{"report_id":"a670456a-7f61-4e0c-aca1-b715367833e1","version":0,"status":"done","tags":[],"date":"2026-07-18T15:55:59Z","url":{"schema":"http","addr":"ricardoborgeshipnoterapia.com.br","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"title":"Ricardo Borges Hipnoterapia – Só mais um site WordPress","dom":{"size":701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"db0ce0972f16ec25d0eaf188851efd56","sha1":"61d373a3cbb6975b7efc7fe789e6c1b390874a1f","sha256":"70df9b0f1ba0a0c1abf5bf2b5c117ebf58ae868cb3e3232ee22efe01958ece7a","sha512":"74489b9f2710004926e320f04cd00ac45e6b3ef4082710c0f4665a67aaded43c67f5288a0e6fce1213779b6014b7b7be76f237728bc007ee038de744cf841cc4","ssdeep":"","tlshash":"ed01448bf405382d9673032430e93d89987e93608c402230b24e62c346c47e75b06b95","dom_hash":"domhash66fb451f1b6f50d037d5916aa3d25bcf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ricardoborgeshipnoterapia.com.br","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T15:55:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":3,"received_data":179120,"sent_data":2219,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"betop.stylemixthemes.com","ip":{"addr":"104.26.12.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-12-02","domain_rank":0,"first_seen":"2019-02-26T09:19:48Z","last_seen":"2023-10-04T11:40:45Z","alert_count":0,"request_count":3,"received_data":23657,"sent_data":1837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":7,"received_data":166196,"sent_data":4041,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.addtoany.com","ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-10","domain_rank":28267,"first_seen":"2012-05-21T12:58:18Z","last_seen":"2026-07-13T15:50:51.792315Z","alert_count":0,"request_count":3,"received_data":79935,"sent_data":1578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ricardoborgeshipnoterapia.com.br","ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2021-08-02","domain_rank":0,"first_seen":"2026-05-17T13:56:10.778654Z","last_seen":"2026-05-17T13:56:10.778654Z","alert_count":354,"request_count":118,"received_data":3791260,"sent_data":65307,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:4.1.4","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Elementor:3.4.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:5.8.10","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"AddToAny Share Buttons:1.1","description":"AddToAny Share Buttons plugin for WordPress increases traffic and engagement by helping people share your posts and pages to any service.","website":"https://github.com/projectestac/wordpress-add-to-any","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["WordPress plugins"]},{"name":"Contact Form 7:5.4.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ced66e9db0cd202a74b947348c11deef","sha1":"fa6ef99bc5528d06d0af59040f03e954cbdc53a0","sha256":"3d2ef57f3c5825c7685494cc22f2ac81303f090c05630c9a6fc1c2c9db0e6a8a","sha512":"9268b321113684f70b5c1a0478b48a9edeaa3fca23587cf2d59ef737d0c0f73d1c8199a5068464fb40f2fd5bb9a215115cb9c58654936681ef80d0be5c59be97","ssdeep":"","tlshash":"c34144763b9154952af208f3f15f1b0e3f26450340c5aa36c594aae0393edd5c0fad1c","size":2132,"data":"","first_seen":"2026-07-18T15:56:07.64302Z","last_seen":"2026-07-18T15:58:59.478746Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffb073ff55fba86611ca298956a6eafe","sha1":"594a113eb7c809bceb23a9bb7748909463969a0f","sha256":"42758d27614a0bb946251589b348e78ec448e43d5d8214ae452667e15f53ffca","sha512":"ace40ed0fa2d4a28e09567cf5a4dc0573dee5dd408c9f9ba0f8e8a664723a1f471f2cd8622468dd00c1dadad6fa54e4cd5ee307d395b8177d341f28941ca1a71","ssdeep":"","tlshash":"5f118206b92821f106a420f06b9ffec63e1517b5ce1e926362603dfc25c2f6e6c6609c","size":1085,"data":"","first_seen":"2026-07-18T15:56:07.644404Z","last_seen":"2026-07-18T15:58:59.479605Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"32d037ec7d92c40e708a50b2b644450e","sha1":"2f07b576e8b71575a341d192ce4fa326e3e9426a","sha256":"b1d9942c63591c549c58183b6d6200e7ad7f9a244e01810c197f249ccf1cef4d","sha512":"51dc8d3941c72e61bf8cf48ec346c8de54981dcd2183301d66902912022c5cf94945becbe0783427e407977558d3e185e7457710cee6fffc7c8e38f947b724c2","ssdeep":"","tlshash":"02b0126989101df6158407d40241fa7211a9702439204478ba4103405d0020a5c10004","size":89,"data":"","first_seen":"2026-07-18T15:56:07.645882Z","last_seen":"2026-07-18T15:58:59.480575Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c87fb7ae05126c3961d8886b758e19a","sha1":"6432c1af17d942796885565a0f33c12a64f6281a","sha256":"3be695b58a655ec89e1f8fce861d34dd691fa10c9feba103e3c4a4f3aca993b1","sha512":"97b932c67f52f6025d5de14e5fe17f208ab3d877ff1f7c32502814fcf357ce87df63716ec65326c924a72dff0160f1638a1a45cbbc7b473e6b41f0e5c19b22b4","ssdeep":"","tlshash":"aab0126589111df6154407e45341fa7221fd701479324465b64103444d000069d10008","size":92,"data":"","first_seen":"2026-07-18T15:56:07.647368Z","last_seen":"2026-07-18T15:58:59.481426Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c907beb029a8f8a9c2c7846dd537acd7","sha1":"6480759f41a2d6c8cfd0e2c51bc5ff1d1f3dcee0","sha256":"96d5281218d71e3a01a1986bd03de434834bea93bb8f552ccb0b4b9fdf83fd76","sha512":"a8e8ded09a41ec2124cc45ac025938ce7eedc5b95c1d59579b016f65e6ead8be670e2c0bf7af330c1d2b64bed4086916f09d35726771e7c8760dd40da62dd0e3","ssdeep":"","tlshash":"2ac0804111128cf54f74e11473fd570068d5f665b5730a467771535d441054505550b9","size":160,"data":"","first_seen":"2026-07-18T15:56:07.648761Z","last_seen":"2026-07-18T15:58:59.483389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"780f366faff5aa96729342efcf9dad76","sha1":"a918e2a830dba528f8d7b6fcaceaa4e18fbaa65b","sha256":"db6e1cab7e0301f9a157b4e23cc4e8bb015d2ff08e073758c1b259d0a1a1dbec","sha512":"21e42e565471959bed57d2fd6efb540b29fedadaacd619a573e001f921692f40408d50dee940bb0fdeaab55c55ab3ed0b1f4f388d650ed4750bb517cc71e49b9","ssdeep":"","tlshash":"58d097e7ac244ef247348bd08c2bfab370e830002f113c2da8d78693d63010b7c29004","size":251,"data":"","first_seen":"2026-07-18T15:56:07.650128Z","last_seen":"2026-07-18T15:58:59.487896Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d61bc03e2535919d805c72cda44fc5e3","sha1":"d74437d8a0f57651b8f6584ddaa4c619f7cbe2a5","sha256":"473d2c3a6295a72a328e20b5567294f144fffc368b3fc2d2b7277dd18931391b","sha512":"455f253a9892e12d65cd7ac968faa502b36eecf732df57c9c061e97f0169db02fbab7f4a34815dabe818868445096dfff7e11f6724fb40e6e2a04bab1a81041f","ssdeep":"","tlshash":"3ce0ca56150c3f63d75e90fd77d1754357d18cc9b33544785048490247ce7b02147ed5","size":369,"data":"","first_seen":"2026-07-18T15:56:07.651844Z","last_seen":"2026-07-18T15:58:59.495833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0f8157264dbbad97f09a249a6b9a35d","sha1":"4aa847fbad287c686a694512356e9f7813c3590f","sha256":"8770deb0fa85c5a80e31e1b7f1bbdeaf315f98704c2caa8a37d35214a2305e5a","sha512":"dd639ac161a4c588d9da7e42304838898100089425dadcacf96c7e653aa42277cbc5550de5d88a3cbb812e2cc34b52263d037040663ef8bcf8a36b6594818d02","ssdeep":"","tlshash":"72c02b6881816dc028b8c3ec138c7171b58650034d07df3fb7cd43802f560a8c401245","size":144,"data":"","first_seen":"2026-07-18T15:56:07.653336Z","last_seen":"2026-07-18T15:58:59.498032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c50cf4b7eba857f03a2f5ffaa768083","sha1":"7d5e32c72de94de2ed008b558027dc4db932f795","sha256":"40985abe719c48a264168b0b8c5dfbe8953a8f2746643bd480989202cf22f114","sha512":"e1b8fef85dcd91558dd8bfda632ff85212947f1e6a8551a2141eeed187982ed74f160e37b4099a809af01e5edeef158c71f74c84ded379f85e55e17e21a2df98","ssdeep":"","tlshash":"f9c08c14818d1dc214b026f82a98f8b699c3a2c02f688c3aa78ac79a5f02904888930e","size":160,"data":"","first_seen":"2026-07-18T15:56:07.654978Z","last_seen":"2026-07-18T15:58:59.505233Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"37d96d43b83a304f8690ae0571cbf293","sha1":"a97489654aca955dab6c2b43600fc251003c3f5a","sha256":"053816be4b95b73b6a03f6b20d8979942740e0bec9c7cb3859ef96734573669e","sha512":"f5f63dce57aa89ad7fe860a1d23f259c188dbff23934968bf8af3ce4f41b7095b783edc5a7a17bf830917559eba65c101d66132ed9b6b98434c0eea93e86225f","ssdeep":"","tlshash":"1e4194247a4979fb0257db503a33ba17316c012411027dbae4bc8a7d28baf342603c27","size":1981,"data":"","first_seen":"2026-07-18T15:56:07.6566Z","last_seen":"2026-07-18T15:58:59.508187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ad9165b167d54947b37f4b9de75ab39","sha1":"4c02f66fd8c26141450e310d6786f50f99913dd4","sha256":"eea0b9621509f98be77c5af1e9b5c952a675bda2b27c419876364017069e0c19","sha512":"dae93e3fe93a1e04d65bf1a64dbe7ab4f58938363c9b0d519ddcaa4608c0beb4dab995db8b115e174d8f2b2a539f5dadb0b60d79d96110477cbef6b172c1af9c","ssdeep":"384:4v6d5sHteQkJmVUrITdnMrQk2Y18e2pZN5+:6Es8QkJmmrq79YCe2pZN5+","tlshash":"5f42e9943a6579b307b362f280ef2342b2b6385ee44bc6519650cde45c78ccb61a2f27","size":12987,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-26T17:57:55.723469Z","times_seen":2874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ead1566cf522aa4dc6e51e7a8c89","sha1":"b9456d11127917c73f5ddd343092957d15d8cab5","sha256":"7a046581d4a85e3c857ec9c9e9e133712fe7b499ee2782c719352913af473973","sha512":"3624039a3e0a65b60b6861d072b94def6067ac9212504752186fd1783d8473b1b364873fe4869e8a9c730f5083ac91dd8a33a436ca604948a3d4de0ec60ea6ba","ssdeep":"","tlshash":"4e31fd6c707322d6023338aceabf0e2d3911850327864814b5ccaccd5f44634a6e17bd","size":1514,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-07-18T15:58:59.34717Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d43b2fcb5ef3e6afdcd539f46148514","sha1":"0ff4d5160beb004c439b20c6343044917c629d10","sha256":"9aa9bb8be2b834059533ce5de7eed3a662ad3d3e70643bbe5f75265075e9bd28","sha512":"00a0c46b067c1609d996bd438d6ef3342a6cdd6323fc8b8c4853cf4a8c2ff983b98e77545ab3b16ba2a8d0e58a2d35ec77b5765ba172f6532b8000239f06e396","ssdeep":"","tlshash":"9031e1187181b22dc66354b1c10b53099232ac751532a168b87dd8e6bc68ecc6677ff7","size":1801,"data":"","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-27T04:15:28.203632Z","times_seen":24804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffaf15295223843ead157440ce38a7a6","sha1":"544bfeb27a0c0eb9d8770bafc68570826918ae19","sha256":"444fd683ff211c738b77027bce1edac9f200ab0981c218ce176cf8c80d49ad0d","sha512":"d87ff7da3ccdc22343d1189c2628ed436287af5ac5021c59afffdeabb0594b0d12906f58f97abe048300829790136817493128b205e7efc972cec4d7ba91711d","ssdeep":"384:WeAjA6wA9CrSX4cR8C8WwJMg35LI1S6SC8lw4VdYJe3VWDV3QMoF7eh3tdQPR+Sc:WeAjA6wA9CrSX4cR8+8Mc5LI1/SC8lwf","tlshash":"2152c88673a1a86646df5493b027120eb36354d8b40a7059b77cccc2b970f9b3366fb9","size":14002,"data":"","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:51.029578Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bb8540493a7fe11b229870eb37be165","sha1":"d77f17cb9057dc8f622b8c0bf23f6acb739b3b8e","sha256":"4a7ee62eb33f3bbb66c2151e5cac6bf4904e28302efc36128f3e3ccae6fde580","sha512":"fb245059108ee476bfbca60a96d401c2796ee44b646e0874d41b5fdb1204a66e3bec6a4ab8e155e50489b3adf48bd609683b3d1c020b9f39d084a915f8377773","ssdeep":"","tlshash":"035114e77b54e81707427472705b7b6ce3330405e9cac496c1a0b9a21f78697753da58","size":2578,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-07-27T04:07:49.190399Z","times_seen":8291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58baf0f238d7afc7ab926b8d51e5b559","sha1":"8515e5f578269e29c048450f78c107935d325dff","sha256":"2989e0b9e836cb9de3274d641ec6a58c2052f039e790ddd59b22303930bfdeeb","sha512":"a15d0799c93d0c93789582d5330bda9aeb5332a2ef4917fe0f6a758ea77a1231b976dc960ba17d0038bd16acb34c62400ec4213ab458d1b301fb6141958fa005","ssdeep":"192:sEPwJdswSRibO6JSplZn41SFzpYK2p7ESa/TI9w0uV6uSnotk+nWEdpTARHrLG4/:FH6JElZn4WpYKC7E5rI9oV6ultk6tIe6","tlshash":"822286c5f155396687bfb034713f230a223748ecf8445c68bc5d95e1aef8a4e02b6b69","size":10863,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-07-27T00:14:36.081625Z","times_seen":6055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/wp-embed.min.js?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5c36baa69fcdb57bd891cda90920b3","sha1":"9d8b3df7a4fa2968403290d69a60b2eab20734f5","sha256":"6a482d2d94c0d1bc6937a1759389d01b475e6b28a0d9b5d7eaa3f9cc8f59f3cd","sha512":"904c01ad7fea398b11addee5439eae8c35d7c5b5194bbc9dd139f6f8a4485e944eb62ccab04b6d734b63aed9fdca67f9b5bd7d0de6bccde7a4a13dcb7b756a73","ssdeep":"","tlshash":"4231626a3239c47e54d701d3bc8435cad2b21be9a85200d24a79884df5a4f93456afe0","size":1478,"data":"","first_seen":"2023-05-16T22:22:14Z","last_seen":"2026-07-27T04:04:06.115241Z","times_seen":21177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-27T04:15:28.171438Z","times_seen":85834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/js/editor_scripts.js?ver=0.6.30","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b3aaa790ca1cbdf09d48bc9dff87109","sha1":"43a3ef9043b6588b5614a71ade7fe7697a371911","sha256":"330c52de9070907a708109115946c64f9d6fbf9070e5c137879a12602bc3cc5b","sha512":"5b6e6ec7273ca805cef1d6be4eb24beca885e567d8fd1873547177c6ce56d60cce3c77257a9b46740ddcdcab5a60bad916ce91519c79d090640b5ae6cfbf06bf","ssdeep":"","tlshash":"a7812379f35e240e54b772eb582f2288232ca0b588104f657d7f5d292fe4c4c273652b","size":3961,"data":"","first_seen":"2025-07-07T20:41:54.618468Z","last_seen":"2026-07-18T15:58:59.437744Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/js/scripts.js?ver=1784390118","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d5580146c88e5a99d094ece46ed9d32","sha1":"ded0959140df93a337638c72fb47edfa1ff0c08b","sha256":"368f12ea08f0cbbb4c4d2bc8ea66a6dbeece66183ab3935f9e702a9ac4942743","sha512":"9f2faa1c47457fa7bd5483e8fdc1f3c6cfdba1bbf4ef0730ee935212cd19eacbe012ef06ca35654dd5c2a004156fed9b3fa7ef5e5d60be9bf9a005e59f7670da","ssdeep":"96:isaZcqBbNJB34yE5idR0IRCRpRuCYs5RDarAkRagkg2j6F3FpIRjzBJiTTwd4TdT:ifZcqBbNb31EARLRCRpRuZs5RDar3Raq","tlshash":"76c1c04a7bfe70525337b03a6aefb159b237040355488ac1f8b812b53f6486a65bcdcd","size":5911,"data":"","first_seen":"2025-07-07T20:41:54.594367Z","last_seen":"2026-07-18T15:58:59.400164Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ef26b5e47e6951f43ecf2b1fc645222","sha1":"081afb52577f6f3bb044fdea6d34a632c3cce7e8","sha256":"50679e0e3933c945348a2db0cc128bb14b57a60a74fabf8cae13acc14efbb2e1","sha512":"a0876397327a5c6b4bca75605fa97ed7243ad78d9fd285f8a55ad2525e1070fdb197d1ae0687b3fb603946bf6dfb567eb3be3a636fb9fca6e36d03055ce7794c","ssdeep":"","tlshash":"6fb09b1d3474e95c48735551903bbf1d75133d33d7401995054c25a15f2866e5043d4d","size":129,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-07-27T01:50:43.185426Z","times_seen":25103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/slick/slick.min.js?