2e380448f3d7c3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4227\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16175,"size_decoded":4667,"mime_type":"text/css","magic":"ASCII text, with very long lines (16175), with no line terminators","md5":"7d0e01fa6969de322b8ff1c2da82ab53","sha1":"c134ac07f828737b1821ba61e40843b7890d888e","sha256":"4f779bd69321c440f6ed70eada90f49b56eabb0031fdae90cbce4a6990118ad8","sha512":"aaa3d5f37f7eb7e9595b566f078e9b195932e6d6eb844f910dc34b2a46c48b18dbc61f55e83467c62a2aee9345c6dc79b484c77177fd5b8706a9e65454dadd4f","ssdeep":"192:0mUJbiKnezT4bfZ+SKbnxup/a2AkEf5rffu1eesedOJ9AZPz+c3At2/6:1UbezMbfZ+Vnh2A7fFf14X4z","tlshash":"587213685340282763274f364b71cbb9de7444d24b93896e91c0ee84d3b6cb9236f6e9","first_seen":"2024-08-20T03:12:07.726121Z","last_seen":"2026-09-11T02:34:56.33029Z","times_seen":5012,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.813Z","timestamp":1789094057813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:45 GMT\r\netag: \"15601-6a85c4e1-b9b6967155d087b1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29531\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":29989,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-11T12:14:18.781797Z","times_seen":1053727,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/8666fc38436bef03b533870e9ddff11c.js?ver=b43dd","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.895Z","timestamp":1789094057895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/8666fc38436bef03b533870e9ddff11c.js?ver=b43dd HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"48f4-6aa36737-dd6f3112cfca3ac0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6251\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18676,"size_decoded":6707,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (8489)","md5":"c188111f8d91e8463f89acac8e1ffe20","sha1":"ac4c097ef254ee7f71e0cf191faa0953efcab8bb","sha256":"960a8d440932f08baf55cd08a37c610517c6c2debf8394a30612b4eec10ccc5b","sha512":"65ee5c046f556ae9fa5d0f1f512000bf9497a72fd47aa90f90c93738e6aa334c47ca2732b5ab8f18f6d6c1b71a6e7a621abc5f3caf6d3fd8f15ec947a110afbb","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSs:9P4k0vfSA4l","tlshash":"d282e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","first_seen":"2026-08-20T02:52:09.528189Z","last_seen":"2026-09-11T10:27:10.186418Z","times_seen":217,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.420Z","timestamp":1789094058420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"bc80-6a85c4e2-7b42b2493a6e1a92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48256,"size_decoded":48654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-09-11T12:44:58.4575Z","times_seen":29907,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/mega-menu.857df1cf3198ae47b617.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.629Z","timestamp":1789094058629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/mega-menu.857df1cf3198ae47b617.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"6e30-6a85c4e4-f6b58b9b99affb49;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6692\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28208,"size_decoded":7148,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (28165)","md5":"b23882ec24ae53d851983713c460861e","sha1":"9801afe2fe3370bd4796857b24ea963ef4efb3fb","sha256":"6c23b9cdd8f3c31936014ac47b6c5c0a5b3a4162a2941fa00a20ab6e265ff169","sha512":"56d75d450569e4af38cc65fe6241ce2f065ebacade22025b8aa8dde5875247ad912a1ecd0fc5710ea067e46a8fdaccc1204c6891bec66bd8ffa2ce67dc3d9ab4","ssdeep":"768:ESIkWrKLRe3/l0A7gn8A3e+N8D9GT/uryHWmGP/Evr3CXKDn6VASDI6fDHzqlyGW:9WiRyt0A7gn8A3e+NU9GT/YyHtGP/cD+","tlshash":"35c2a77131426935418fa26fb1036629a72211c9b506a4ad7838ccee68f5fd333f5bb6","first_seen":"2026-04-02T03:20:56.480873Z","last_seen":"2026-09-11T09:45:08.23764Z","times_seen":241,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/c90bc22cb203fca748f852130ddd0c0c.js?ver=aab3c","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.805Z","timestamp":1789094057805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/c90bc22cb203fca748f852130ddd0c0c.js?ver=aab3c HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"3ae0-6aa36737-15eb914b921afb16;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4007\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":15072,"size_decoded":4463,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (14884)","md5":"a90e087d4305ac83741589c3a073addb","sha1":"4f44ece31dfb471519276ecfc283d6a2ef307995","sha256":"c38f0e5f5520140a116532a17e3b42d7713dc9f85635c58fac06fae21d41902b","sha512":"f2352e24ead2483302df7fb480b59656910b0c98f4d6ee099c18ee7ffd85720b5d0e3a0f6fba55fde073ee5b38a88dfd9293c9b81c2d8d941203b2c9d6203599","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3H:On8fajqZFwtdykZwRXcoWI2P9o7S3H","tlshash":"cb62337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a63f5719e006","first_seen":"2024-05-08T05:22:20Z","last_seen":"2026-09-11T02:34:56.336171Z","times_seen":877,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/8850791bbc6ea1e1f27f8347eefcc09d.css?ver=08990","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.799Z","timestamp":1789094057799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/8850791bbc6ea1e1f27f8347eefcc09d.css?ver=08990 