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-27T04:17:39.901075Z","times_seen":108959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"762d59fdeee92ef4463539c532d5888a","sha1":"de8bf80d48ad6a0deb338be442df963691ecd18f","sha256":"da81a69ebb55f38c50b06ba18862edfc60a98904cf7ab25a1ee654166a8adfcf","sha512":"348aec12ddd60b156ec7750cf07faa109db3b2b25cf9d07cb713a9a3200266da85d5a58168abce70eadc870c5b80670a661250249beaf68c2a5e9f6f7ce4605f","ssdeep":"192:wtPfqyePEjWePwydyCt3kP1oAGVTbd9KDD79q/yu3kqITOmrvcJT0RL+rV58jYI3:D1PEjZPwEt35AqTbd9c4yu3b3ZrVDNzS","tlshash":"a972308dbd99f4510763a17a522f840ff3bb1a96b45f94e0d12ed5e0ac7888f402be1d","size":16469,"data":"","first_seen":"2023-04-05T09:20:27Z","last_seen":"2026-07-27T04:14:13.292423Z","times_seen":4220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/widgets/animate-block/animate-block.js?ver=1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa14266009d1892965cabdae41c0be3d","sha1":"d8267cf50a12876e34719ef5d9f4d0d29fc46578","sha256":"4d7f1d1092c6b4f9113ecd4e06881d431374200816d24633e985395fcf2e4707","sha512":"04b204e77c5dc3c4641329937c797627f7b19bdf022d584e490b7ae0914d4817b136ae4bd3d97cbf9a1ab2b0b283286fcf8a63c1aad4e804aca370ea6a2148cc","ssdeep":"","tlshash":"7ca0121c105d5004043310e07c3b89095d107020028260c30eccd0508f1453c021344c","size":78,"data":"","first_seen":"2026-07-18T15:56:07.519913Z","last_seen":"2026-07-18T15:58:59.403716Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/isotope.pkgd.min.js?ver=3.0.6","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-07-27T04:14:48.300642Z","times_seen":25294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29a653dd2d07b765985e7780ca75a45c","sha1":"a60afe9861188873c506fb2803e9090a959f4966","sha256":"d4666d95e2a69b762241ad7257fb0efb87be752836a9d3ef36ec132ba5e8b271","sha512":"086da20b7644bcfc5d6d27517a77a3c2b5820fa9db35026757083b7c804073c4829d8cd7715cf6de3c6ba9ec851cb0f9409bc06c2069eae4f53f93e7e5b70859","ssdeep":"96:BLNt0jqf9fzsoRb4Y7iylCjNVobVDPkqf8kxy8S2:BNCjw9fxRb44iLN4FPkyzS2","tlshash":"69a131d41b90fc2735e135c8a11aa735652fd0337d1bb8c2fa22dced58e8ad187a9931","size":4879,"data":"","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:50.996615Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/wp-emoji-release.min.js?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"116c86c56f8db0bb63f15ceda50fdc98","sha1":"75e308982ecf7cd43644b8b426e6aa1a0b0fbe26","sha256":"def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7","sha512":"7124c3a6d306b5aa53639a722eeb7e5cc2d144f5a698e4086bb49d5554e5e1afcc28e096b1bf0e8d96b8751dd6d2cfaeb52d6343cecb174a81a2c49726e3369e","ssdeep":"384:cn50kJuPTb9Uh31//bEP+XgA3S9CleffJmp3:c50KU9Uh31//YWXgA6ffC3","tlshash":"3e820a9bb33a4e9f343e3bd78d968f4dc9da555321c0f078dbeeb68129a00568274c90","size":18181,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-27T04:04:06.114669Z","times_seen":43399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d51b83b6cab0a31d7e631829656a22b1","sha1":"cd7bc9245b65c5c851e03a04541d4785c550b1f4","sha256":"82e320c0c3f2224c9bdeadab1078c0e5b4b705b8e2da82700b6f305bbdf380f9","sha512":"0300147f24c8e624df9f6a6c380c8e60cb860eb273a5a4d9820aeaaec3d129353e068f5b5b6ba09977d7c37e2bc53d982928776247f675c194a7598f62dc060f","ssdeep":"","tlshash":"fef0204ff21e393c86730615309a3c86e43e93708c003230a64fa38306d8b9b574af51","size":551,"data":"","first_seen":"2025-03-07T12:25:09.947462Z","last_seen":"2026-07-27T03:48:18.793586Z","times_seen":2962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/332.app.js?ver=3.4","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4760a308cc61cdf315595bcd9ecd3c05","sha1":"c1e762aaf7a43b37b75319160ed2dc5acba58602","sha256":"5064759a0360c16691dd45b9f71ffa942c37296d549f671dacd12eb97711e06c","sha512":"4a04288474548baaf1e70d6c3e448badeb663bc479661d637ec2b03333e05692f37c8b68106589ca604eac4e55d59d5b1d7ce60bd2593aa659e55a203d70003a","ssdeep":"96:hlKt4/syHepVIcu0HDlJsSGs/fpEjYRtF/gCnMsnEO9:hlKtmzenITSDLsz+fyjatFZMAEO9","tlshash":"489182ec360cb0fd116f2ef587ba29351ab1a1e8da7308be40b84d7c1938cc56255c72","size":4401,"data":"","first_seen":"2023-03-07T12:21:16Z","last_seen":"2026-07-18T15:58:59.309267Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fe2803a01c9fa77cb1a2618c3552dce","sha1":"2230dd8f0604e4328e7c2a3f9437a6bf2986f592","sha256":"e87a1c5e24f9a7c7dcb437417f0b05b0a3c12947ce32d65c990c988a8b5ed4d7","sha512":"3f808d49ba7de395294809ec0c940d6bdb380ed5b3538a69d135a6a97a153dc0b218c0f212ff5b85e45fecf61979bcd5e233aca020ca6ceed94068225f78aa91","ssdeep":"192:qgigKTzsXiwDL+M4R76qiY8qgx8s9Zqar4h6ki:FHDgt6CE9Z8h63","tlshash":"1fd163ca71c6f01543977b20911f000be33a596ef95d8558eb19e8e2fcb584e922bf78","size":6406,"data":"","first_seen":"2023-03-07T01:02:55Z","last_seen":"2026-07-27T04:14:13.241835Z","times_seen":4352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/owl.carousel.js?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca2e4681b1248297630b778ed7e8491","sha1":"f1e2da6325463d98e5143021c6a4375b889e2125","sha256":"ff773d1106f72bdf2c3e61801b73696bba45e3d592a5d5d0cac4cb41520149e7","sha512":"5a375d5726267466a9f38fcdd7b55dbc2aa250074bff2c28e15e237e1bf0237d24b09153aee112a60ce5923935d2cd8e12860ba998676a6843efb7dcc319318f","ssdeep":"768:ksRFVIX4Bo3orUy41P/a3dKiqTcjZppHwRJRDN5Wvu1UmJ1Q:9S4ZC6jZp1wRJRDN5Wvu1jJW","tlshash":"7853fe0967fa1529c16730785f9f52057239850f990aea1cbdac93c8afd443846beff8","size":64152,"data":"","first_seen":"2023-03-12T14:05:05Z","last_seen":"2026-07-18T15:58:59.388416Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/select2.full.min.js?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc8f080a872dd5416fb51905dba02c4b","sha1":"04fea73db59370fbbb840357477409a87d053b04","sha256":"82db17777d9ba8dcee7585c60e28aacac6cd59b7bd42f05f029a3bd1b97fc359","sha512":"6bb5e906bc16d9c24de0413c2f81accbd208fca34bb171ebe0b843a180b7f5686bcf52d6cd830d658a61e2ba7d5f0b0b5d44e93d6275a32f07905c47013ac444","ssdeep":"768:Vo14fnpU2nx2U4dSQmUFkrGBokOl/NfYTu1Yge7MApQ8znipGmZln769TAGH0V:+epnEU4dSNJkOZqRTHLEGAwNAGHC","tlshash":"aa63b748bd537235426f20e6656f000a3137ab7eb00959a8b468cdec6ebdd14726bf3d","size":73325,"data":"","first_seen":"2023-03-09T07:30:24Z","last_seen":"2026-07-21T20:10:07.671125Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/script.js?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd29ac12b135e611b6701652a536fcbe","sha1":"4c35ad6fe9e4310fe2886ee826f198caf671eb0f","sha256":"f2027bc9f305fdc6846e5f6121d1c3903ba98a4ad07bde13a928e062189d5499","sha512":"f9bd69a752bfa841f45aeeb02076f9e3d332d3d4ab58fda21cb76cfc61b788b60ba06df91b663ecc60549efa74f148d57f40c49adb32770b9f7a5f3d8b81e1e3","ssdeep":"96:I8vVMEqwMkHeFqNEFs+1LG/EpEoyYtJMuVmO5NLHFm/B8yVegpoyIfALXzbEis6+:rYB3Y8LGlsJqqHFm6yVeguyEwLhO","tlshash":"10e10085f7ad2cb314bb316a4d6e30cd561c15728a4229befcbc50645bd827f3632e29","size":7143,"data":"","first_seen":"2025-07-07T20:41:54.604831Z","last_seen":"2026-07-18T15:58:59.466928Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T04:15:28.207634Z","times_seen":73586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4027ac7a00829c328071a63c63890c44","sha1":"ca324f7392ea2640b83f7483c7717746bfa69d01","sha256":"99e3aa195d7119c0076107da5a35ff5d6fef0ee8d44086707a2ae9a419a4a84c","sha512":"91fdec575e7b4769812c1c6e4b125655df77740f4e99a41e737daab0feb4b2b92ce7e983388499a875e6267539b9b770e8fd3047b6a8f93861472e81e5e400ae","ssdeep":"768:ORxxDvxXz/mlVKHrVehz8gMGQEAzDc5G5TSebsvZiVC+WLOeQ5oedXLf6lTv3x+d:ORxx7xXzJrVngqEAzDc52TSebsRiVC+7","tlshash":"e0f208653193d46a529b48e7b033021cf7660ed9f402b45eb6bd6ce6a5b0e8333767b0","size":36245,"data":"","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:50.984596Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89521,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-27T04:07:49.174547Z","times_seen":59783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49fa677b9cd7ddf221dc06537b35e10f","sha1":"7485f3f99c3c1a57197f2b099f3f8d68b8609d06","sha256":"0cd851e5b33af0fbb354df65506da39807b998e07723f3d08aba5179fa2ed97e","sha512":"40d50c965db656d352c1e73bf3ff9e82b64422398974d55902b0eaab213ff255af9338c33d09a8b148da37b1a13ef0377de2b510f6b5c7c42c8f866ba3189a54","ssdeep":"384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ","tlshash":"d692e68db2453815c5f79265403f935fa132e29cb10a889df4bcc9e92c7ae992073f78","size":20787,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-07-27T04:14:13.296278Z","times_seen":5584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15bb2b8491fc7e84137d65f610e1685a","sha1":"cd76b70a5426893e9c022b9a75c50a7c1348e2d0","sha256":"b23f49f504faa32aac548b6662ffd64412f6738496fab8be38da46c5b7121804","sha512":"95c05110b29101c84df71c54172269f478d9cd14965b3de987613e11e0f1ccf01c1b7d2bf290d97ef11373f24dccd677f8710e1555d332903181f469d0f2b0bb","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgA:wxoo6desFshaKi+HgZsUOUTqiqM37ER","tlshash":"6dd3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139153,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T04:14:57.501971Z","times_seen":22492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"290dc74074864b6431b619f1f22ed031","sha1":"2f2a32c74d991593755320389bc1149afce4cf18","sha256":"87096ed50ff9b63d32a969732ee0c5a5bf6fcc1300ad3b5d6f5cdeb5fab1d1bc","sha512":"8af98488a1067ed8fd23d2f8109e140fc8ffd7c836178b64e92e2437a7e8760a52b58eef0b696852698a07d9d00fdfb840817ed50bd76e92ebf3f833fa847a6a","ssdeep":"768:uUOcp4IW+DlkUIw6LhdsMsURta8GqN+JeVyTUqc38POMIfk9LAy8YB53r6Og51sw:u9cp4IXkUIw6LwMXRtaqNUeVyQqc382L","tlshash":"64e2f7617142e8aa00df58af3417211d63620b98f800b61eb8f58ceb95b1fc5377abf5","size":31942,"data":"","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:51.038155Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.bycdb5qo.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bd9b59dc4c960c39474eebd5c5c71ed","sha1":"2c3280d47de1fe915e6b33e719adf76e7aade79f","sha256":"67d4d49c9815036a850d409a2c3c927c46d2922f05b22d4713aa644dc8b494fa","sha512":"d018a56bf7a75ee87ed2b65c000a5c3fb026ce403fe1d54fb2f16b1d9012b2afcee7de678ad7de3de770c9ec0fa2b9e48f15a0a6e9a77db1702e94cf644400c8","ssdeep":"1536:C8fKZ0gdDGst00AQVWFiC70egd23OiOybJkbUcA3S/VX1xmeW0gQzbf0u8VI64v:5fDgIuiOnbZAuVX1xmhub8Cv","tlshash":"e9636c9b37055937ba1b30a9a9ffa608a036275ede080950f5a4d4b521fdecd3067f28","size":72927,"data":"","first_seen":"2026-05-21T20:24:46.824918Z","last_seen":"2026-07-27T03:48:18.727157Z","times_seen":4104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/sticky-sidebar.min.js?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85c24fa12aeb73bc459a44ec1d110cf0","sha1":"8a2126b48ed7be33b58f74a01bd5d507559a7049","sha256":"29a5e7d1170a51c36bc54df272fc9dbfdb9687f4b03a9f30728a378d1eb94277","sha512":"dd924f48d3f04c21b46ba11444a5c1423e28525d68fde01f4278b03277675af7fbeb8b7a8a919e336f0a99d9298c40b5f06f5eea8d8714c217e5c924f327c0da","ssdeep":"192:Eyun/Q/DK585HKg6JqW61mquciulS3Ul2WkkU3IV:EyGM5AdquJAwkU3IV","tlshash":"2842950933603c3002d75459e9bf930d51325e3ed2d1d8cc793dcbd99eb8689a1aabb9","size":12487,"data":"","first_seen":"2023-11-18T21:48:33Z","last_seen":"2026-07-18T15:58:59.336332Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/imagesloaded.min.js?ver=4.1.4","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5629,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-27T04:15:28.199438Z","times_seen":23304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/packery-mode.pkgd.min.js?ver=3.0.6","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c3b0ff14aa599b3f1b007f162b4f5e3","sha1":"1f64d158685b9f8c2c77909f9ec5401fe200371d","sha256":"c020105220590c021c6ae04c6d6de86141f0bca7838cea004e3535e5e14a5879","sha512":"efacd83fca779747b2baa3a692c53c1866de561361bf0d454c84fdd3ea99a5dca76c126ba8e53563db4cef6d6819c33728bae0aa665088694888ef77a22dc67a","ssdeep":"384:zrj9EY3gBBOrC+rI7mOhvTF1wrxBd6MZnI:iuWBlb7myaBK","tlshash":"e452b68e7140354982abf66a913f010f323b941d6746846c797ae8eb6e39c0d3537fb9","size":13625,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-07-26T23:05:10.803332Z","times_seen":2049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeb0bd3e09bd83d569d6d03160612fde","sha1":"6f23c40e93450f29d58b9fcc16d79d742e4e5c2f","sha256":"8afdd81790c4628524f0d259e64a174f77ca9d67806a850e4425d8e78e15a42d","sha512":"4f3b3f5b2c9aadf6c4fc5be7bf1d70959b03fd380b0f017568d1d3081563e5e17e9a65465057b88bb26b58a74d9b5cb2bc1f5f423cd5dee0b82cad5c44b7211f","ssdeep":"","tlshash":"6e61c84f774ef8368e4735b6c5afb61ea223335d98548400c914d8dc8aacdc7116fa79","size":3457,"data":"","first_seen":"2026-05-21T20:24:46.793156Z","last_seen":"2026-07-27T03:48:18.754436Z","times_seen":4575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.3.2","filename":"https://ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","line_number":2,"column_number":709}]},"http":[{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.718Z","timestamp":1784390118718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 669\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":669,"size_decoded":934,"mime_type":"text/css","magic":"ASCII text, with very long lines (483)","md5":"9eb2d3c87feb6bb2ffa63b70532b1477","sha1":"38f226335a05ab0e30497bc7419eb5e243a9e26c","sha256":"37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2","sha512":"8d0ab38f6bc757103fc82a234fca5566328639ef549a862f9ceb8cff6b10d75d2fc626a3054fb85a4c91b3538332677801f9edc14115e09f957cce8391f8cb46","ssdeep":"","tlshash":"ce01f96e4646194141c10f1138d9fa5ded46f0a97c582f33a12adc2d8cf9e5f21b9f19","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T04:21:29.709934Z","times_seen":105050,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/08/fundo.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.229Z","timestamp":1784390119229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/fundo.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/uploads/elementor/css/post-11.css?ver=1633469473\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 29 Aug 2021 21:25:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 160184\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":160184,"size_decoded":160454,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2000x1143, components 3","md5":"47424fcdfb171705ee8313146a070d0b","sha1":"0449a26b491e6adc1ea6b1ffd6b3afa020a80f43","sha256":"72009f4b6ecfe7c05f35a68f5583961cf20a476f54545e705a7fa5d55a45c5d3","sha512":"8da0c570687868163e9d9ff28defefcfc31f371af5251c5ca48d704d85c4485e0c2f16dfdf4c7a45c6302e0ffa4c4882092ee8ff24fbf169c68e9f3ff6424fa5","ssdeep":"3072:kp8oSueNlfJ3a5k5QfjW4JPhAdqsSw41wN9E4uAv3I9pNQh:kShlhZSCGfFXwD/P8pNc","tlshash":"5af3e05bcb0595b7c0d9133114e31b317fb3a233e65e6b1796760a20a9a839d3f383a5","first_seen":"2026-07-18T15:56:07.480594Z","last_seen":"2026-07-18T15:58:59.46452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.392Z","timestamp":1784390119392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/css/font-awesome.min.css?ver=5.8.10\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75728\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75728,"size_decoded":75997,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75728, version 330.32636","md5":"44d537ab79f921fde5a28b2c1636f397","sha1":"b2879f9e1d0985a96842bf7f55a2b2cc4c636d04","sha256":"3d1080625d3030e88357b3ac9aa377dcec23f1b529c4ad03f7a9a435ccae04be","sha512":"08836d89ba7c7b7645c9de36e2e856cdc31fbb1c3a4a83045848d772720b98d352fb11182471161ef07d01739953a6320355ffecf25a06881bb1111ba02a73cb","ssdeep":"1536:sFUt//lLi8pq0MWeLhkzipMZ4LbW+nNjzw5ytuNCNbqg6g4xNRrFw:99Zpq0MWGhqa/HBnlz8ytuNYWg6ZRrFw","tlshash":"32730235ca0b7289b178227b3cb16645b72981c25e5bc4529f6fd3acdb0518c35f07ae","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-07-27T02:09:24.377818Z","times_seen":10468,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/single-post/single-post.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.667Z","timestamp":1784390118667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/single-post/single-post.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4035\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4035,"size_decoded":4301,"mime_type":"text/css","magic":"ASCII text","md5":"6c7f58c7097c5fae791dbcb4bb8a80ea","sha1":"a9009f2ff843ae059070572b1cb3131dcf2a239b","sha256":"d3d11670f7b70634bc572a7ca3bb29b7d089a83f62e0f8d9411ca7d2107c28cc","sha512":"5e6059d05675afdd140dcc7410b2c50f648cac20052516c5354069e1e59e520f42bb27d257037aa9984578b2f8a5d98000185874e9fc2b11b6a36cbff17533e4","ssdeep":"","tlshash":"15815b91916713069d4998349f9e72952f78804ba20bcae87dca310c6fc49e357d2ffd","first_seen":"2025-07-07T20:41:54.571829Z","last_seen":"2026-07-18T15:58:59.360092Z","times_seen":7,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=5.8.10","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.715Z","timestamp":1784390118715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=5.8.10 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Jul 2026 15:55:18 GMT\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138650,"size_decoded":4427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2d31029cfc3b6e5c1b49f97ed0a4444f","sha1":"0fe3d3c896c5d57103eaaddeebea800e0e9bb25f","sha256":"189120503333284d0e234f660e3a5201c90dfc24ec7853f26dc072dbe42dad08","sha512":"4b9ae6e7638f673b9653888eb7b5bb6b2fa0a0b3dc2f35f0edee0c8be3bd1d132692159f7338ed1a9fcce0e6b1534a1e7843280ce648f17b19cf438e4ec9daf9","ssdeep":"768:XqG1QCMFdF9FAFNFgBFUKF7FnF7e+1OgSUfEwwJpK5g9UEf7h4YXogEU9SWWjD8s:wHq9YL2xEHSRIH2Vc7b","tlshash":"4ed32da1082ba44067831cd223ce7e31ee4f92547141d075ebfd5babade7ca6127436d","first_seen":"2026-02-20T06:53:14.191029Z","last_seen":"2026-07-27T00:14:35.995679Z","times_seen":366,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/select2.full.min.js?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.747Z","timestamp":1784390118747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/select2.full.min.js?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21878\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73325,"size_decoded":22116,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32127)","md5":"cc8f080a872dd5416fb51905dba02c4b","sha1":"04fea73db59370fbbb840357477409a87d053b04","sha256":"82db17777d9ba8dcee7585c60e28aacac6cd59b7bd42f05f029a3bd1b97fc359","sha512":"6bb5e906bc16d9c24de0413c2f81accbd208fca34bb171ebe0b843a180b7f5686bcf52d6cd830d658a61e2ba7d5f0b0b5d44e93d6275a32f07905c47013ac444","ssdeep":"768:Vo14fnpU2nx2U4dSQmUFkrGBokOl/NfYTu1Yge7MApQ8znipGmZln769TAGH0V:+epnEU4dSNJkOZqRTHLEGAwNAGHC","tlshash":"aa63b748bd537235426f20e6656f000a3137ab7eb00959a8b468cdec6ebdd14726bf3d","first_seen":"2023-03-09T07:30:24Z","last_seen":"2026-07-21T20:10:07.671125Z","times_seen":115,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/responsive.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.702Z","timestamp":1784390118702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/responsive.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4267\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4267,"size_decoded":4533,"mime_type":"text/css","magic":"ASCII text","md5":"e19e89c728f88be368927984149a34aa","sha1":"00006a375253ecd948c92732ea7c09cecb8fca7d","sha256":"088479eb45e4b80bccd504b15c74a5a9617e1b83c0a8287750da85d7209cced9","sha512":"c99ce56d27de9fad29e4f45f612a87152c04df168bbe4a69930c769d884c11b033fd28c559391a5b8681d0dfdb4c1f00dbbe5af82ea064bb1fb6d53cac37dd2e","ssdeep":"96:tFA9dEwFS/YMSsHLSBHdReNGLRk+Cvx5Y:A9dEwu/SsrSBK+V","tlshash":"b391c09b29e308095d0f70556fff26642161d11bd21edde8fc4ca64cdf89ae25812bce","first_seen":"2025-07-07T20:41:54.628641Z","last_seen":"2026-07-18T15:58:59.340352Z","times_seen":8,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/js/editor_scripts.js?ver=0.6.30","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.722Z","timestamp":1784390118722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor-stm-widgets/assets/js/editor_scripts.js?ver=0.6.30 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3961\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3961,"size_decoded":4153,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (363)","md5":"6b3aaa790ca1cbdf09d48bc9dff87109","sha1":"43a3ef9043b6588b5614a71ade7fe7697a371911","sha256":"330c52de9070907a708109115946c64f9d6fbf9070e5c137879a12602bc3cc5b","sha512":"5b6e6ec7273ca805cef1d6be4eb24beca885e567d8fd1873547177c6ce56d60cce3c77257a9b46740ddcdcab5a60bad916ce91519c79d090640b5ae6cfbf06bf","ssdeep":"","tlshash":"a7812379f35e240e54b772eb582f2288232ca0b588104f657d7f5d292fe4c4c273652b","first_seen":"2025-07-07T20:41:54.618468Z","last_seen":"2026-07-18T15:58:59.437744Z","times_seen":9,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/332.app.js?ver=3.4","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.732Z","timestamp":1784390118732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/332.app.js?ver=3.4 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Sep 2021 22:07:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4401\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4401,"size_decoded":4593,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4401), with no line terminators","md5":"4760a308cc61cdf315595bcd9ecd3c05","sha1":"c1e762aaf7a43b37b75319160ed2dc5acba58602","sha256":"5064759a0360c16691dd45b9f71ffa942c37296d549f671dacd12eb97711e06c","sha512":"4a04288474548baaf1e70d6c3e448badeb663bc479661d637ec2b03333e05692f37c8b68106589ca604eac4e55d59d5b1d7ce60bd2593aa659e55a203d70003a","ssdeep":"96:hlKt4/syHepVIcu0HDlJsSGs/fpEjYRtF/gCnMsnEO9:hlKtmzenITSDLsz+fyjatFZMAEO9","tlshash":"489182ec360cb0fd116f2ef587ba29351ab1a1e8da7308be40b84d7c1938cc56255c72","first_seen":"2023-03-07T12:21:16Z","last_seen":"2026-07-18T15:58:59.309267Z","times_seen":51,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.756Z","timestamp":1784390118756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3267\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12198,"size_decoded":3504,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T04:15:28.207634Z","times_seen":73586,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/08/RB-570x600.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.827Z","timestamp":1784390118827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/RB-570x600.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 29 Aug 2021 21:58:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56387\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56387,"size_decoded":56656,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 570x600, components 3","md5":"931ada55cf0375155c611c41c560f312","sha1":"a079d259746c8e5b08cf2fa9c7492d165a5636b7","sha256":"deca036d622f3da1bad5dd48558bd86338787f17fb0e6e05df56c0cba101a742","sha512":"b4a8e5cf93b0d2ba3453580ad5df8fb975e56e053a2b6638b599bfa2bc32271a9a5a83bfa32403718ac9ac297ed37aa3948380ca5a3c09780e2c3100697eca4d","ssdeep":"1536:NVqUjy2TMuAtMNc5A3QNMWml42kpOBakbQO1/lNVWB6q6E+z:NdjhMuKSc5A34Mc2kk9QOxLVk6E+z","tlshash":"f343f1196142518ede980c3fba5f993bd82b27753586cb92f4f8cc6148f17f2685c2e8","first_seen":"2026-07-18T15:56:07.503424Z","last_seen":"2026-07-18T15:58:59.356029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.763Z","timestamp":1784390118763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3748\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10863,"size_decoded":3985,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10725)","md5":"58baf0f238d7afc7ab926b8d51e5b559","sha1":"8515e5f578269e29c048450f78c107935d325dff","sha256":"2989e0b9e836cb9de3274d641ec6a58c2052f039e790ddd59b22303930bfdeeb","sha512":"a15d0799c93d0c93789582d5330bda9aeb5332a2ef4917fe0f6a758ea77a1231b976dc960ba17d0038bd16acb34c62400ec4213ab458d1b301fb6141958fa005","ssdeep":"192:sEPwJdswSRibO6JSplZn41SFzpYK2p7ESa/TI9w0uV6uSnotk+nWEdpTARHrLG4/:FH6JElZn4WpYKC7E5rI9oV6ultk6tIe6","tlshash":"822286c5f155396687bfb034713f230a223748ecf8445c68bc5d95e1aef8a4e02b6b69","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-07-27T00:14:36.081625Z","times_seen":6055,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/20210626_132440-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.829Z","timestamp":1784390118829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/20210626_132440-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63028\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63028,"size_decoded":63297,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=samsung, model=SM-G950F, orientation=upper-left, xresolution=146, yresolution=154, resolutionunit=2, software=G950FXXUCDUD1, datetime=2021:06:26 13:24:40, GPS-Data], baseline, precision 8, 800x476, components 3","md5":"13047ff17a44c6b3f7da64e4f1184804","sha1":"ada2c2fce30a0b0c832c23f82b18f7f1b61faf15","sha256":"e034c822d4a6f235f3150fab7791917c8b691a837378f639dc38d062340d3e6c","sha512":"cc0d6f296984e00a15135aefa7e08c53b2525e3c2057f22d4f1f9a11eb6d50a5c1cd7318965e5fd07150744a56d93f2751b89eaed59af083638130ec2b0dde6b","ssdeep":"1536:pr+6uzV7LfASeBEnfGuI3v9nmCU1kWylzvCGFLq9uyZN57f8O:9jWNyQOuI3l+1kBBVggmLP","tlshash":"7f5301042ca23840ea179f76361f8be4b2b18626f9e59b03da784a347c941ddd9f4d74","first_seen":"2026-07-18T15:56:07.506513Z","last_seen":"2026-07-18T15:58:59.455833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betop.stylemixthemes.com/motivation/wp-content/uploads/sites/7/2019/01/bg_10.jpg","fqdn":"betop.stylemixthemes.com","domain":"stylemixthemes.com","tld":"com"},"ip":{"addr":"104.26.12.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.234Z","timestamp":1784390119234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stylemixthemes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 05:21:55 GMT","end":"Fri, 16 Oct 2026 06:21:51 GMT"},"fingerprint":{"sha1":"BE:E9:FB:0C:17:E4:0D:6A:6F:B5:1D:54:42:0E:80:D0:83:97:AE:77","sha256":"F5:95:85:B1:0F:06:F5:76:E6:D8:3D:AF:5C:3A:AD:FF:DE:6B:D4:39:0D:6D:A0:BB:DE:85:EF:AD:17:28:FB:C9"}}},"request":{"raw":"GET /motivation/wp-content/uploads/sites/7/2019/01/bg_10.jpg HTTP/1.1\r\nHost: betop.stylemixthemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10711\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Feb 2019 12:33:25 GMT\r\netag: \"5c6bf795-29d7\"\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKXHVleO81u4oDgDnyLmHRsIwcoQqgQXkQrwFUaZRFnDuyzkpDzciixO3Q4ONkbgtwJHvqRXaNThBkQ0vy2bUpvUqA1ihjsw7KnX7vJ2PYQOhxtBQKYXhQJZXMQGZNugSp4qp%2F%2FhbUe8Jw%3D%3D\"}]}\r\ncf-ray: a1d2ab86bc6556ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10711,"size_decoded":11423,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 192x231, components 3","md5":"da2044ce07e93b51e1eabf7441d2cdea","sha1":"d984abf2c9cb98e4d35ecc0d42e1ae8d253cd082","sha256":"8eaafcd2efc3ebd88faf697dad09c6e5529050d5220f50d65dcc209a0ec1e4fd","sha512":"9a062d49dfeb807725e1ab98048f02e69ae07b148ba7be3ce21d54b58aa6989342cfcbfc0787ea40f3994f0df2517f7a70f3984a29db201bbaa4c7e8daccdd58","ssdeep":"48:yAvnLc1Vu1J3pNcNFVG/qlwblwblwblwblwbl8:h7VGNFVG/OOOOOO8","tlshash":"c922daf1bc1f7b658a4ccea871b51a521c4d3712e3e99458d1cd6e88cb22fe2a432e41","first_seen":"2026-07-18T15:56:07.508356Z","last_seen":"2026-07-18T15:58:59.349926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":110,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.320Z","timestamp":1784390119320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:53:51 GMT\r\nexpires: Fri, 16 Jul 2027 05:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208888\r\nlast-modified: Mon, 08 Sep 2025 18:04:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34236,"size_decoded":35049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34236, version 1.0","md5":"fee1dc1edf94921126077c4a0034eadc","sha1":"427949faee52b0848aacce8dde79939e4956c3d3","sha256":"50cf7d32c18e1001749b51f1565ef745bc0687b0297b2b13465ed577cc20a8ff","sha512":"ee1a28f6b6f05df9913a7c9a6e006c4728a2d818afc3c3cce2c99dc51c71436ea415eee46b6dd82e83cbfad52713d078878ee92be1db8db3d132c7d631119c13","ssdeep":"768:yJ4irnFQpWzt8cJdyBSWj2rXnX+GyOMPyr8lWpreMqDGfP2/rTJa:ydrnFQOBJ8Bz2rH+lKYlWJtqXa","tlshash":"71f2e19d0b61d12382642aa3f409501f1f47b5c800efdf6bb05d54351caa25b6eabefd","first_seen":"2025-06-02T17:58:00.99575Z","last_seen":"2026-07-27T04:12:09.072423Z","times_seen":20240,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/slider-with-content/slider-with-content.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.668Z","timestamp":1784390118668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/slider-with-content/slider-with-content.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1847\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1847,"size_decoded":2113,"mime_type":"text/css","magic":"ASCII text","md5":"17b0ad5826f303b77ed02c97d32a9109","sha1":"60d420d3ccf1ab0963e78d83cb9e6822b843eb6b","sha256":"6cc034cc712f044349ae89b2f03f5b6f5acd870b287fe97e84e8a8b55897fcbb","sha512":"fa3efbf14b9cea04959d97e98376ace36aab078b6ef5c66e04dc8c683f7394252f7bc2cdaf12ddf322a30b6db39d7fa73b49526c20bd2bdb39c6c22eaa09108d","ssdeep":"","tlshash":"993160a161a31648769e90684b9da98ce7ec8123e34fc9c8f5c6510cdfcd3e452a2bcc","first_seen":"2025-07-07T20:41:54.572534Z","last_seen":"2026-07-18T15:58:59.409397Z","times_seen":7,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.725Z","timestamp":1784390118725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129,"size_decoded":320,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5ef26b5e47e6951f43ecf2b1fc645222","sha1":"081afb52577f6f3bb044fdea6d34a632c3cce7e8","sha256":"50679e0e3933c945348a2db0cc128bb14b57a60a74fabf8cae13acc14efbb2e1","sha512":"a0876397327a5c6b4bca75605fa97ed7243ad78d9fd285f8a55ad2525e1070fdb197d1ae0687b3fb603946bf6dfb567eb3be3a636fb9fca6e36d03055ce7794c","ssdeep":"","tlshash":"6fb09b1d3474e95c48735551903bbf1d75133d33d7401995054c25a15f2866e5043d4d","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-07-27T01:50:43.185426Z","times_seen":25103,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.761Z","timestamp":1784390118761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2578\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2578,"size_decoded":2770,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2577)","md5":"9bb8540493a7fe11b229870eb37be165","sha1":"d77f17cb9057dc8f622b8c0bf23f6acb739b3b8e","sha256":"4a7ee62eb33f3bbb66c2151e5cac6bf4904e28302efc36128f3e3ccae6fde580","sha512":"fb245059108ee476bfbca60a96d401c2796ee44b646e0874d41b5fdb1204a66e3bec6a4ab8e155e50489b3adf48bd609683b3d1c020b9f39d084a915f8377773","ssdeep":"","tlshash":"035114e77b54e81707427472705b7b6ce3330405e9cac496c1a0b9a21f78697753da58","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-07-27T04:07:49.190399Z","times_seen":8291,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.180Z","timestamp":1784390119180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 23:00:22 GMT\r\nexpires: Wed, 14 Jul 2027 23:00:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 320097\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-27T04:18:37.898896Z","times_seen":288362,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.330Z","timestamp":1784390119330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:42:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76764\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76764,"size_decoded":77033,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261","md5":"f7307680c7fe85959f3ecf122493ea7d","sha1":"fce0da592a3e536d6d5df5b50cb513398d8c5161","sha256":"43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af","sha512":"d115a6f0df1f766fc83a77adeff79da5b0a463c01c13532cf48f29ed53a0c4ef1d87db38b8e492fbc3f97a0d192a9a6f636b837e65fcbeac03bb6f36336ca69e","ssdeep":"1536:UOsj0gqVLsxxVegJ1MvhvVpBJoY+q6G9NjFvzOCvXHYVSGhZJZ6xxsBV:UOsj3sVgmoYp6uRvzHYYsZJ+uf","tlshash":"8373028a852a583dc7fd1134a83c8ff111fba484c64b178c7a7179847b96fd3b4a51ca","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-27T04:20:50.619842Z","times_seen":30666,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/css/slick.css?