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"e2d6-6aa36737-210aae3ae5c5f0f8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12102\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58070,"size_decoded":12543,"mime_type":"text/css","magic":"ASCII text, with very long lines (57884)","md5":"6b3809131a317f195fb1a64e33afcc5f","sha1":"2d9bbd3552a005729bce1d0621d8926e09280210","sha256":"33e8d2cca01252aa0f272d4b3a144adedbff5995992079d266009905c5c9581f","sha512":"231aa94fdd968e79fdc83d941c62143f1b2ff9a5a6d340a557cf0a3dab55bb3f2fdd0ff4971d6999deafe89ae06cf17663aa5c6aea5729013144a83512ce51eb","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bst6VSzs:0E0PxXE4YXJgndFTfy9et5g","tlshash":"2f43f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2024-05-10T08:18:29Z","last_seen":"2026-09-11T11:50:07.34602Z","times_seen":1181,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.409Z","timestamp":1789094058409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"bc80-6a85c4e2-7b42b2493a6e1a92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48256,"size_decoded":48654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-09-11T12:44:58.4575Z","times_seen":29907,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/18fe99568d04066224c96ab12cbf5ef3.css?ver=3c5c1","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.775Z","timestamp":1789094057775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/18fe99568d04066224c96ab12cbf5ef3.css?ver=3c5c1 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"eb66-6aa36737-55a4be78a864c73d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12361\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":60262,"size_decoded":12860,"mime_type":"text/css","magic":"ASCII text, with very long lines (60076)","md5":"61a57a64cc7709750e160a2554a54c10","sha1":"cd19cfa26d59df3656bd4a72405ef507a2d6ba1b","sha256":"08610c3df039994569b088f14008682f5fefcc33628fb33359e0b99fc394d7ec","sha512":"8454abba3992e3c57a9bfeede9cb31170a411b94706df878abb003ced762aed919a297bacb389709f03b1c5e8a255013c5062c04ae298c255f12d3a682a0dd3f","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzL:0E0PxXE4YXJgndFTfy9lt5n","tlshash":"7c430cb8e44d01c97736c44bbf81b2bc61baf73de5814d95f00e591c2ad26a812c5fba","first_seen":"2023-04-08T14:58:18Z","last_seen":"2026-09-11T02:34:56.337615Z","times_seen":779,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/e4fc4dfb46df9dfff0c2f2d2a8b63824.css?ver=5e8a9","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.803Z","timestamp":1789094057803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/e4fc4dfb46df9dfff0c2f2d2a8b63824.css?ver=5e8a9 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"3d7-6aa36737-6a897c97708b5ce8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 311\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":983,"size_decoded":749,"mime_type":"text/css","magic":"ASCII text, with very long lines (797)","md5":"79e22d34e7076536f53afcdb54ab705c","sha1":"ae12a2e432707d558932e4b4dbb6666eab008e56","sha256":"714b5923e2c445ac9190bded3918eb4e15fd11ac4986d9d8f55e1887c3316ed4","sha512":"41b567c252c8d4f312d26af6d4b775814befcea814bc1b5653e2a7693455c1ad49a33ab1a7f69bed60253477ebb5e1d143ecf5269d8dacbc8204540a8910e206","ssdeep":"","tlshash":"8a11af3a095e018431a60a0338e17b9a7c8d42d5bcdb966af226dd9c48f2e1f73d0f14","first_seen":"2023-05-15T17:37:08Z","last_seen":"2026-09-11T02:34:56.338185Z","times_seen":328,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.413Z","timestamp":1789094058413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/a9d0655681f9fb103a7969f4ad30186a.css?ver=2fbf9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:49 GMT\r\netag: \"13ecc-6a85c4e5-cfe0123bc638bd57;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 81612\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81612,"size_decoded":82011,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 81612, version 1.0","md5":"b4d6b90f14c0441aac364e194978408e","sha1":"142696d43851c8eba0f54c7b94c5f6ebd09703e6","sha256":"6b2680fab784d245cbb23d3b51e8d18740e8fc1c7c1c8eadcf0b2b7612125ff8","sha512":"feab357b65d7302cc6ca2afc86b84851c9b307ba68659fe9e6f7191ff38bdd1d38658e503124b6940f77f5c216b4400c23b8babcd6c13fac2313fa91e5269f09","ssdeep":"1536:mU9FSafiVK4eoDE9kuqu3GbcJuGiZmvfgFrsrr4l1ESfkmS3a+:mYFURoZCMLngsEl1DYK+","tlshash":"678312531fb0ab4ed86e9b3a171d7c3ba4cb2e224b4a704c1d5504068b7ba6d35f45c7","first_seen":"2024-03-11T23:30:43Z","last_seen":"2026-09-11T11:53:22.298182Z","times_seen":89492,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.792Z","timestamp":1789094058792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/18fe99568d04066224c96ab12cbf5ef3.css?ver=3c5c1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:49 GMT\r\netag: \"13ecc-6a85c4e5-cfe0123bc638bd57;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 81612\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":81612,"size_decoded":82011,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 81612, version 