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.615Z","timestamp":1784390118615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor-stm-widgets/assets/css/slick.css?ver=1.8.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1776\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":2042,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-27T04:18:50.678323Z","times_seen":72250,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/image-text/image-text.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.654Z","timestamp":1784390118654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/image-text/image-text.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 135\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":135,"size_decoded":400,"mime_type":"text/css","magic":"ASCII text","md5":"6a97c6f427e9f87a8fc12fbd01d25a53","sha1":"e0f572914788080db5d3ee2195c76cae4d21ae7a","sha256":"5957a08015326303ee175f9136f6345ce70502a0f810949007779699a855e615","sha512":"87470f5704c10ea78663e1a901d559e7067b73ea0043cf18af1c29b3e9df6412e26a84f61796dae80b62f1c919dc35bbfecb9351ed4848ea3b86eea147aa73da","ssdeep":"","tlshash":"8bc08c8046330602f80ef3a8791e13c782300097aa2fc80832810201af504a8c152c52","first_seen":"2025-07-07T20:41:54.578619Z","last_seen":"2026-07-18T15:58:59.458225Z","times_seen":7,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/upcoming-events/upcoming-events.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.678Z","timestamp":1784390118678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/upcoming-events/upcoming-events.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5976\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5976,"size_decoded":6242,"mime_type":"text/css","magic":"ASCII text","md5":"57c3a3ba69d54869c76a99756fe39678","sha1":"d03d329cc6b8f1a9b1f990de4b11a9e31f30f941","sha256":"f4a11a387f0fd21d73dd2c1e77929b20f2a777a0fe7ef65a7ddc8f405d444c85","sha512":"0d7afaef9dd9f5f78282906a0da89319e39b44ec1e3ccaa73d227c3c9396947f90277d8c44aa6a77742119ec187f1ab6132099b5c449215d825b9e88aa4b7c0c","ssdeep":"48:V8jb+9qy546FGNFqsF7G1HK0TFFkBx0hFrTF1I04LFP5Fl00GFlrF3mGbTF3ZUTa:V8jb+8y5MGtK0sb0njeecIjcXmiI","tlshash":"b0c17cb1c75217256b4ebc7fd75af2822b78f0e3a55ece547dce1c0a4f4a0d18062698","first_seen":"2025-07-07T20:41:54.632171Z","last_seen":"2026-07-18T15:58:59.443741Z","times_seen":7,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/widgets/animate-block/animate-block.js?ver=1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.751Z","timestamp":1784390118751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/widgets/animate-block/animate-block.js?ver=1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78,"size_decoded":268,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"fa14266009d1892965cabdae41c0be3d","sha1":"d8267cf50a12876e34719ef5d9f4d0d29fc46578","sha256":"4d7f1d1092c6b4f9113ecd4e06881d431374200816d24633e985395fcf2e4707","sha512":"04b204e77c5dc3c4641329937c797627f7b19bdf022d584e490b7ae0914d4817b136ae4bd3d97cbf9a1ab2b0b283286fcf8a63c1aad4e804aca370ea6a2148cc","ssdeep":"","tlshash":"7ca0121c105d5004043310e07c3b89095d107020028260c30eccd0508f1453c021344c","first_seen":"2026-07-18T15:56:07.519913Z","last_seen":"2026-07-18T15:58:59.403716Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.12.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.466Z","timestamp":1784390119466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.12.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.12.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89444\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89444,"size_decoded":89713,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 89444, version 1.0","md5":"12818ed760f44ddb76120723ce89a2f8","sha1":"dd73c07bb44c886ef75b5f11f974d367992f38a6","sha256":"772a939fe72b662d152060e58932d5a64a8eeb3ec32c39335da803ad4e5d4ca8","sha512":"a717c7abaab97768f2f59847caffce3259d3e1e794790312be1c1caaef71579f2e0d26e0c950a1a0cf7cc9a3ac71b9b3bec3f5ff1f2b8033864da266e59c57d2","ssdeep":"1536:VktufpOuX35SZEsQYm7/TgwcpedYUPa5sunirAJIBaEEVgI4Ya2hJ+IA:Vkt0LX3EKfR7coSjBMAaB+g5u+D","tlshash":"089302cbdad296349fd1f36a26e5a1bf8ac62f04281e4345c650c74f742e0d4a6b8fd0","first_seen":"2023-04-07T03:19:52Z","last_seen":"2026-07-22T06:43:15.121886Z","times_seen":517,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/products/products.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.665Z","timestamp":1784390118665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/products/products.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1279\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279,"size_decoded":1545,"mime_type":"text/css","magic":"ASCII text","md5":"d101e7368efbfc0aa1f0626da8ea7268","sha1":"f4abc57394ede1b27735e2a54c2a4117957a220b","sha256":"619b06d414975ac3acf02345c154731e41521595d3a7fe216ae8400248c1bc06","sha512":"78a4a9bd0f78c92b2b6a017ed6d72fb17aab0c551c77c0bad9004b5f237dcbcac33ba3402043a7726ce1df87206fa7fed29c2b318aa637569ae8fd74a8e36621","ssdeep":"","tlshash":"28214bd9d737458a782d9a35675912c43f48308ff28bcdd87e8872089f48dd646f2a9c","first_seen":"2025-07-07T20:41:54.589253Z","last_seen":"2026-07-18T15:58:59.399304Z","times_seen":7,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/testimonials_carousel/testimonials_carousel.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.671Z","timestamp":1784390118671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/testimonials_carousel/testimonials_carousel.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1800\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11906,"size_decoded":2111,"mime_type":"text/css","magic":"ASCII text","md5":"acf4f53b4063b195cb75aff7f9d12a03","sha1":"ef623473b9db17a1ea0e3a8d4d1782a57747fa8d","sha256":"0092ea11c5817ffc2f54cd5f62fa2284077d6b0c0e6d9776396dc3e6bfa6b599","sha512":"028e87265538347a4a20bb0a5e25255cb9f4eb87ba8bf69eea4c0fb26216ad96ff67a3d14c8b8972e38eb31600858db06b5123b2cc1755db7426da56fb41d772","ssdeep":"192:qGSU5yC4tyLfzV5E575v5o5v5L5s5+54q5Ryh55yQH5wJ5c5O54m54d54V5425KI:Nip8QSNhMbdPcjrPGIdZjgIj","tlshash":"6332664fa69b084959097134d69ad1402378fc8bea0e8fb5f9a6790bdf4c0f03873a5c","first_seen":"2025-07-07T20:41:54.637629Z","last_seen":"2026-07-18T15:58:59.360848Z","times_seen":7,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/style.css?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.708Z","timestamp":1784390118708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/style.css?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3969\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3969,"size_decoded":4235,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"eb67404f637b1f0681fea376c241ec39","sha1":"0a36792fb0f4f8f5b411fbaaf0998650ec4d3348","sha256":"f0706a060fa3108264e3961838414fc8ab26780c0c7debb133dee60bdfbdd759","sha512":"528fd1a811a333f63185cd42ce088abf6fc69740de631ce7e052d35de0b19fe0f338b7564bfbf9a4d41a44b05db0ee6a6eeec66ded58375a8f53f67c526436c0","ssdeep":"","tlshash":"4381f332ae14381cd21fe29dffa9db39e9cf5a909f4e4df6f416615c818892501bb248","first_seen":"2026-04-10T12:06:50.938973Z","last_seen":"2026-07-18T15:58:59.318103Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/packery-mode.pkgd.min.js?ver=3.0.6","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.744Z","timestamp":1784390118744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/packery-mode.pkgd.min.js?ver=3.0.6 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4390\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13625,"size_decoded":4627,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13554)","md5":"9c3b0ff14aa599b3f1b007f162b4f5e3","sha1":"1f64d158685b9f8c2c77909f9ec5401fe200371d","sha256":"c020105220590c021c6ae04c6d6de86141f0bca7838cea004e3535e5e14a5879","sha512":"efacd83fca779747b2baa3a692c53c1866de561361bf0d454c84fdd3ea99a5dca76c126ba8e53563db4cef6d6819c33728bae0aa665088694888ef77a22dc67a","ssdeep":"384:zrj9EY3gBBOrC+rI7mOhvTF1wrxBd6MZnI:iuWBlb7myaBK","tlshash":"e452b68e7140354982abf66a913f010f323b941d6746846c797ae8eb6e39c0d3537fb9","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-07-26T23:05:10.803332Z","times_seen":2049,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.323Z","timestamp":1784390119323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:53:51 GMT\r\nexpires: Fri, 16 Jul 2027 05:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208888\r\nlast-modified: Mon, 08 Sep 2025 18:04:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34236,"size_decoded":35049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34236, version 1.0","md5":"fee1dc1edf94921126077c4a0034eadc","sha1":"427949faee52b0848aacce8dde79939e4956c3d3","sha256":"50cf7d32c18e1001749b51f1565ef745bc0687b0297b2b13465ed577cc20a8ff","sha512":"ee1a28f6b6f05df9913a7c9a6e006c4728a2d818afc3c3cce2c99dc51c71436ea415eee46b6dd82e83cbfad52713d078878ee92be1db8db3d132c7d631119c13","ssdeep":"768:yJ4irnFQpWzt8cJdyBSWj2rXnX+GyOMPyr8lWpreMqDGfP2/rTJa:ydrnFQOBJ8Bz2rH+lKYlWJtqXa","tlshash":"71f2e19d0b61d12382642aa3f409501f1f47b5c800efdf6bb05d54351caa25b6eabefd","first_seen":"2025-06-02T17:58:00.99575Z","last_seen":"2026-07-27T04:12:09.072423Z","times_seen":20240,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/08/0_b5dCn9f1Fco_ISQW-1024x682.jpeg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.348Z","timestamp":1784390119348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/0_b5dCn9f1Fco_ISQW-1024x682.jpeg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 29 Aug 2021 20:27:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73484\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73484,"size_decoded":73753,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x682, components 3","md5":"d6849eb258e3ef79a20b15650cd93e50","sha1":"670858e7a3c9f8ac3034da554fbadef995b2c055","sha256":"6da3d0d44dc152e5ffa4a1438f892ac4b19c4321c01fc9f3b5c8c8713d6c4deb","sha512":"dba98d19a33c06207fab1ea71ce3f5a68feb30bd400cae13daef0c363acd3256c3df8ae861e18dd17f749738dd9df58e7de6e402c0f2d5f0f84e3049124e7c71","ssdeep":"1536:OEIKWkiXC6HiSvMlVe5mCGA3tluKx4lhzbPReeKqDAjUX3c/w730ZPdc8d:1oiwgerlPx0hzDgenAoM/yENdcE","tlshash":"19730233fd862e19c2a297d807c174ca497b9cea97df5a370362bc4cc8541ee2a91394","first_seen":"2026-07-18T15:56:07.527504Z","last_seen":"2026-07-18T15:58:59.314693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/animate-block/animate-block.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.631Z","timestamp":1784390118631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/animate-block/animate-block.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1228\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1228,"size_decoded":1494,"mime_type":"text/css","magic":"ASCII text","md5":"5e858785a885a67e06da2e4bd12f2082","sha1":"029b70c70dda31acb20d9c0172d02acadc7d5f69","sha256":"566fad393ec5de1d6963fd1042398f7a4f93718e2405a46c913ddf9f42233e2f","sha512":"f5486b696409dab72d65cd610d255745d71d8570a8bbb147594b0573aa83dfd8d28a6c81ba8158893e458cc1a75aebc805b76733ae5925c7c9b853d153521fab","ssdeep":"","tlshash":"b52192510a771684a209b274cede23185c280887575b885cf6f2a5192f49db4e3beff3","first_seen":"2025-07-07T20:41:54.596888Z","last_seen":"2026-07-18T15:58:59.398469Z","times_seen":7,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/elementor/css/post-11.css?ver=1633469473","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.690Z","timestamp":1784390118690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-11.css?ver=1633469473 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Oct 2021 21:31:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2084\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15514,"size_decoded":2395,"mime_type":"text/css","magic":"ASCII text, with very long lines (15514), with no line terminators","md5":"aada46bc1eec928af9b45263a83f6d88","sha1":"f235959471dbeb43bf861aa504e5a07f9adabaa2","sha256":"6febbd5a268272d6b48e2ae4a75df4802ca934573598438033e604e57ae97ac9","sha512":"521f303f99703ea84629cdc936e83ee090892ba38e5b8e1068949c1adec5481c75c1322cb38e33a5d892bda123c6eb14eb847924f928a858a8f74c380673cce3","ssdeep":"192:ox0o57uzxvSC3G3DiduW0fnR+lOhpbTTIidui0ucO+8uzaVfMH3ZEviF0o7cuzxU:mT1YOf3lkJEviR7M+3o","tlshash":"7d6202a47d535028712f72ab5033a6cc61358cded47973dae872606bf176ca133f191a","first_seen":"2026-07-18T15:56:07.530679Z","last_seen":"2026-07-18T15:58:59.391131Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/layouts/motivation.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.707Z","timestamp":1784390118707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/layouts/motivation.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1873\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1873,"size_decoded":2139,"mime_type":"text/css","magic":"ASCII text","md5":"407ded447d6e9d02de2d73a9c4b3187b","sha1":"1309b98afd7b8d6e53dba05402d511e08a3c556c","sha256":"72cf8e446e476269ef00c6489364d491e7ed4c250491cbca660d263ec10efa36","sha512":"fe788085fe0c31e86d089137c1af6142e69af98db8751c04b87754232a60fb6b3dcb059b6fadc2f7165b5690f6be7d4a7de7130b299f4b93942910b20d521346","ssdeep":"","tlshash":"6e310483a2b31b402427526617db9355332d1097d50a8e6cbb6e77f84f8c1915369ec9","first_seen":"2026-04-10T12:06:50.956929Z","last_seen":"2026-07-18T15:58:59.335311Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.755Z","timestamp":1784390118755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4824\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14002,"size_decoded":5061,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13963)","md5":"ffaf15295223843ead157440ce38a7a6","sha1":"544bfeb27a0c0eb9d8770bafc68570826918ae19","sha256":"444fd683ff211c738b77027bce1edac9f200ab0981c218ce176cf8c80d49ad0d","sha512":"d87ff7da3ccdc22343d1189c2628ed436287af5ac5021c59afffdeabb0594b0d12906f58f97abe048300829790136817493128b205e7efc972cec4d7ba91711d","ssdeep":"384:WeAjA6wA9CrSX4cR8C8WwJMg35LI1S6SC8lw4VdYJe3VWDV3QMoF7eh3tdQPR+Sc:WeAjA6wA9CrSX4cR8+8Mc5LI1/SC8lwf","tlshash":"2152c88673a1a86646df5493b027120eb36354d8b40a7059b77cccc2b970f9b3366fb9","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:51.029578Z","times_seen":115,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/09/RB-1.png","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.824Z","timestamp":1784390118824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/RB-1.png HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Sep 2021 16:55:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 477006\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":477006,"size_decoded":477275,"mime_type":"image/png","magic":"PNG image data, 680 x 608, 8-bit/color RGBA, non-interlaced","md5":"71bb914c1f43852ca0362e4421addfc9","sha1":"529b6af8480637b709403acc65e4fc7022e66d0e","sha256":"78a9fea67acdf526650c83c76681acaca1fc8bde7b30622a0dbe3d14970c647e","sha512":"358e614b5c4f7c4709a987c7f2b0c2457b22a3b77d6b83f47f79bd18d685179bace8755a7e2ea4cd2e0edbfc136b2a4be1a985bd58f687c397f48b511419427d","ssdeep":"12288:qowNQ3mLruZIAM+LWTxmMbix/jjsGfIbZzLz:q83EiZIl+uxmMO5YJb9Lz","tlshash":"83a423d1e6c60ee7c8304b79652096b4fe5b35e5b04ab241c2f1f1712dfb7cba6a2850","first_seen":"2026-07-18T15:56:07.536963Z","last_seen":"2026-07-18T15:58:59.312645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betop.stylemixthemes.com/motivation/wp-content/uploads/sites/7/2019/01/shape_03.png","fqdn":"betop.stylemixthemes.com","domain":"stylemixthemes.com","tld":"com"},"ip":{"addr":"104.26.12.