1.0","md5":"b4d6b90f14c0441aac364e194978408e","sha1":"142696d43851c8eba0f54c7b94c5f6ebd09703e6","sha256":"6b2680fab784d245cbb23d3b51e8d18740e8fc1c7c1c8eadcf0b2b7612125ff8","sha512":"feab357b65d7302cc6ca2afc86b84851c9b307ba68659fe9e6f7191ff38bdd1d38658e503124b6940f77f5c216b4400c23b8babcd6c13fac2313fa91e5269f09","ssdeep":"1536:mU9FSafiVK4eoDE9kuqu3GbcJuGiZmvfgFrsrr4l1ESfkmS3a+:mYFURoZCMLngsEl1DYK+","tlshash":"678312531fb0ab4ed86e9b3a171d7c3ba4cb2e224b4a704c1d5504068b7ba6d35f45c7","first_seen":"2024-03-11T23:30:43Z","last_seen":"2026-09-11T11:53:22.298182Z","times_seen":89492,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.905Z","timestamp":1789094058905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/18fe99568d04066224c96ab12cbf5ef3.css?ver=3c5c1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:49 GMT\r\netag: \"13174-6a85c4e5-7989d3a88ac0f3e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Fri, 11 Sep 2026 02:34:19 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78594,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-09-11T12:26:46.873866Z","times_seen":170202,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/2021/09/favicon-herocrm-01.png","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:19.259Z","timestamp":1789094059259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/favicon-herocrm-01.png HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"a86-6a85c4e2-e43682731a148e17;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2694\r\ndate: Fri, 11 Sep 2026 02:34:19 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2694,"size_decoded":3089,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"16d774208de4b82d5bd1d71f877550b0","sha1":"f8e9f090715a7a88cc881e572f72cc94726103f9","sha256":"30d303bfa3c0f77c028cbfd29424defbfff13ebb2aa79420d348685390869d32","sha512":"9edd1720ffd6c819ba41d928b4b5d66ac573e8be1677c6d2fc684f706069ccb8f9141226183c4935dfca49e23b1cdfe9c21632913b0b8987a555d1960b85eb2e","ssdeep":"","tlshash":"30510b0d8c829cd4469edd4339fee43f2f131a8490f0c172f9f7880559a48a34d692db","first_seen":"2026-09-11T02:34:56.339847Z","last_seen":"2026-09-11T02:34:56.339847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/8312ba7f113d1a70d42710f9188af602.css?ver=b273e","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.664Z","timestamp":1789094057664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/8312ba7f113d1a70d42710f9188af602.css?ver=b273e HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"13e8-6aa36737-3682fca06b7e6e03;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1124\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5096,"size_decoded":1584,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092), with no line terminators","md5":"a4cb2fa39aefe6e2580df508c8bf2e06","sha1":"f733da7c7b9a70aa15bf71050e127b20012ce672","sha256":"e0a8db43f7615137c22b7eeb942f5e6a9ba842704993b347ae41a53ce41dbd59","sha512":"1792af9f9a6a345f907b9cd5253896299db83c8c5724515c9dc066e67e23b8ca1531a8d76598159798a036227e07c5c27d03dd93cf8c9d928ff2192eba3bb27e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKD:y4yDhgGbMrM6cgjMp","tlshash":"f4b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-15T13:12:46.047797Z","last_seen":"2026-09-11T11:50:07.368818Z","times_seen":7526,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/0f3e35d39b3146f7d2754665a8b5958b.css?ver=a7ec1","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.667Z","timestamp":1789094057667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/0f3e35d39b3146f7d2754665a8b5958b.css?ver=a7ec1 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"5622-6aa36737-37bc578a3f659071;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4106\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22050,"size_decoded":4566,"mime_type":"text/css","magic":"ASCII text, with very long lines (22004)","md5":"5babddfc2edbf4457dd8e0a3cfccd45d","sha1":"806c7d772b5192a2d78a9234ee4664852ed2860a","sha256":"a7fd0a3cc62b81182c941992417b785c507a67adbc7f56cf92d7db5ecf33032d","sha512":"cf44f44f0733d055c321e03d2030d8adb6b75f492429b7787535a249bca5d0fe95d351eff57b6d1893def0c22effad3bf98bf5789bbf5463d953a875fbf0ae6c","ssdeep":"192:jATz877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSMU:D7iNyqEpSk8/aq8uFucbrgIYJU","tlshash":"fca2eae4e46923c87732c413e344b64c60d9fa20cec99d59faab850c1df16a716c6fb8","first_seen":"2026-04-04T15:57:11.934513Z","last_seen":"2026-09-11T02:34:56.341748Z","times_seen":111,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/06122c3763c8acca0d0a8c7486d3f72e.css?ver=ab35b","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.790Z","timestamp":1789094057790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/06122c3763c8acca0d0a8c7486d3f72e.css?ver=ab35b HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1570-6aa36737-48d3aa580c92f7ff;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 698\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5488,"size_decoded":1137,"mime_type":"text/css","magic":"ASCII text, with very long lines (5488), with no line terminators","md5":"1aa11df3ec3dafb554408c61919320ff","sha1":"c38ad72e822bc27608945821a6039bfab9661450","sha256":"cf46579b4794e91270ea9d52781e496740cd88daacea1adb812750c3316433b1","sha512":"482e3bfbe5768d75623263a8fbeed8a1fada3796720cd97bd2f5852d638aba78a3894233022cf276033bc1f8bd22f8ba6b516964364458d2eeb0b3b37197c30c","ssdeep":"48:VbD0j9UWW1AibuS9UEVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH2qYm6qg3B703VN","tlshash":"feb19d823f830023635f4e67292357bca2280dc45957b6aae2e1ac87e2b5cf5375f854","first_seen":"2024-12-26T21:02:05.985453Z","last_seen":"2026-09-11T02:34:56.343355Z","times_seen":1059,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/2026/02/thumb-chat.jpg","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.824Z","timestamp":1789094057824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/thumb-chat.jpg HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"166df-6a85c4e2-f80fc29102b26aa1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 91871\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":91871,"size_decoded":92270,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 595x387, components 3","md5":"05916d6b4434430d96e63456409b395d","sha1":"065f3667feffe6ee569054588a38f92e6aa39b94","sha256":"3415009a9f6e55cbfcaa40b36ca2f48d1f945643652bb60672db3653c0ae35e1","sha512":"8e1fcaef53bf226be96dcaacb708dd8e70b6f197ec6fa8ecfff8892273083ec50cf4acb6c00b0fbdf29772d01294e44e5abd019458e28f5177e6fe8eac4488c1","ssdeep":"1536:IyDDbQwcRJ/ECVYld3blLl0FoKE9HwNXbjJhTpF42tNZAQXmHS+TUXd:Ln0f/ECsrhl0FTVl7MQ2zT4","tlshash":"c193bd79f7d7e710a30f498d867e7cbb0392a6daa5cba80782420d68b0c5f35184357e","first_seen":"2026-09-11T02:34:56.345288Z","last_seen":"2026-09-11T02:34:56.345288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":810,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.907Z","timestamp":1789094058907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/18fe99568d04066224c96ab12cbf5ef3.css?ver=3c5c1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:49 GMT\r\netag: \"33dc-6a85c4e5-2dfaa34a7b99939d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13276\r\ndate: Fri, 11 Sep 2026 02:34:19 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13276,"size_decoded":13674,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-09-11T12:42:18.719306Z","times_seen":55595,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/6dfaaa842edec368e8b2f825703dcf2b.css?ver=e51b2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.662Z","timestamp":1789094057662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/6dfaaa842edec368e8b2f825703dcf2b.css?ver=e51b2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1564-6aa36737-2531a91a69b38cb6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1581\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5476,"size_decoded":2041,"mime_type":"text/css","magic":"ASCII text, with very long lines (5476), with no line terminators","md5":"b21137d86c57b5b6348ac50331b919b1","sha1":"64fc60625fe19a215fc30c1a5a904cf8b3ad1177","sha256":"ecc1849b67a06790b8bc67521aa2c34a79a9a9f1d015c3da060f7284fed203cf","sha512":"43903aca5e81ca9ed67113c9c221014d9ce68e2551715c88b09e6818e67510215a6afe56e3c38ed793c111ebfcf5aa6aadb6aef9f906346f06fe5fccc3adc9b5","ssdeep":"96:vS+FaXYXqXXXNuoSA1C4pIE7RhPCZBG9H9zk59ETReQWe0O8HrZZ8nX2Upv6:vDFioyHNuL862hKZBG9H9rX8L/M0","tlshash":"7bb16462971031847577c83637917ed47a111615c8336ab4f426adfccbca4271a39f9a","first_seen":"2026-05-22T00:42:54.784279Z","last_seen":"2026-09-11T11:50:07.370544Z","times_seen":450,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/a3bdd3f39c652f99ed6a600ab6fe1521.css?ver=322f5","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.665Z","timestamp":1789094057665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/a3bdd3f39c652f99ed6a600ab6fe1521.css?ver=322f5 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1c0f-6aa36737-d31c5ef486750f82;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1256\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7183,"size_decoded":1716,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7181), with no line terminators","md5":"d203b4e30b2dd8eea8daf3076db3265e","sha1":"ce93cb8c5104e6e72362a4ca4aefa358d2b1fbb7","sha256":"210547d125ccf1d2906e23828f7ab7f31dde946ca0a40a7d094cde1d03f7b626","sha512":"c1ddadf02ec4c379f3d8e1b76bda148d526585c7e92ee40aa7d5f2478f214b222b09b5daffcc653c828c41f35b5960640929f75ed0096bd5f78f3cbb9ede1183","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyCWsy6ZM3zzirdae64If3mfOOeZhYz:F/9j3EU5n1lpy6ZNZaL4fJ","tlshash":"d0e1af63f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-06-19T15:53:42.709818Z","last_seen":"2026-09-11T11:50:07.345455Z","times_seen":2687,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/a9d0655681f9fb103a7969f4ad30186a.css?ver=2fbf9","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.802Z","timestamp":1789094057802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/a9d0655681f9fb103a7969f4ad30186a.css?ver=2fbf9 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"3d5-6aa36737-2faab4e80fc4a49e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 315\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":981,"size_decoded":753,"mime_type":"text/css","magic":"ASCII text, with very long lines (795)","md5":"79ff7a03e7cfd3329b6ed97dcd57c37e","sha1":"2195dc28d0f24663964b819679e66e03ec830e22","sha256":"302a966a849ef7333614e45372bec5f9e5561da78b09a86640a70e5e09c365c7","sha512":"8350cc8228a088eb0a72537e7ccf429197420b47e005254310f65775e5a8114e55f9e3530745479e724232a5c105d8ba5fe3c4a05c443d9b5b4803611e88d76b","ssdeep":"","tlshash":"d211cb26090a018471970b0739d2ab9aac4943c17c8a8e6af127dd9c8cf5e5e73b2f64","first_seen":"2023-04-06T17:02:00Z","last_seen":"2026-09-11T02:34:56.347947Z","times_seen":540,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/2479cc857b7ce011fcd44597390bef6f.css?ver=e30f6","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.777Z","timestamp":1789094057777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/2479cc857b7ce011fcd44597390bef6f.css?ver=e30f6 