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.222Z","timestamp":1784390119222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stylemixthemes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 05:21:55 GMT","end":"Fri, 16 Oct 2026 06:21:51 GMT"},"fingerprint":{"sha1":"BE:E9:FB:0C:17:E4:0D:6A:6F:B5:1D:54:42:0E:80:D0:83:97:AE:77","sha256":"F5:95:85:B1:0F:06:F5:76:E6:D8:3D:AF:5C:3A:AD:FF:DE:6B:D4:39:0D:6D:A0:BB:DE:85:EF:AD:17:28:FB:C9"}}},"request":{"raw":"GET /motivation/wp-content/uploads/sites/7/2019/01/shape_03.png HTTP/1.1\r\nHost: betop.stylemixthemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 7847\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Feb 2019 12:33:24 GMT\r\netag: \"5c6bf794-1ea7\"\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPF9nGwa6PwZDBDxz4Qy%2Fu4Dipni48rMlDSgVOT5NL3OCs6PD7uHTBEGa12XJ2UaM6VWJvifYdA%2BqcPVIKfE1WnSUMSfb9vpsHrHt6H2pbNCgjPItw8eF5friIzJkTfLmS26KeBP%2F3CdNw%3D%3D\"}]}\r\ncf-ray: a1d2ab86bc6156ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7847,"size_decoded":8559,"mime_type":"image/png","magic":"PNG image data, 201 x 322, 8-bit/color RGB, non-interlaced","md5":"cb082923fde6a7f57d9626c46abb772a","sha1":"36eb3b13de9643c998aa8a62049d36736291a124","sha256":"13652ac33f820fbded7ceac31dcc4eaa94cad1b8797ba42ac9f834253f43280d","sha512":"33683a6af622805e4ff56da76d0c98c2118fcbbc4f1c547b79f3c725e8f07ca64e25c8482599f03c4e5a9225d9dfd6f2523d170ee52b6b1ef20fb80c59346ac8","ssdeep":"96:miwnPVGNFbclo3WAvcPsKQ/vbUHr7mm6IL5Kp7lAshDNZt0CBcsf4p9G7OJwDSDt:c8eZOIsrvbDm6NWspN4sBSJnDCSQHzc","tlshash":"f0f1c09f6e10894117f0bc82b5d1c0acde526101465cbd4ff5ddf8b321505bd9499adb","first_seen":"2026-07-18T15:56:07.53962Z","last_seen":"2026-07-18T15:58:59.337315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":13,"connect":2,"send":0,"wait":109,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/09/ICON-75x75.png","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.591Z","timestamp":1784390119591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/ICON-75x75.png HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Sep 2021 17:50:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9023\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9023,"size_decoded":9290,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"eb8ea30539180b79210ecb3a5b442f55","sha1":"8c3485dfbb22b9462a46714de1552101d1033b65","sha256":"a5a5303f573d7873eb857e6a1a93691edd9d46a3c4f2d596f0f7b622a90f070d","sha512":"0bdb81cbc7e99bec4de96de86007da8843614d330324b97374e228e444490ab9ab2dfc2b87902edbae4afcb396f89e5dd32fb3fed17ebdef4ceb27e653cc285f","ssdeep":"192:9Jg+lK56VoaI1jbCcmfl1Q4aYgdc7FdywAMCDJti6Ni8fr2FFA6+HrhP/Q8bOzrt:bgv5O9fl1F1+cRdhrFB8DwFyL9QwOaNq","tlshash":"6e12c063d314602a13a4aca36e011f09275bfd12cdd0e1597306fd39eeebb61a0945eb","first_seen":"2026-04-10T12:06:51.001788Z","last_seen":"2026-07-18T15:58:59.351781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/main.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.700Z","timestamp":1784390118700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/main.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19737\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":138592,"size_decoded":20049,"mime_type":"text/css","magic":"ASCII text","md5":"024afd056194264637629999e8d97531","sha1":"ddaa5fcc30a7c701fb644d9ac63b3d5227c0a60c","sha256":"59a3bae9810930ea35d3c9306c5c3a1079670bfb8dc609d4a9b18133820c03a4","sha512":"34a5f38dc04d5dd2c7142b8246dc6047f4dc59a7611f1b4ac2decf54e30343af8026f545626b5f9978df42d903d006d799a939505cec4911ba7bce684b3475dd","ssdeep":"3072:LW2AzDD4EDN4HMC8kL8JJz6jWwWP5bzK/plyZjpjpw0wVWPNWsQf1oazP7e4gnAr:LW2AzDD4EDN4sC8kL8JJzUlR5","tlshash":"f3d33f57a9f30808680b616967ef77b87a7c9047d20dedb5bd8d3714cf492c28862b8d","first_seen":"2026-04-10T12:06:50.944937Z","last_seen":"2026-07-18T15:58:59.316396Z","times_seen":4,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.15","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.710Z","timestamp":1784390118710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.15 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1519\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1519,"size_decoded":1785,"mime_type":"text/css","magic":"ASCII text, with very long lines (1519), with no line terminators","md5":"73e46bbd8244a60086283f5fe275d682","sha1":"b477443fbe8763c8f111877029b7aee9039ef64d","sha256":"f93483f0aaf24aea4b5534bb8647d22cd9dfcb4d08d2fd1008787bdfb8a6cc47","sha512":"88f8a60970e83e836cd6a7435c7d14a7aadd1759f4a50016125c862e433c964f82e70db884d8ecf5e7e1327502da66a2f4f6e213d4b587680983e06e57330522","ssdeep":"","tlshash":"2631488b93ac86e4b077d17b19a912fc2c10f75aa7031965e7b0f70c80cbd8c2a75547","first_seen":"2023-04-05T07:46:06Z","last_seen":"2026-07-23T01:34:18.722955Z","times_seen":1215,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.735Z","timestamp":1784390118735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:48:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6406\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6406,"size_decoded":6598,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6406), with no line terminators","md5":"8fe2803a01c9fa77cb1a2618c3552dce","sha1":"2230dd8f0604e4328e7c2a3f9437a6bf2986f592","sha256":"e87a1c5e24f9a7c7dcb437417f0b05b0a3c12947ce32d65c990c988a8b5ed4d7","sha512":"3f808d49ba7de395294809ec0c940d6bdb380ed5b3538a69d135a6a97a153dc0b218c0f212ff5b85e45fecf61979bcd5e233aca020ca6ceed94068225f78aa91","ssdeep":"192:qgigKTzsXiwDL+M4R76qiY8qgx8s9Zqar4h6ki:FHDgt6CE9Z8h63","tlshash":"1fd163ca71c6f01543977b20911f000be33a596ef95d8558eb19e8e2fcb584e922bf78","first_seen":"2023-03-07T01:02:55Z","last_seen":"2026-07-27T04:14:13.241835Z","times_seen":4352,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/wp-emoji-release.min.js?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.860Z","timestamp":1784390118860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:48:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5034\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18181,"size_decoded":5271,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15224)","md5":"116c86c56f8db0bb63f15ceda50fdc98","sha1":"75e308982ecf7cd43644b8b426e6aa1a0b0fbe26","sha256":"def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7","sha512":"7124c3a6d306b5aa53639a722eeb7e5cc2d144f5a698e4086bb49d5554e5e1afcc28e096b1bf0e8d96b8751dd6d2cfaeb52d6343cecb174a81a2c49726e3369e","ssdeep":"384:cn50kJuPTb9Uh31//bEP+XgA3S9CleffJmp3:c50KU9Uh31//YWXgA6ffC3","tlshash":"3e820a9bb33a4e9f343e3bd78d968f4dc9da555321c0f078dbeeb68129a00568274c90","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-27T04:04:06.114669Z","times_seen":43399,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T15:55:17.037Z","timestamp":1784390117037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.3.33\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://ricardoborgeshipnoterapia.com.br/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://ricardoborgeshipnoterapia.com.br/wp-json/wp/v2/pages/11\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://ricardoborgeshipnoterapia.com.br/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:4.1.4","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Elementor:3.4.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:5.8.10","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"AddToAny Share Buttons:1.1","description":"AddToAny Share Buttons plugin for WordPress increases traffic and engagement by helping people share your posts and pages to any service.","website":"https://github.com/projectestac/wordpress-add-to-any","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["WordPress plugins"]},{"name":"Contact Form 7:5.4.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":91752,"size_decoded":18182,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9619)","md5":"32d8924cb5880ba88c0df1f478d2f16f","sha1":"b9327e9aae1ebbef7dba96494ef1711b7c97392e","sha256":"c87a8bb20f44747339c83366a0b60e38891c1a97cd638c7a1fb537ec40d1eabb","sha512":"9b42cfd90a37a994ef78518daaa79f1c5c2528e78546d0ee2aaf5a62028cad9494c4d8f3677b84b04f1efa8ca650062e661e658f2e0ba6a48093ac3399c2ad8c","ssdeep":"1536:F7dtTNNLRhAlmNSjD1IsN0Zpp6O5WvYDmofyxRNLdCGk/6dHgqzqZxf1rsU6Nn3a:JTDLRhAlxNnYD1uNLddk/C/zqZxdYUUq","tlshash":"2c938261790b6cb5111f02cfa043365da0caede9e712a5f8f6f34228a3f5d9137a3658","first_seen":"2026-07-18T15:56:07.550183Z","last_seen":"2026-07-18T15:56:07.550183Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1313,"timings":{"blocked":0,"dns":710,"connect":91,"send":0,"wait":234,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.683Z","timestamp":1784390118683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2640\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2640,"size_decoded":2906,"mime_type":"text/css","magic":"ASCII text","md5":"76e12144b6be9bc0a17dd880c5566156","sha1":"c57db768b452aea923a2b083162e9e6ffb98d2f8","sha256":"070edfef42e0980783d0acf8fa9ca6a9833b994eca13ffaa94e9a2deb47c92cf","sha512":"090a8ef4b25ebde53333749f44ba1318753ac3594d1c9d891c0b66664813f60584ed126c15d30478ff8a1e8dd30b0338ff3132331e5aa9d140213c23bec67454","ssdeep":"","tlshash":"ee51127066002c414bbf92d77eaddb4576ae3880cd1faf97b0c21a3c57785851263e5e","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-07-26T19:34:13.162455Z","times_seen":4225,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.4","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.692Z","timestamp":1784390118692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.4 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8843\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75680,"size_decoded":9154,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"698857b482c7fbe80633d0d0e37fa586","sha1":"f066f62f547706cb7a975fb659bb0e539ca5e6d5","sha256":"b793ae49aa398fda4ef5a1428d63e115109011a34ba553c01074eedf5823d780","sha512":"1bef7b1f5a3571f3348b0ade8b944b1137c68636a5d01fb4cb4b5ba69782c336226db5c2aa6a3f94b211d3a9b58e210deb80f770196a16b5b95f0633542445dd","ssdeep":"768:22+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVn/C:22+Rm5ufoqDr1GLr","tlshash":"5b73c8c61dc229749a16681ea2ee93a457b60047cf34adac37ed811ccf82341b7f6b57","first_seen":"2023-04-06T22:57:32Z","last_seen":"2026-07-22T05:50:56.753411Z","times_seen":234,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.757Z","timestamp":1784390118757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7236\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20787,"size_decoded":7473,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7973)","md5":"49fa677b9cd7ddf221dc06537b35e10f","sha1":"7485f3f99c3c1a57197f2b099f3f8d68b8609d06","sha256":"0cd851e5b33af0fbb354df65506da39807b998e07723f3d08aba5179fa2ed97e","sha512":"40d50c965db656d352c1e73bf3ff9e82b64422398974d55902b0eaab213ff255af9338c33d09a8b148da37b1a13ef0377de2b510f6b5c7c42c8f866ba3189a54","ssdeep":"384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ","tlshash":"d692e68db2453815c5f79265403f935fa132e29cb10a889df4bcc9e92c7ae992073f78","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-07-27T04:14:13.296278Z","times_seen":5584,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.759Z","timestamp":1784390118759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37652\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":139153,"size_decoded":37890,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"15bb2b8491fc7e84137d65f610e1685a","sha1":"cd76b70a5426893e9c022b9a75c50a7c1348e2d0","sha256":"b23f49f504faa32aac548b6662ffd64412f6738496fab8be38da46c5b7121804","sha512":"95c05110b29101c84df71c54172269f478d9cd14965b3de987613e11e0f1ccf01c1b7d2bf290d97ef11373f24dccd677f8710e1555d332903181f469d0f2b0bb","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgA:wxoo6desFshaKi+HgZsUOUTqiqM37ER","tlshash":"6dd3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T04:14:57.501971Z","times_seen":22492,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/20210424_081942-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.833Z","timestamp":1784390118833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/20210424_081942-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63319\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63319,"size_decoded":63588,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, manufacturer=samsung, orientation=upper-left, datetime=2021:04:24 08:19:42, GPS-Data, yresolution=198, xresolution=206, model=SM-G950F, software=G950FXXUCDUB1, resolutionunit=2, width=0], baseline, precision 8, 800x476, components 3","md5":"44116f2b1828b69b748dc5afb71b5c11","sha1":"1ece109fdb7a0fd6f850c95cf5b798711c4062c8","sha256":"30f3c6bafd7abc0927d58a436c8b7275116892ecfd12fde56dfcecfd0c5a7311","sha512":"0d9346ca2dcf6c2e84aa02fd1c817c5925e9ae91e861462fd415c6ad3bd62f60c9219a81aea4fc6a895d38bb31883760d32cd115aa6bd3107c94d733ccf049a8","ssdeep":"1536:xQvEQhsQgMya7AuCvSBIATcElq7P43UqlN0gIE050U:yEUsVpaSuIKq7PNqlN0gXC0U","tlshash":"5e530226cb85c623c27abc714a729f40da904e3dd85f13635272cc381da9bd769a1cb3","first_seen":"2026-07-18T15:56:07.556092Z","last_seen":"2026-07-18T15:58:59.449437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fonts.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.621Z","timestamp":1784390118621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fonts.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5426\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5426,"size_decoded":5692,"mime_type":"text/css","magic":"ASCII text","md5":"3127d398bf37c448b9972cb9ef44485f","sha1":"0acd4cda20f6644683e5c083874f0715d0eeb6a2","sha256":"24d857453b8d730a307eed43320823a8bc3c72802e15a03e484300d6e9bba88b","sha512":"c3c6736780de3d3084db1765c5381835575642dbf5d33c7985af8c95c64a6fb27cad28f16345394b1f8e14c0314457938c1693d51fb22f095c34b9f42d203fec","ssdeep":"96:1W9xuNCuku0wDEhXW5iondBRqIkvuRAnDvCQafoPSugukOgSYRSVJePh40V0eLDU:16xiCukZTw8d","tlshash":"6fb1f4a4dc6e38c393a2e5d17b503a011b1ca3688d11bd2ae416fd6cb7d3266f1943f8","first_seen":"2025-07-07T20:41:54.63693Z","last_seen":"2026-07-18T15:58:59.431921Z","times_seen":8,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/logo/logo.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.659Z","timestamp":1784390118659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/logo/logo.