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"684e-6aa36737-99a13fc92e3290a6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3941\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26702,"size_decoded":4381,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-11T12:42:58.520031Z","times_seen":91186,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/fc7e4c8741b6b1ae325b69bb5785528d.css?ver=60e12","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.786Z","timestamp":1789094057786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/fc7e4c8741b6b1ae325b69bb5785528d.css?ver=60e12 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"230-6aa36737-4892367fa2f13f32;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":564,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-09-11T12:26:46.862625Z","times_seen":130349,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/2d5bd7b6366d1b69165293816b039d42.css?ver=9b175","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.793Z","timestamp":1789094057793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/2d5bd7b6366d1b69165293816b039d42.css?ver=9b175 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"10a2-6aa36737-b3328fa0147f54a5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 671\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4258,"size_decoded":1110,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-09-11T12:45:19.063039Z","times_seen":47896,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/4a6b373178d241b89047210a606d4c5e.js?ver=4649a","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.896Z","timestamp":1789094057896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/4a6b373178d241b89047210a606d4c5e.js?ver=4649a HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"7cb9-6aa36737-9c07fb4ed1181cf;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10010\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31929,"size_decoded":10466,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31927)","md5":"3aa1befb3787621f6fe0f8b7801643c9","sha1":"681cd6a43f1187c3a3bac3c2a7a5f9552c0a7fea","sha256":"50377795b5a2400bb2b08c0d3c86f7494f63f09a1000bdb2d40c789736b41113","sha512":"421963b38ef84ee1affefb29d85078e37334d31f236c6f90d3847d0d67c9e2f178f58e50ed83fcfddd69d1c84246a21398ebf82c8d8e98692adf930169398075","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Gl9:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnz","tlshash":"16e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","first_seen":"2026-03-04T12:53:07.270655Z","last_seen":"2026-09-11T02:34:56.351765Z","times_seen":541,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.414Z","timestamp":1789094058414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"bc80-6a85c4e2-7b42b2493a6e1a92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48256,"size_decoded":48654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-09-11T12:44:58.4575Z","times_seen":29907,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/cf7fe9fead6d0580580049571f1bc835.css?ver=5ca01","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.781Z","timestamp":1789094057781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/cf7fe9fead6d0580580049571f1bc835.css?ver=5ca01 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"d6-6aa36737-c60a027b7caf132d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 214\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":214,"size_decoded":606,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-09-11T12:26:46.879775Z","times_seen":126496,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/d287ffb65090e3ccddfa49bfb3c60c7d.js?ver=6c86e","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.899Z","timestamp":1789094057899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/d287ffb65090e3ccddfa49bfb3c60c7d.js?ver=6c86e HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"13e9-6aa36737-4f81ec983ce790f8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1751\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5097,"size_decoded":2207,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5060)","md5":"9679fe476776547befea2305c99b10d5","sha1":"c9da6166a5d8e642a3b9c8283a89e04ad7e343d4","sha256":"dd73f85423ad73c481febcdaa85a8eacd3c67080f5dfeb44f5783dea92079558","sha512":"2c13a217abeb1134d7b37d55008e9424b2f2173a7b10cfa48c5aeb157f55a0fbd84e483fc0306a19fd4152b35c3b10c8ca3d9084190464c244c465c15f6e29d5","ssdeep":"96:1u/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiT:1GIhNBcAD0NRv8XlD3wXY2yH+EoaY2T","tlshash":"46b150c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0a7b3d","first_seen":"2026-08-20T02:52:09.609066Z","last_seen":"2026-09-11T10:27:10.187858Z","times_seen":62,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/54ee1a53dd90f9f92df05db80d025a67.js?ver=d94c6","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.902Z","timestamp":1789094057902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/54ee1a53dd90f9f92df05db80d025a67.js?ver=d94c6 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"5d84-6aa36737-bcb53e112dd596d2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6166\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23940,"size_decoded":6622,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (23895)","md5":"261264364e86db2f6f43802c98b6bee2","sha1":"a70c2bf505298e3274b963cdc1ca7a83a591ccec","sha256":"219f3d1bb76955d4f9979d5fb7e75de6ba0c0e75af089e51c325494eff2d639b","sha512":"02cd0f5d69a670e453350a7592d829496acffc95577e760fe768c6f0618bd498612f4f9c6566d6df9091b1588bb628f1bb9a69b757548f4ffc4f04e9f4a728e1","ssdeep":"384:+twgZ+EVxFm6cKJsqdldgglQtHuaQkba/iZTSXDTZmMo7YtD/MHJiIVkoh/vF7N0:IwK+EVxFm6cKiqdldgglQtHuaQkba/o0","tlshash":"c3b2d9053163ac7a50cf815be067420e7b374899b40570ed7abc6cdb95b8d9a33ea335","first_seen":"2026-04-04T15:57:11.880706Z","last_seen":"2026-09-11T02:34:56.354966Z","times_seen":54,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.415Z","timestamp":1789094058415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/7d1a8ab598736b74fb1d38e2222f92bc.css?ver=a8240\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:49 GMT\r\netag: \"13174-6a85c4e5-7989d3a88ac0f3e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":78196,"size_decoded":78594,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-09-11T12:26:46.873866Z","times_seen":170202,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/2021/09/favicon-herocrm-01.png","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:19.257Z","timestamp":1789094059257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/favicon-herocrm-01.png HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"a86-6a85c4e2-e43682731a148e17;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2694\r\ndate: Fri, 11 Sep 2026 02:34:19 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2694,"size_decoded":3089,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"16d774208de4b82d5bd1d71f877550b0","sha1":"f8e9f090715a7a88cc881e572f72cc94726103f9","sha256":"30d303bfa3c0f77c028cbfd29424defbfff13ebb2aa79420d348685390869d32","sha512":"9edd1720ffd6c819ba41d928b4b5d66ac573e8be1677c6d2fc684f706069ccb8f9141226183c4935dfca49e23b1cdfe9c21632913b0b8987a555d1960b85eb2e","ssdeep":"","tlshash":"30510b0d8c829cd4469edd4339fee43f2f131a8490f0c172f9f7880559a48a34d692db","first_seen":"2026-09-11T02:34:56.339847Z","last_seen":"2026-09-11T02:34:56.339847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/d48fc671cfdd4869824c1fce1696b35d.css?ver=75432","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.797Z","timestamp":1789094057797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/d48fc671cfdd4869824c1fce1696b35d.css?ver=75432 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"4a76-6aa36737-ec5abd99cf72685;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 644\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":19062,"size_decoded":1082,"mime_type":"text/css","magic":"ASCII text, with very long lines (19062), with no line terminators","md5":"ddfcde0c55932bea4b321deb4a8b8d49","sha1":"039f3474ced9df024de0601a516c9d67564f6d25","sha256":"f58ac8941c0f71b45b9391f79c576165cc164e415c7ecb13858002b195fdf072","sha512":"d0d2e4434ab1ff3a64be8da584743d92acf2ef6c3c9529d46c016839d37f1fa242804a04febd22618e72a6750ed55b49264140253dba98099d0eff198a1016c3","ssdeep":"192:DL2Dn3xJ9DW3ELkDF3PlbD03yzCDT3FZZDC3ozQDB3v7mRC4e//DYr32r+DP3O:DKxIEePIyyFQo+v7mRC44M72aO","tlshash":"88829ab2d09a514163f38d5330c47a066c0d900aa5d7a59bd71c4eec8fe797a27a23be","first_seen":"2026-09-11T02:34:56.356897Z","last_seen":"2026-09-11T02:34:56.356897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/0c6c5e7c5e132cf6617fdbd01aa9c8a6.js?ver=45f36","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.898Z","timestamp":1789094057898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/0c6c5e7c5e132cf6617fdbd01aa9c8a6.js?ver=45f36 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1863-6aa36737-282359f51a8ea782;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2608\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6243,"size_decoded":3064,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6198)","md5":"009ac9969322740eebf7f2ce05986762","sha1":"be447aa82eb44400d6089584d67510e96f2ef658","sha256":"7db63943c7b7093dee52e9ca5daab10db76ca2629c2f33874608dbf8761eb693","sha512":"0956e184c34d51c0cc71752079ec24250ac2f54b131863ca40940652bbe521f71400fda835d1db1a4c45e417c1c78349a9a0388bd1cd686483b39ec0efdf8ec6","ssdeep":"96:Bopx3DT76mc5Ro2Fk7LJPqkho4KYXh7NMCl2oOVXLyVqOWeYuGXhqnuvV8k+:Iv7yo2FmL9PhPXx6EOVWz0uI2k+","tlshash":"68d1449806949e1b26e03ad8b09b6b741f3dd0723c16ea81e651edec18fcfd147e6532","first_seen":"2026-04-04T15:57:11.977675Z","last_seen":"2026-09-11T02:34:56.359173Z","times_seen":54,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.418Z","timestamp":1789094058418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"bc80-6a85c4e2-7b42b2493a6e1a92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":48256,"size_decoded":48654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-09-11T12:44:58.4575Z","times_seen":29907,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/js/nested-accordion.294d40984397351fd0f5.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:19.117Z","timestamp":1789094059117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/nested-accordion.294d40984397351fd0f5.