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95,"size_decoded":359,"mime_type":"text/css","magic":"ASCII text","md5":"c9ef81c06443ae8cf6bac92a537130ef","sha1":"437ad246c3f55322058c8b59729fdb5cd2b1bb83","sha256":"b5622f248e37a0e76c39a208d74cf7fceea2d8e64cfe42bb7b057abf8ad3268f","sha512":"8b984285392d923127bff94e25bd81b1f6e467cb8d9b51d836a713c6f6cd90d7b7d1c51829cb679a2a5e8ed94f0edb366cdb3661ade0207fb2e24d6f3ae16678","ssdeep":"","tlshash":"97b0120cb96b6fd0380d40080a53134134b200bfa1d1b9506dfa17422a5bd8893516b0","first_seen":"2025-07-07T20:41:54.627827Z","last_seen":"2026-07-18T15:58:59.394608Z","times_seen":8,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.175Z","timestamp":1784390119175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 03:05:37 GMT\r\nexpires: Fri, 16 Jul 2027 03:05:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218982\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-27T04:18:50.606901Z","times_seen":268015,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/09/ICON-300x300.png","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.590Z","timestamp":1784390119590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/ICON-300x300.png HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Sep 2021 17:50:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52632\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52632,"size_decoded":52900,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"f4f8d1b13c489ae45be85376eddcc152","sha1":"9763c5cebad80b07bbf09d3e8f65b5418645e1b1","sha256":"86bd2c22983ab3ba4457dfbe71342d876cb4e64f9cd639b52efd2402f40c9204","sha512":"6c7125cbf0030e6c0642926d2f7735bc11b7ba9ea0fe8a98f09c1cf32572b701811bedb0d106e9090b260cb11051fffea7b4608e7e9097fd75641ebbee514d61","ssdeep":"1536:D+wc9BRM3X1cRTewtpMieP/N7GUtljh4UGM9d0dHvX:nc9BiXgeFLNqULCm0dHvX","tlshash":"c73302166c92e7b6c5bc1e654e3b07395a728d4904acf32b44ddec126687abf3378702","first_seen":"2026-04-10T12:06:51.000193Z","last_seen":"2026-07-18T15:58:59.397601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/training-slider/training-slider.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.674Z","timestamp":1784390118674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/training-slider/training-slider.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3507\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3507,"size_decoded":3773,"mime_type":"text/css","magic":"ASCII text","md5":"56788fdae3fd14b6384907605259151d","sha1":"b01b56bb4374dffd9440c7218146f8b4cab10b08","sha256":"3e7a352947188fe26e6509257825c1d681e46605bdbb0c4a99351ef5347c15f6","sha512":"79d5565878a5cb3f1dbcc4e664e66f97cb550fc6880f6b42d25546bf7b9c6c76855b9f7287184ccf0fa14976129e4513e4b746a94e59f85af792536e0f205e8b","ssdeep":"","tlshash":"fa71b341b5637a82a829f1dc2636f989eac90183a019c55cfbf2214fdfdc5dc4d71ae8","first_seen":"2025-07-07T20:41:54.584346Z","last_seen":"2026-07-18T15:58:59.424459Z","times_seen":7,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/slick/slick.min.js?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.733Z","timestamp":1784390118733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/slick/slick.min.js?ver=1.8.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11325\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":11563,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-27T04:17:39.901075Z","times_seen":108959,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.765Z","timestamp":1784390118765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9594\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31942,"size_decoded":9831,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31903)","md5":"290dc74074864b6431b619f1f22ed031","sha1":"2f2a32c74d991593755320389bc1149afce4cf18","sha256":"87096ed50ff9b63d32a969732ee0c5a5bf6fcc1300ad3b5d6f5cdeb5fab1d1bc","sha512":"8af98488a1067ed8fd23d2f8109e140fc8ffd7c836178b64e92e2437a7e8760a52b58eef0b696852698a07d9d00fdfb840817ed50bd76e92ebf3f833fa847a6a","ssdeep":"768:uUOcp4IW+DlkUIw6LhdsMsURta8GqN+JeVyTUqc38POMIfk9LAy8YB53r6Og51sw:u9cp4IXkUIw6LwMXRtaqNUeVyQqc382L","tlshash":"64e2f7617142e8aa00df58af3417211d63620b98f800b61eb8f58ceb95b1fc5377abf5","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:51.038155Z","times_seen":115,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.594Z","timestamp":1784390119594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/css/all.min.css?ver=5.8.10\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75336\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75336,"size_decoded":75605,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75336, version 330.32636","md5":"cccc9d29470e879e40eb70249d9a2705","sha1":"5fe986cda635681b4b6bbd6111df2f26d7fca286","sha256":"d3caf12591d194712facd10bca14f0a924edb59c24447a3fd994a48286db8843","sha512":"396ec6b4c95e2ecfa5835b44762b588331088d0c06f79e3c0eeca93b7e907bf4695d054f933ec2d0171de11add3cf0c78aa400e9e9b7cd09792707200a5eacb0","ssdeep":"1536:gzbYxDYFYE/bpiVHSBhN2zNjlqMYmWz4F4Fus9Yht/vyMU:gOF6iHSBChgxz429Q/v2","tlshash":"8f7302e1fea7d81f67729e2b187c32e3e4e64e258f4186d2758e3e32f2254593274904","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-07-27T03:30:52.9504Z","times_seen":5250,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/coach-tabs/coach-tabs.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.640Z","timestamp":1784390118640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/coach-tabs/coach-tabs.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3172\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3172,"size_decoded":3438,"mime_type":"text/css","magic":"ASCII text","md5":"3e6cb8bc592fb8bcd0b0fa60bd1af369","sha1":"6df67a26e99a213bc700ba2f25daf6ace563b8ea","sha256":"df77925abc3375b212bc7e6c2208df28cc6c57ad2a87d98d0a319cb31f09cb6c","sha512":"38ccaf4358ac2942180de1d293855331cccc4ea8c2df93c5f78f345fcd9d8d81277519fa93bd87f014d1c690fb92ef1f627e088d18169e810ab34db15521985d","ssdeep":"","tlshash":"2a6149af052e1543d52ef25997ad3387fb549333614f8ad8fb4c154c8f4aee28162e09","first_seen":"2025-07-07T20:41:54.627125Z","last_seen":"2026-07-18T15:58:59.307865Z","times_seen":7,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.182Z","timestamp":1784390119182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:42:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78465,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-27T04:21:29.638771Z","times_seen":162413,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/image/image.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.653Z","timestamp":1784390118653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/image/image.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4721\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4721,"size_decoded":4987,"mime_type":"text/css","magic":"ASCII text","md5":"96da6b0eb07d99929b063db9f229b2be","sha1":"734d7eaf3444e5c5c59f7eef3477db75953a1697","sha256":"58c146ecddd0fd40e62276bb36e5c2f6e452b3df9a5a67be4e1dd0710b032c4c","sha512":"c62f6863e06ab7b62f781436e210f6982975b2aadda2d5fdba9e0953fd016738e106736cdb119195b1496c7ffbc10bbf52252034fc533426d0fc60c96536dddc","ssdeep":"96:zEISEZP51Eq5EhxXcRvJU98vPsCklnvJZSUgBlB3TBxqB9B0SBcqryjO6DFsTNBP:jBP5t5WESS8PFHYL1FfaGildMAkcFdXR","tlshash":"b6a1e7d1bf670883872e52037fcf8e28522865db5e0e9ca5f29d1d4f1fa1d89332a851","first_seen":"2025-07-07T20:41:54.580424Z","last_seen":"2026-07-18T15:58:59.359296Z","times_seen":7,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/elementor/css/post-4375.css?ver=1633469233","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.693Z","timestamp":1784390118693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-4375.css?ver=1633469233 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Oct 2021 21:27:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6105\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6105,"size_decoded":6371,"mime_type":"text/css","magic":"ASCII text, with very long lines (6105), with no line terminators","md5":"5dae88655796a6761d06bde739d2cca3","sha1":"11dff1fdab50f22af3acdd441bcec4df77046097","sha256":"85b6e81acc5bd1db1b79b9e451058ea306c67bf9d0090123e1425aa25815ce88","sha512":"c17f2d1050f6a104a87acb443e26b90ca32b8aa34359ae0a69fb11cd6c7bce26656ce908d8849b65f829a77a22db8ae144e082b7000f7edf2eb9b02e44b0daa3","ssdeep":"96:wnWLAn0XRvGuzaFMUiFpKUBiuquzaFMUimWR8FpSf6POsDE3jM7MLfm6SJuGfrR:p00XAuzxFpKUBiuquzxmWR8HSf6lE3j6","tlshash":"17c1d69a7d57642971af300b8073a2ad25b44cdde57eb2e6e8399027f475de033f0a11","first_seen":"2026-04-10T12:06:50.951658Z","last_seen":"2026-07-18T15:58:59.416538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/wp-embed.min.js?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.750Z","timestamp":1784390118750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 May 2023 21:08:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1478\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1478,"size_decoded":1670,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1443)","md5":"7c5c36baa69fcdb57bd891cda90920b3","sha1":"9d8b3df7a4fa2968403290d69a60b2eab20734f5","sha256":"6a482d2d94c0d1bc6937a1759389d01b475e6b28a0d9b5d7eaa3f9cc8f59f3cd","sha512":"904c01ad7fea398b11addee5439eae8c35d7c5b5194bbc9dd139f6f8a4485e944eb62ccab04b6d734b63aed9fdca67f9b5bd7d0de6bccde7a4a13dcb7b756a73","ssdeep":"","tlshash":"4231626a3239c47e54d701d3bc8435cad2b21be9a85200d24a79884df5a4f93456afe0","first_seen":"2023-05-16T22:22:14Z","last_seen":"2026-07-27T04:04:06.115241Z","times_seen":21177,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/Interno-1-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.836Z","timestamp":1784390118836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/Interno-1-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69932\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69932,"size_decoded":70201,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, manufacturer=samsung, height=0, orientation=upper-left, datetime=2021:07:23 22:53:06, GPS-Data, yresolution=198, xresolution=206, model=SM-G950F, software=G950FXXUCDUD1, resolutionunit=2, width=0], baseline, precision 8, 800x476, components 3","md5":"bb9a5b37777565db12b8ddee9538c63e","sha1":"51f3f56d0be0e817853a601f53bc1f3c58cea937","sha256":"dc51a982d61bfe7c3315ae3844311a1aa4cacca32cf44bd368cf2dc7d5efa28c","sha512":"23e107fe7dde79d6da717d03ba1279385a92e371ebab06493eead250d67171502676b2e3610f27a7d4266528f1e005d28b345e811ab45bac8c4370023ef107f1","ssdeep":"1536:o9JEtG8jwWe/KC5wQEkWNPug0LFb+Xo7Bkwo5R374sU:o9KtFwWe/KCjGubJSf55U","tlshash":"3063026bdfe338cdd18c08b58e854f124b16ef661a5a51cacfbed09e88a71c60d5630d","first_seen":"2026-07-18T15:56:07.572866Z","last_seen":"2026-07-18T15:58:59.477915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.120Z","timestamp":1784390119120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:31:15 GMT","end":"Wed, 16 Sep 2026 01:31:03 GMT"},"fingerprint":{"sha1":"C5:61:CA:02:96:1E:EF:74:7E:9B:A1:6B:79:5D:8E:98:E0:B0:11:5F","sha256":"A3:82:78:47:4C:CA:89:30:69:57:2E:C6:F6:12:67:FC:FF:88:93:99:36:CF:66:74:3F:25:B9:49:A7:C1:05:2A"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGqVBa0ajRpvaeLz%2FRnrCIoDuHrkCb%2BjK7f4h1b%2BjrYftOJR8289vM8F5JMbeT4FLhoV5jKaCuaid7Nr9n6UHe2xaj71VL%2BZ7Vr3zzC8yUmj6Sp5CdiyI91uDbN9y5THdVJU%2Ftp0\"}]}\r\netag: W/\"595f8bea07b6134137baa5d8df653a83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nage: 12245\r\ncf-cache-status: HIT\r\ncf-ray: a1d2ab849c66b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3457,"size_decoded":2613,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3457), with no line terminators","md5":"eeb0bd3e09bd83d569d6d03160612fde","sha1":"6f23c40e93450f29d58b9fcc16d79d742e4e5c2f","sha256":"8afdd81790c4628524f0d259e64a174f77ca9d67806a850e4425d8e78e15a42d","sha512":"4f3b3f5b2c9aadf6c4fc5be7bf1d70959b03fd380b0f017568d1d3081563e5e17e9a65465057b88bb26b58a74d9b5cb2bc1f5f423cd5dee0b82cad5c44b7211f","ssdeep":"","tlshash":"6e61c84f774ef8368e4735b6c5afb61ea223335d98548400c914d8dc8aacdc7116fa79","first_seen":"2026-05-21T20:24:46.793156Z","last_seen":"2026-07-27T03:48:18.754436Z","times_seen":4575,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":3,"connect":12,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/basket/basket.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.632Z","timestamp":1784390118632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/basket/basket.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4038\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4038,"size_decoded":4304,"mime_type":"text/css","magic":"ASCII text","md5":"3b03888a865fdc4121b8fe3272cb6f92","sha1":"ed625d93ae0f2ef4292a3efcee373fa9f506c015","sha256":"9a27eac030380839381a6e06eb331cc9114a1beb4417f88ca7232af7d33b087d","sha512":"acb5de9f40c8573310f0a532a71b567fce838358bbb87ced8fe52743834ec3809fe8d6874d194dd350bb6aeb70e133bdb7940784eeb742b4cc0bbbfb3773f74d","ssdeep":"","tlshash":"89819da251b30a247add545686a3f3c931a840d7d40ed8387a97368d1fc85f5026ffee","first_seen":"2025-07-07T20:41:54.563589Z","last_seen":"2026-07-18T15:58:59.318903Z","times_seen":7,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/video/video.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.680Z","timestamp":1784390118680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/video/video.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 506\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":506,"size_decoded":771,"mime_type":"text/css","magic":"ASCII text","md5":"cf82114a6c0be8f3f404d969d5671780","sha1":"30618832d9c71335d23813e3d597cc1766596e5a","sha256":"700ebd1dafd1a3fc63ef2bf109b85602fa4a9e055652fc27a5907706ac678289","sha512":"159de34ca0ade701fa2650ec573c9258eed6c2189f2299e53274fbfc2981bcd4366c10ee364c5722012cd3e93dc4b2ecf345b515c79bbb3f94a45f41943f35e8","ssdeep":"","tlshash":"0cf05088767f0440b04fc54936cb335c273e41839712d96cb31537869fcb51892d3ac8","first_seen":"2025-07-07T20:41:54.565521Z","last_seen":"2026-07-18T15:58:59.320195Z","times_seen":7,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.687Z","timestamp":1784390118687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19213\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":131034,"size_decoded":19525,"mime_type":"text/css","magic":"ASCII text, with very long lines (65497)","md5":"d094f7bb140c90327ad990c04c3c326b","sha1":"404d6db062f9bb9ab44fd7fce141e5f0fd36f555","sha256":"86034e413bb1c2b5c01dcb1ea6507384f93018c4f560b879ddb12b8293b6f9e3","sha512":"65766b72f2bbd270adf293466772f9d91e026a8cec9b377bc8318503d7aeb43a2dfc2ce81e154e8eca85d06159f8e57d7e23fa4862ffcf1b652dfebea75947ba","ssdeep":"768:of6VYI8DUx0rgxPm0Em67bKIMs3P8nqloBPGSbf9g3lr98qHGufiHuYRmsdbTyxo:oYG1mufiOYRDdbTyFyZ5ayfQL70","tlshash":"9ad373327d076219222f4d2b5283768c6294c1c5ee4377d9f892a807c7fbdd43b3696a","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-07-21T14:47:50.998016Z","times_seen":128,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/sticky-sidebar.min.js?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.727Z","timestamp":1784390118727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/sticky-sidebar.min.js?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3936\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12487,"size_decoded":4173,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12266)","md5":"85c24fa12aeb73bc459a44ec1d110cf0","sha1":"8a2126b48ed7be33b58f74a01bd5d507559a7049","sha256":"29a5e7d1170a51c36bc54df272fc9dbfdb9687f4b03a9f30728a378d1eb94277","sha512":"dd924f48d3f04c21b46ba11444a5c1423e28525d68fde01f4278b03277675af7fbeb8b7a8a919e336f0a99d9298c40b5f06f5eea8d8714c217e5c924f327c0da","ssdeep":"192:Eyun/Q/DK585HKg6JqW61mquciulS3Ul2WkkU3IV:EyGM5AdquJAwkU3IV","tlshash":"2842950933603c3002d75459e9bf930d51325e3ed2d1d8cc793dcbd99eb8689a1aabb9","first_seen":"2023-11-18T21:48:33Z","last_seen":"2026-07-18T15:58:59.336332Z","times_seen":12,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.12.