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:19 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"2621-6a85c4e4-d38fec8f3a174749;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2705\r\ndate: Fri, 11 Sep 2026 02:34:19 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9761,"size_decoded":3161,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9761), with no line terminators","md5":"82bdbb8c68f7005071fa53867c50985d","sha1":"17491249a6ebb6897ff1c21eee1b4463a54ca7f7","sha256":"13a74d448663f3f9bc16da1c986dd30972218b9f6fd975a61a8e80c410fa5f0e","sha512":"a006cf67eef50432927c8a8329813b0df843c6b851c99042d696d9f9e7199b127b2dfac9c041c80ba4a024365ed03669ba103290bb23c943a655c8c3b51c82cf","ssdeep":"192:sgvhePaTNyWsPHlrf6S2wvu3HCQo4LqZy4biMPBWP/Y/id8AxcRigwC6yn0eAdlH:sgvhxs/lryS2wmXC4WHiMPBWP/Y/id8s","tlshash":"5e12c512301d616149cfcbef76060e2e552101e9f42d759c7478caef76b8b8297fa236","first_seen":"2026-02-02T19:58:20.395861Z","last_seen":"2026-09-11T12:41:41.901485Z","times_seen":4786,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/7b7f6ef7d49814eeaadbe57c9859726b.js?ver=b0c3c","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.901Z","timestamp":1789094057901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/7b7f6ef7d49814eeaadbe57c9859726b.js?ver=b0c3c HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"1695-6aa36737-4f672ccf5394adc8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2371\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5781,"size_decoded":2827,"mime_type":"application/x-javascript","magic":"data","md5":"911995437aae1bc199d126bb26428fa5","sha1":"e11293ccb88be443b7b3780cd5eb0601bd7051fd","sha256":"398c57cf7fe56d0cf358e47151948e171af00f88f961ee540dd26cfe59e9f47d","sha512":"157c9b3c5cf65695614aaff0ed244317f950d19a7a497a119ebcf43ae293c88ebb71ab91d5bec4378849a830b23896ca980094146452e29cb40950628e5c8ced","ssdeep":"96:4E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMK:nhgws4WTBYNB1C9aNwAMPyd0R3SGaMS5","tlshash":"cac1a8c975def056135a10a594afb005e134be2870deb800aee0c4957eb44cd71b7fba","first_seen":"2026-08-20T02:52:09.678128Z","last_seen":"2026-09-11T10:27:10.180569Z","times_seen":61,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.411Z","timestamp":1789094058411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/inter-e9bdaa9d.woff2 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/wp-content/litespeed/css/db1f0b4aa913e122d08404413e69ccff.css?ver=e9ec9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Aug 2026 14:59:46 GMT\r\netag: \"bc80-6a85c4e2-7b42b2493a6e1a92;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48256,"size_decoded":48654,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-09-11T12:44:58.4575Z","times_seen":29907,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.647Z","timestamp":1789094058647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"544-6a85c4e4-924a647d8b3aa74f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1348,"size_decoded":1046,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-09-11T12:26:46.898374Z","times_seen":135983,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T02:34:16.515Z","timestamp":1789094056515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.33\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://herocrm.com.br/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://herocrm.com.br/wp-json/wp/v2/pages/954\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://herocrm.com.br/\u003e; rel=shortlink\r\netag: \"95-1789093682;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 53381\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:28.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:4.0.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":300306,"size_decoded":54017,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47288)","md5":"0c6751f25819c4bfd0e21e5e8a410eec","sha1":"058b2ae1b33bcf87db1829bc6a14306c4cac8e5a","sha256":"50e5c0e411b886def797708d770b68d33330424a1da9ecdf0b37d240f06bafd6","sha512":"a79443eaedb784eb5440f2ab34517f439c874089a9e038c0b2058e9098edaf037c2ce320796ce4848e574c8addd558a3a038be108f0d1203a452c1b27ecf395f","ssdeep":"6144:ml1Yl5qc/VjNsltMFHfTlQd18yXHUTqbESkWzHOpdmNsOoastLu6Km8LxpkQ5gcm:iZUU4","tlshash":"f65460907d47443a327f118f4003e68c6559aee9dabdaad2f8b39123f5facd07391924","first_seen":"2026-09-11T02:34:56.366004Z","last_seen":"2026-09-11T02:34:56.366004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1367,"timings":{"blocked":-1,"dns":105,"connect":214,"send":0,"wait":216,"receive":390,"ssl":441},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/f95cba8dc2dd5aca7fa3042885bfd6f4.js?ver=5ffad","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.890Z","timestamp":1789094057890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/f95cba8dc2dd5aca7fa3042885bfd6f4.js?ver=5ffad HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"727-6aa36737-e1141c562f6d8b38;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 