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.685Z","timestamp":1784390118685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.12.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3599\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17679,"size_decoded":3910,"mime_type":"text/css","magic":"ASCII text, with very long lines (17633)","md5":"def44311f09960b7e0c00406cb20d6b0","sha1":"31a74acb917ef7f33106d14a7d2967c0b8ca1b7c","sha256":"8da4ba63c0631c15e1fbebacc34c51ddf4d51b8b2bd7a6c9a3885e913f408301","sha512":"c04fb36ea88026da5e7234d56b5c74fba869df5dbdc9c742a776db63f7f3c4eaddf5f15d15aff66e177c1580472ada4065347ea96d586ba1f73fdf1158bd4dfd","ssdeep":"192:t58XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DUt:gmK+JRQcx5ZETGNREmk4F","tlshash":"e282dba4e02922c96bb1c413e3d0734e7409b921fed5cd59fa4ba50c6fe1693068af7d","first_seen":"2023-04-05T14:18:03Z","last_seen":"2026-07-23T17:18:22.954839Z","times_seen":1315,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.731Z","timestamp":1784390118731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2774\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18468,"size_decoded":3085,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T04:15:28.157085Z","times_seen":42748,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.739Z","timestamp":1784390118739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1514\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":1706,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ff04ead1566cf522aa4dc6e51e7a8c89","sha1":"b9456d11127917c73f5ddd343092957d15d8cab5","sha256":"7a046581d4a85e3c857ec9c9e9e133712fe7b499ee2782c719352913af473973","sha512":"3624039a3e0a65b60b6861d072b94def6067ac9212504752186fd1783d8473b1b364873fe4869e8a9c730f5083ac91dd8a33a436ca604948a3d4de0ec60ea6ba","ssdeep":"","tlshash":"4e31fd6c707322d6023338aceabf0e2d3911850327864814b5ccaccd5f44634a6e17bd","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-07-18T15:58:59.34717Z","times_seen":293,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/css/slick-theme.css?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.617Z","timestamp":1784390118617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor-stm-widgets/assets/css/slick-theme.css?ver=1.8.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3145\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3145,"size_decoded":3411,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f9faba678c4d6dcfdde69e5b11b37a2e","sha1":"81a434f94f2b1124f3232bb86f2944f82fb23ac0","sha256":"7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a","sha512":"ea52d475e439ba178c15b5a6dc23f6ef5975e11b17d71b71f89e71db27880e49220697954cd853aa28cc13b1a044a2a2ea10aaa2fc02a014e5441102db433c32","ssdeep":"","tlshash":"cb51e19856b3a746101694903be7472477cb70131629d8acff95638dcfcd0d8ead934e","first_seen":"2023-04-05T09:38:24Z","last_seen":"2026-07-27T04:12:09.114797Z","times_seen":28272,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/coach-slider/coach-slider.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.638Z","timestamp":1784390118638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/coach-slider/coach-slider.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5796\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5796,"size_decoded":6062,"mime_type":"text/css","magic":"ASCII text","md5":"2541303064bd78b83cd9153815243adf","sha1":"61140057e013742900e9c44ed35ff4ac36196a22","sha256":"0a9b49172aec911d05149e72cabee124dba80436f527ae3d16ca4c1fab1c70a7","sha512":"c1f92a51e5ea5c6ab587c923188e0225c06ed860c26d3d5dbd5983c7ce9703d26c179466e29066f10839a5667927a1343b7d159ccdda923bdc0d97d90eb262a2","ssdeep":"96:qwZetWn0ZB+T85pJzFA9dw/Sy+mIAiTIsH2:zZeth+QDJO9d1y+vRW","tlshash":"34c15a435e2b244ad50a20e57b7f8a47f7d85523529ecee4faee604dcf08ee652016c8","first_seen":"2025-07-07T20:41:54.601847Z","last_seen":"2026-07-18T15:58:59.420665Z","times_seen":7,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.697Z","timestamp":1784390118697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1249\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1249,"size_decoded":1515,"mime_type":"text/css","magic":"ASCII text, with very long lines (1249), with no line terminators","md5":"585ae91c16282c2507ef31e087143d34","sha1":"16385142a9a40895ba416b02ebe2144805d39303","sha256":"f2ead27abcd3d4b65c01b8d7ec578d5fe72afec4c4258dd20bbabc4f23995fce","sha512":"c9a741934e8d2158a6973ce4c4d324451e497b86fde3f6e7bb8c076348f5ccc360dcef0b3841badcc5b36f2ca2ccf266073500098085a1c93d2090691a523596","ssdeep":"","tlshash":"28215719e49d32ed502fcf18f1a14ddc73242281a6e30ef19057e4a98d408b115e7b5d","first_seen":"2023-04-06T13:17:06Z","last_seen":"2026-07-18T15:58:59.465769Z","times_seen":254,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.717Z","timestamp":1784390118717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12793\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57912,"size_decoded":13105,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T04:15:28.196295Z","times_seen":27539,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/imagesloaded.min.js?ver=4.1.4","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.740Z","timestamp":1784390118740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 13 Jun 2020 18:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5629\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5629,"size_decoded":5821,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-27T04:15:28.199438Z","times_seen":23304,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/ext-4-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.838Z","timestamp":1784390118838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/ext-4-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40281\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40281,"size_decoded":40550,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, manufacturer=samsung, height=0, orientation=upper-left, datetime=2021:03:07 21:48:46, GPS-Data, yresolution=198, xresolution=206, model=SM-G950F, software=G950FXXSBDUA3, resolutionunit=2, width=0], baseline, precision 8, 800x476, components 3","md5":"1d58193d792ae4c90f92cf2ccbd38338","sha1":"4fd8c8cf77136536c4b51903782f513aa96da364","sha256":"6797c102fb2fc127e05b721a31e65e34b6f65a826ad76cd0a38abba23f4e49cd","sha512":"f9ab4d4f2acef211c979d1b79dedd8e9cbf898d473d1ba5a72bb9b04cc697ee8042fa6c37838488721fab905353cd56661eda88ed2bcc6a03e8b2df091477855","ssdeep":"768:mEHNMy/oSnjRKnRTNWCRYyCW4e5A2sfvz/Sy3E3OUCLXWEi3uI+:bNMXAjYTNdeAA2kvzKyPvbi33+","tlshash":"6803e11a4f902361cad17972f59e5bf0a2aa84f13ac24317dd703805b5506eb9cd9ff8","first_seen":"2026-07-18T15:56:07.586844Z","last_seen":"2026-07-18T15:58:59.401969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":212,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/menu/menu.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.663Z","timestamp":1784390118663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/menu/menu.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5075\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5075,"size_decoded":5341,"mime_type":"text/css","magic":"ASCII text","md5":"65d216014b59b3ad1005ca6f36c22a4a","sha1":"0d7133d96a60ae38690b45687ef182a64f521990","sha256":"71d11e5c5ff67c8b4308222b256f938f848a021a2d813d8aa6f76cccd067177d","sha512":"1cd165348ac11f88738c9834b39bd37f12fcdc326d42f08d0f788c6c19c6cd5be7b928f5472a1e1d3b1817dd3f0f07ed2abaaa78cac353a2f92e7a1fb8538364","ssdeep":"96:Kkkm/P/OXV6DC7brCGCCOCdmCyFTio9mxPmOGm5/iQ6dSTjmeFJ/jy3EUD0:Kkkm3GXV6DIn/PO6mHFTio9GPPGAiQ6y","tlshash":"a0a16296ade350446c2ff079cbda175c223840c34f4accb8be6da19d8f8559495f2f94","first_seen":"2025-07-07T20:41:54.560956Z","last_seen":"2026-07-18T15:58:59.389339Z","times_seen":7,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/header-slider/header-slider.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.648Z","timestamp":1784390118648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/header-slider/header-slider.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2265\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2265,"size_decoded":2531,"mime_type":"text/css","magic":"ASCII text","md5":"7d126e82b04267284d5fe5e4954b9d24","sha1":"24a671102345c7619859b49150624e7c7dd877d8","sha256":"36c9bccc9da370cedc621d62b6266bef8a653accd9ae7e605ef1bdb7229ca18f","sha512":"7efde29854b1dbb603c039e2c7030fb295cf7f819a2cba10ca23e89ffc042cef286a4cac00d9049b329218970f1c19f9c5ade5915bdbf997ba9fa078a043d72e","ssdeep":"","tlshash":"ff41c74291a33d44142d5608e75a8e48f6ec27535e4fd618fbc5a68eefc85e0e346bc8","first_seen":"2025-07-07T20:41:54.633758Z","last_seen":"2026-07-18T15:58:59.439421Z","times_seen":7,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/icon-box/icon-box.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.651Z","timestamp":1784390118651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/icon-box/icon-box.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 372\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":372,"size_decoded":637,"mime_type":"text/css","magic":"ASCII text","md5":"b6f92e68272015cd55415112db25419a","sha1":"cb4dc08c5e45a29b2957950114669fdbb9e1c735","sha256":"18701407901abd93513b271de9ec9a915dafeca363207f1127c5a49d80bc743b","sha512":"113c09d2b189ac0a4c690cc2fa76e98e02c1d2d56a578cbfd7c732a56ca53930d7115a751148fc275515b47ecdc4876321fea1f88365065159c78a081cfc8696","ssdeep":"","tlshash":"8ee0df063ca310012a2fb80f07970168a13400cbed8a8d55f55c950bcfbc9dc1653c76","first_seen":"2025-07-07T20:41:54.593117Z","last_seen":"2026-07-18T15:58:59.405598Z","times_seen":7,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/training-block/training-block.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.673Z","timestamp":1784390118673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/training-block/training-block.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2246\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15190,"size_decoded":2557,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9a1f4fcfb0be7e4c93c9f66a0d17ffdc","sha1":"7f59df4beb15d3328567a7e6027a0d37950613a8","sha256":"d41c0a489b83a2da47e3488176d8ec0459433963700148b4a36cc97291feea14","sha512":"f0a65367e8122c73a9619cc767152bdca10c4630380f66b833cd5cd15c48cce198889dd2a7d2e5edbe16b6b97aa14897949968bfb4635a59a18cd8e431fd6cae","ssdeep":"192:D2Khy/yWy9y+5Gykns13y8ryAy//1yLxOrLSJQM5UYzMpXOmoHF2FEJlC+wTR+78:seDuF5","tlshash":"106288519163364bdc26f0ec0b6a7604e6c84103550bd9e4fbf5608e9fcc2e89db6bad","first_seen":"2025-07-07T20:41:54.590082Z","last_seen":"2026-07-18T15:58:59.450818Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/isotope.pkgd.min.js?ver=3.0.6","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.743Z","timestamp":1784390118743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/isotope.pkgd.min.js?ver=3.0.6 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10668\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35445,"size_decoded":10906,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-07-27T04:14:48.300642Z","times_seen":25294,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/PESO-370x193.jpeg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.839Z","timestamp":1784390118839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/PESO-370x193.jpeg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Oct 2021 13:28:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13446\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13446,"size_decoded":13715,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 370x193, components 3","md5":"02c3f9163094646257a987f2c4fdbec8","sha1":"f85f07a8a28fe873bda7f8b461db4f45733ff8ae","sha256":"b9bb61fb033b0911982eb92debda808251d475578ed0d5d73ac36dd284583fb7","sha512":"5cd136d07bc8c9ffc98fc474b1cfda37b0dec487d388115af261e9c025b59ed3dc37ba89b7f172a56d41b8653b14b35df8d5b86bd9032823b99bc4d637416bae","ssdeep":"192:/3Yi+gUatCre9+TZuqHwlyNo4UpO4CEv1I6wkUVRosVwQ9cqO8vefgr8J/b9W9:fp+gzPwEqwZbNNdbQoKwQeqZr8Jj+","tlshash":"8b52aead0f3f0faa9e3c4fd9a30667ce848470957a98bd1b5a39d7da7c006c61708819","first_seen":"2026-07-18T15:56:07.592104Z","last_seen":"2026-07-18T15:58:59.385405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":218,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.467Z","timestamp":1784390119467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/css/font-awesome.min.css?ver=5.8.10\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75336\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75336,"size_decoded":75605,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75336, version 330.32636","md5":"cccc9d29470e879e40eb70249d9a2705","sha1":"5fe986cda635681b4b6bbd6111df2f26d7fca286","sha256":"d3caf12591d194712facd10bca14f0a924edb59c24447a3fd994a48286db8843","sha512":"396ec6b4c95e2ecfa5835b44762b588331088d0c06f79e3c0eeca93b7e907bf4695d054f933ec2d0171de11add3cf0c78aa400e9e9b7cd09792707200a5eacb0","ssdeep":"1536:gzbYxDYFYE/bpiVHSBhN2zNjlqMYmWz4F4Fus9Yht/vyMU:gOF6iHSBChgxz429Q/v2","tlshash":"8f7302e1fea7d81f67729e2b187c32e3e4e64e258f4186d2758e3e32f2254593274904","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-07-27T03:30:52.9504Z","times_seen":5250,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/event-form/event-form.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.642Z","timestamp":1784390118642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/event-form/event-form.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1241\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1241,"size_decoded":1507,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"fc7265a518f3a9226b80325206c65e52","sha1":"e1bd5dfd288a48a5916e748f7dae9b458cbed061","sha256":"430fe393a331fb7d35552d2f5749a12cab6a2e657edd4fb391d9095e28ecbeae","sha512":"d58f9be51be445c9cd0dc4805fb15493ec1bdde07495afb7a8d4a77eea7e59d6065b8dcf4ef4a4ac1f964a6b2476312976529c330c1adcee28bd76c557f1ac80","ssdeep":"","tlshash":"772188a2965b4889901fc16c3fea5784133d52c3e226c83bf3852d14af886789053fc4","first_seen":"2025-07-07T20:41:54.62258Z","last_seen":"2026-07-18T15:58:59.436103Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/footer-menu/footer-menu.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.644Z","timestamp":1784390118644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/footer-menu/footer-menu.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 649\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":649,"size_decoded":914,"mime_type":"text/css","magic":"ASCII text","md5":"a4f4eba59bfe867a8ee6c95799688c9d","sha1":"a56798ce5b0e1136a953f58f3042ff329196480b","sha256":"f8fce6f51d1d5f41a3a546b76bbb29356549d674a29445524fe7f969085a20f6","sha512":"8e6d953c02f86b8fc448c826e3bcfacd7a24751ceb065a1cebc4fabd1097bec43c55dfe3975eb30af86441332ffd170a79d386f49ecb47f74aa2a6d8d1e9e6a5","ssdeep":"","tlshash":"d3f044987ef78404511f40371a2fa20d2268c08b0a496ff4b89cd241af1fe1453a3f44","first_seen":"2025-07-07T20:41:54.577873Z","last_seen":"2026-07-18T15:58:59.396282Z","times_seen":8,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/login-button/login-button.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.656Z","timestamp":1784390118656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/login-button/login-button.