494\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1831,"size_decoded":948,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (1829)","md5":"ae88273d227299fbc92d47703b60e906","sha1":"ae143d3ff107e8a063ffe34ecaa72734a46c6ad4","sha256":"8884e83caa4ccc37213d910c02692e41978fe6babcd2e44786b5fb7b1e1d67a6","sha512":"18606cf490f165f54e625635ee03eb557b3761ad78a4e06ee8c6fa1e115ab4dfd194b21fb2940e213cd8db1f24d5b437b739a6f27571bbddf6ca61e433ed57b5","ssdeep":"","tlshash":"c8316766724a5d3a045ec2b72b4baa9fb166948f9400807c303efecf0560dd123e33b2","first_seen":"2025-10-29T02:18:27.495745Z","last_seen":"2026-09-11T10:27:10.180081Z","times_seen":1454,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/js/9c56d1e9b8285820a895efaa6b4dc3a7.js?ver=7d1a3","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.892Z","timestamp":1789094057892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/js/9c56d1e9b8285820a895efaa6b4dc3a7.js?ver=7d1a3 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"165b-6aa36737-1465f4ad547f0bee;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2277\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5723,"size_decoded":2733,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5721)","md5":"5e6f3316f1b9c225a21f549c3acc7f58","sha1":"fc1f5bb1b38ee28ffc19d70b085ee87142d4aa8c","sha256":"5979032fd5e35bd07c7989ec67264a0fd41007e11678ad46d162cc67e47b17ce","sha512":"bd57490d0f7f9da2115c497a3e54722743e012278573aa5d12326d9024b04843388ff67ca2cefea3e101b3bf3dafa095e62249bd3b94159b8da93c9e5a3f0f24","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/+:JsNGyrjiiNW65RmH0IW9v7G/+","tlshash":"17c172941a54fc2b21e139d8e00ba735652ec0373c1af981fa32eced54e4fd183aa531","first_seen":"2026-03-04T12:53:07.400641Z","last_seen":"2026-09-11T02:34:56.369256Z","times_seen":572,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/plugins/elementor-pro/assets/js/nested-carousel.659b0373371215e60dab.bundle.min.js","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.662Z","timestamp":1789094058662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/nested-carousel.659b0373371215e60dab.bundle.min.js HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:48 GMT\r\netag: \"d22-6a85c4e4-5c763155a6e35891;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1360\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3362,"size_decoded":1815,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3319)","md5":"e76fd7d1d69870225a6b93a630ab626d","sha1":"a024f113821ca29d6e74007595d7e52c8fd850b0","sha256":"abd588fb58b756113436ef0d5273e279f42e83f6f867e38ba4900614fcd17837","sha512":"6a6fbd5cf05fa000592fbb611d8d4f1483824f2b3a3af7f2a889e5c3cae2302acc0bcc66ab8b2f3ec50f377bded8c40595d9ec186a4a9bf1ecbf03795281ec7c","ssdeep":"","tlshash":"97618551722228ba95df4cdfa413022de6400dcce853714a7ae98ccad1f1ea613bcbb4","first_seen":"2026-04-02T04:17:48.400901Z","last_seen":"2026-09-11T02:34:56.37143Z","times_seen":233,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:18.722Z","timestamp":1789094058722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:18 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 19 Aug 2026 14:59:45 GMT\r\netag: \"58e0-6a85c4e1-632ed70ee854005f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4916\r\ndate: Fri, 11 Sep 2026 02:34:18 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5372,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-11T12:30:36.400134Z","times_seen":53316,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"herocrm.com.br/wp-content/litespeed/css/35540fbc9847ebe0ffe8a64b721da855.css?ver=e876d","fqdn":"herocrm.com.br","domain":"herocrm.com.br","tld":"com.br"},"ip":{"addr":"223.27.112.232","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://herocrm.com.br/","date":"2026-09-11T02:34:17.791Z","timestamp":1789094057791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"herocrm.com.br","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 23:54:22 GMT","end":"Tue, 17 Nov 2026 23:54:21 GMT"},"fingerprint":{"sha1":"0F:E3:4D:DD:69:64:30:66:D0:71:66:01:A8:49:48:29:47:29:7C:41","sha256":"52:FD:EB:B7:D7:79:F7:82:1A:3D:E1:E5:8F:3A:34:7C:AC:11:A0:5E:1B:04:E1:BC:3F:61:ED:9B:2A:1F:2F:7C"}}},"request":{"raw":"GET /wp-content/litespeed/css/35540fbc9847ebe0ffe8a64b721da855.css?ver=e876d HTTP/1.1\r\nHost: herocrm.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://herocrm.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 02:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 02:28:07 GMT\r\netag: \"261c-6aa36737-2ebaa36ab894c86e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1331\r\ndate: Fri, 11 Sep 2026 02:34:17 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":9756,"size_decoded":1771,"mime_type":"text/css","magic":"ASCII text, with very long lines (9713)","md5":"47ae1e8c3c953fe1f166cc883fbf92fc","sha1":"f45d543267e3b9a950188b4d89b44dc3de53da44","sha256":"0d3a90583f7e00e7e8f5eea4e46f692b1622eac441e8e1080883c708d74515de","sha512":"2228a800d99199a48b0a1e89198bf94b6d3fe215fae6f5e04030006517c5757239e2a4af36870921df8e5529f007483f67e9665be45c44b6a59bb7260617c728","ssdeep":"96:BHLMwkFAk3yNZt2v+U+VSUxLU75VbzBezybKPTFeiTQglATdGiLY/5DXCviOnkI3:9LMw5H5R65/n4GYId5mgw6V","tlshash":"ee1236893fc34037de1f0e2d11970529b6685de0954389a8a5f36c11d3e9bf22b0ee2e","first_seen":"2026-05-01T02:31:59.691678Z","last_seen":"2026-09-11T02:34:56.374187Z","times_seen":7,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"herocrm.com.br","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"herocrm.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}