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2091\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2091,"size_decoded":2357,"mime_type":"text/css","magic":"ASCII text","md5":"f6f525883035d3c574a3d9636371fe6c","sha1":"f8ad7901db2fb118e74d285f2848d0b1fbe6f987","sha256":"2a6add5c9b1e68ab4f70e9452bb149fadb47f13821d56cc11fb873b883d0d850","sha512":"4c9188542ab31fb828ad636b3be1aece8ebc2b65948c2b8f8a6acb9618f39768775814cd368dd33a229362ed02cbd551d4c687a9bc26e14f0c4151e4e7b034ef","ssdeep":"","tlshash":"cd418e8966ab4f416c0a51442baf53b92a3c00b39749de7cba6d23c84f8d266c115f6d","first_seen":"2025-07-07T20:41:54.602812Z","last_seen":"2026-07-18T15:58:59.324653Z","times_seen":7,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/jquery.min.js?ver=3.6.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.720Z","timestamp":1784390118720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32750\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89521,"size_decoded":32988,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-27T04:07:49.174547Z","times_seen":59783,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2018/12/logotipo-NEGATIVO-ricardo-borges-hipinoterapia-omni.png","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.823Z","timestamp":1784390118823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/logotipo-NEGATIVO-ricardo-borges-hipinoterapia-omni.png HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 29 Aug 2021 21:13:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45062\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45062,"size_decoded":45330,"mime_type":"image/png","magic":"PNG image data, 400 x 101, 8-bit/color RGBA, non-interlaced","md5":"6f937030033b13146bc381e561d8e105","sha1":"356fd60401e5bf2377e591ed4b56ffddc66f55f0","sha256":"bbd5a6ea6b43120795eaeaaa3a2cd8fd517fef5a42b6e023930e94c68a765301","sha512":"85fad59c1f3832ad224963875aa2f46a494e60627a5784ae475f69976f9e56ebec3fac2a590dd654f74fbf7ba1eca8e24a204978fd4ae51f1582869216b7677f","ssdeep":"768:xMcWFFKHU2d+lQrPi1lylYITkHt6lm+8tdrZ136uWCHa+wz9SL+bnwLEEJU:7WFFKHUvQ21VITC6WtdtcBCHaxlw4EW","tlshash":"5813f1c4501d1da4dab88c1a276bf82f57c361a8a96e1d124b8545130bb083feef6f73","first_seen":"2026-04-10T12:06:50.998793Z","last_seen":"2026-07-18T15:58:59.428231Z","times_seen":4,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.176Z","timestamp":1784390119176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:53:51 GMT\r\nexpires: Fri, 16 Jul 2027 05:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208888\r\nlast-modified: Mon, 08 Sep 2025 18:04:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34236,"size_decoded":35049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34236, version 1.0","md5":"fee1dc1edf94921126077c4a0034eadc","sha1":"427949faee52b0848aacce8dde79939e4956c3d3","sha256":"50cf7d32c18e1001749b51f1565ef745bc0687b0297b2b13465ed577cc20a8ff","sha512":"ee1a28f6b6f05df9913a7c9a6e006c4728a2d818afc3c3cce2c99dc51c71436ea415eee46b6dd82e83cbfad52713d078878ee92be1db8db3d132c7d631119c13","ssdeep":"768:yJ4irnFQpWzt8cJdyBSWj2rXnX+GyOMPyr8lWpreMqDGfP2/rTJa:ydrnFQOBJ8Bz2rH+lKYlWJtqXa","tlshash":"71f2e19d0b61d12382642aa3f409501f1f47b5c800efdf6bb05d54351caa25b6eabefd","first_seen":"2025-06-02T17:58:00.99575Z","last_seen":"2026-07-27T04:12:09.072423Z","times_seen":20240,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":25,"dns":1,"connect":0,"send":0,"wait":34,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betop.stylemixthemes.com/motivation/wp-content/uploads/sites/7/2019/01/shape2_05.png","fqdn":"betop.stylemixthemes.com","domain":"stylemixthemes.com","tld":"com"},"ip":{"addr":"104.26.12.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.225Z","timestamp":1784390119225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stylemixthemes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 05:21:55 GMT","end":"Fri, 16 Oct 2026 06:21:51 GMT"},"fingerprint":{"sha1":"BE:E9:FB:0C:17:E4:0D:6A:6F:B5:1D:54:42:0E:80:D0:83:97:AE:77","sha256":"F5:95:85:B1:0F:06:F5:76:E6:D8:3D:AF:5C:3A:AD:FF:DE:6B:D4:39:0D:6D:A0:BB:DE:85:EF:AD:17:28:FB:C9"}}},"request":{"raw":"GET /motivation/wp-content/uploads/sites/7/2019/01/shape2_05.png HTTP/1.1\r\nHost: betop.stylemixthemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 2962\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Feb 2019 12:33:25 GMT\r\netag: \"5c6bf795-b92\"\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1qc8C6op8UfC8GxRzMNxzMlxmImLQZDrNCp1k0jGfUGH%2BT7JeyZT3hePk%2FwagWFpCxeE2wC5NhKxaY1iAHF3oCcDCAa60jQYtYPSkgJsgEoIZIvORHrtbhJzkZomW55fLA%2FfGKS%2BXX1cQ%3D%3D\"}]}\r\ncf-ray: a1d2ab854b7656ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2962,"size_decoded":3675,"mime_type":"image/png","magic":"PNG image data, 703 x 75, 8-bit/color RGBA, non-interlaced","md5":"7f12ee134a6c3f67ad52f4be6f88db70","sha1":"fbb69021f783697d0a42657f8cd2050c2136551d","sha256":"305c8aa9faa4ac5338fa41a6b29534b7caac2df27beb50f16ac81659072aad53","sha512":"47db493c1c9f4be54d1059f46e0631b2e7b8ca5b36913ebf6db223409d818b1d2f792558366fa2111e6702514c89cf4c7420415294b9587af6b221bc0423f516","ssdeep":"","tlshash":"90515d9fbe52d9811990efc520d89917de5709c04ca0ffcafc8f68d265955e407049c3","first_seen":"2026-07-18T15:56:07.598313Z","last_seen":"2026-07-18T15:58:59.426457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":140,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.318Z","timestamp":1784390119318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 06:03:03 GMT\r\nexpires: Wed, 14 Jul 2027 06:03:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 381136\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-27T04:18:37.789851Z","times_seen":283132,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/google-maps/google-maps.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.646Z","timestamp":1784390118646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/google-maps/google-maps.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 551\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":551,"size_decoded":816,"mime_type":"text/css","magic":"ASCII text","md5":"c69081ed2136b84390657b3c7aeeb30d","sha1":"601a329f5357e05935b0c3824481886e1f6c0ea1","sha256":"4d47e29929e6ee190bc029d208d722b3ffa8d48c443c88aa3e8945b7b5b9d94d","sha512":"4dd0f21aeeb74b65280cd814aaa3d277b0244710d8c6b057fa7c7b92baa21417a5cfc9aeb5f69622a3ab11591551da540e9d2ac9f43d8e4b8109fd709cab5181","ssdeep":"","tlshash":"bbf04ca3b1f20dd1301e041837bbe766317e5583014baeb5bb4071140f091a70d12e8c","first_seen":"2025-07-07T20:41:54.570621Z","last_seen":"2026-07-18T15:58:59.419204Z","times_seen":7,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/css/font-awesome.min.css?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.703Z","timestamp":1784390118703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fontawesome/css/font-awesome.min.css?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12922\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71743,"size_decoded":13234,"mime_type":"text/css","magic":"ASCII text","md5":"993e2f8bafeb7d72009067a2a6365684","sha1":"0e862b2c4b8e4ea9327038a3bba66072081d3ecd","sha256":"702ee50041aa702d3d1afab93f5aabbe9d7dcdff31cde8ac52e68d05b25cd7df","sha512":"160aaed8267f98997de5d9bbd9c229f0c8b424e410bade4b23ff468445fbf9ef7d3184a16e3c204cb0ade6c083a81b143086840d7033f5cb14da4e6559dd7629","ssdeep":"768:VClcweZliBOzII3Bf+ENTbgMCo5Q1KpDCLDfvTccney:VClcwjBPI3dnNPgMCo5QckXzjZ","tlshash":"d963f0bcd1fe08954318e484274bb380b325b6af9c584c5df282be8ddbd06799186bdd","first_seen":"2023-04-07T05:46:07Z","last_seen":"2026-07-18T15:58:59.457238Z","times_seen":72,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.719Z","timestamp":1784390118719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 675\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":675,"size_decoded":940,"mime_type":"text/css","magic":"ASCII text, with very long lines (489)","md5":"144e43c3b3d8ea5b278c062c202c92f2","sha1":"3c037057a419245849747b4762d09d88cab66fc1","sha256":"9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37","sha512":"6a95fcac537f2b1256f2b9e241b92fcebb214372afc841fee2ccd3dd29e8e6cbddafa13f08fd1013ceb6c8478b04c5270aa2e4a3c41aba01a4cef592eee35f15","ssdeep":"","tlshash":"360149a506110045c2820b063adfbe1dad0ae2587c296f63e12fdd2d0cf9e5f21faf49","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T04:21:29.665554Z","times_seen":80568,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/PME-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.828Z","timestamp":1784390118828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/PME-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67342\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67342,"size_decoded":67611,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, manufacturer=samsung, height=0, orientation=upper-left, datetime=2021:02:28 19:01:04, GPS-Data, yresolution=198, xresolution=206, model=SM-G950F, software=G950FXXSBDUA3, resolutionunit=2, width=0], baseline, precision 8, 800x476, components 3","md5":"7d192ea3a958f752de915c2ed52e7bb0","sha1":"fd5d42b1b5ff8c61bde5c28601fb0e2a241aba1c","sha256":"51d186eebfb29b325651b2b4ff118b2ecdc8002081227b378cfb7935d2ba4e8c","sha512":"3e610ffe83a8827d65e9b6c1ce7fe0f92f552395a23f98b031df2704545bbb267b4936c415da09e1049fd16daaca914d0b88f321e56e0861eb7604296c1d931e","ssdeep":"1536:wrqy0VvHxSlVzUEEfz5RveS4mxciZrX5VFqabUmTPa:eKPxSrzUFfbfcihdnbza","tlshash":"4363024b86e04199c3863eb918c33bad4767e2e4965fc91155bec9282f1a1c1ff335e1","first_seen":"2026-07-18T15:56:07.604049Z","last_seen":"2026-07-18T15:58:59.447264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/extreno-3-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.837Z","timestamp":1784390118837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/extreno-3-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66415\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66415,"size_decoded":66684,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, manufacturer=samsung, orientation=upper-left, datetime=2021:04:12 14:04:09, GPS-Data, yresolution=198, xresolution=206, model=SM-G950F, software=G950FXXUCDUB1, resolutionunit=2, width=0], baseline, precision 8, 800x476, components 3","md5":"dc051c70b9a93dab609fcaba12737728","sha1":"c6309a4beb84789cdfaec153b74490aa87eed894","sha256":"91f32728fb746c950b351c1ad77c5d6dd0b554ea59ff7702f64192f67c8673db","sha512":"c8d28c89464431e14ed469df61556606e9064f95ce8d12d221a0bef169aea769bfa2695a458868c486f43318c00abc36ea53e252dd32b76fbb12cba93ee8a9f8","ssdeep":"1536:YQffwffMffbifflffFffLzffnbffb+UffpgzffcHffwgpyibff/SAifffV5r2ffu:YQffwffMffbifflffFff3ffnbffbBffC","tlshash":"ea53e141bb2ac4c5c93790b1ec815b68af5c5580ad7332df8dd0e92879d7ae1a530cda","first_seen":"2026-07-18T15:56:07.60561Z","last_seen":"2026-07-18T15:58:59.462878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":104,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.bycdb5qo.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.339Z","timestamp":1784390119339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:31:15 GMT","end":"Wed, 16 Sep 2026 01:31:03 GMT"},"fingerprint":{"sha1":"C5:61:CA:02:96:1E:EF:74:7E:9B:A1:6B:79:5D:8E:98:E0:B0:11:5F","sha256":"A3:82:78:47:4C:CA:89:30:69:57:2E:C6:F6:12:67:FC:FF:88:93:99:36:CF:66:74:3F:25:B9:49:A7:C1:05:2A"}}},"request":{"raw":"GET /menu/modules/core.bycdb5qo.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2B3Y7oMF%2BFviXEp%2BCzb7V3vokScOM9yqWwwwWBUTzfAe3jCjD6UqicLLcFzn%2FxaGnkXFJKp8gikZJQ48XG%2FzAOltpcOQvPajbZImT1S9oq%2FY7W8KmYnlxZygX%2FMbXZ39KpH7aqIF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"53e7f790ea18441665d376b14cd5ca00\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a1d2ab85dcaab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72927,"size_decoded":27560,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4bd9b59dc4c960c39474eebd5c5c71ed","sha1":"2c3280d47de1fe915e6b33e719adf76e7aade79f","sha256":"67d4d49c9815036a850d409a2c3c927c46d2922f05b22d4713aa644dc8b494fa","sha512":"d018a56bf7a75ee87ed2b65c000a5c3fb026ce403fe1d54fb2f16b1d9012b2afcee7de678ad7de3de770c9ec0fa2b9e48f15a0a6e9a77db1702e94cf644400c8","ssdeep":"1536:C8fKZ0gdDGst00AQVWFiC70egd23OiOybJkbUcA3S/VX1xmeW0gQzbf0u8VI64v:5fDgIuiOnbZAuVX1xmhub8Cv","tlshash":"e9636c9b37055937ba1b30a9a9ffa608a036275ede080950f5a4d4b521fdecd3067f28","first_seen":"2026-05-21T20:24:46.824918Z","last_seen":"2026-07-27T03:48:18.727157Z","times_seen":4104,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.395Z","timestamp":1784390119395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/css/all.min.css?ver=5.8.10\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75728\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75728,"size_decoded":75997,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75728, version 330.32636","md5":"44d537ab79f921fde5a28b2c1636f397","sha1":"b2879f9e1d0985a96842bf7f55a2b2cc4c636d04","sha256":"3d1080625d3030e88357b3ac9aa377dcec23f1b529c4ad03f7a9a435ccae04be","sha512":"08836d89ba7c7b7645c9de36e2e856cdc31fbb1c3a4a83045848d772720b98d352fb11182471161ef07d01739953a6320355ffecf25a06881bb1111ba02a73cb","ssdeep":"1536:sFUt//lLi8pq0MWeLhkzipMZ4LbW+nNjzw5ytuNCNbqg6g4xNRrFw:99Zpq0MWGhqa/HBnlz8ytuNYWg6ZRrFw","tlshash":"32730235ca0b7289b178227b3cb16645b72981c25e5bc4529f6fd3acdb0518c35f07ae","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-07-27T02:09:24.377818Z","times_seen":10468,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/accordion/accordion.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.628Z","timestamp":1784390118628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/accordion/accordion.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 241\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":241,"size_decoded":506,"mime_type":"text/css","magic":"ASCII text","md5":"e567e55a06480e8d5b3d4b784a65d3df","sha1":"4f599ab65d6b8bb197e89775841f3d270a5fa2cf","sha256":"d06f78f45dc20d6088b6529ac4a33939034c8dcfe123b55dc23a8678b773db0a","sha512":"7f606dd4c2c1e0f143d074db9932ea963760552b1b29db36e7bb515dd7d5cb256992e45f5c6959edad1242f3f14bfce052df68dacca37e89f391d37f5ee1cf18","ssdeep":"","tlshash":"e0d023577b770241793ed9451f965f6c20a541c3405c743cb903734e9f59f506f8255e","first_seen":"2025-07-07T20:41:54.587548Z","last_seen":"2026-07-18T15:58:59.330821Z","times_seen":7,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/trainings/trainings.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.676Z","timestamp":1784390118676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/trainings/trainings.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5898\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5898,"size_decoded":6164,"mime_type":"text/css","magic":"ASCII text","md5":"45b36fdea7498615cfe0b4c07f86ea28","sha1":"63adf5121669403050ffbae5c102df12884873dc","sha256":"17150aada54059f892bfb366693a4b4e91bfb3d3e6523fd8ecd74f8fe955e35e","sha512":"284bb0bdfdb9d6624779e141be3eb9902c3e333b65fae9cfc98a2c432563e0d904553bd203e226425cc99ca4275a03decbc1c031fa5322ec0e6ee9421f85a321","ssdeep":"48:QTYo3Bq00Y0uv81h8DyHfyL3KxdNe1NSp/aeb7OHkonqJA0qYFjDkmF14t21nMvk:8BqQ0ueiDyHfyexdg7SZaeGkD8kZ","tlshash":"33c14b42a5973707d93af0ec576e3a446aca6043630fead87f76204e8fcc2a1487567c","first_seen":"2025-07-07T20:41:54.634513Z","last_seen":"2026-07-18T15:58:59.462114Z","times_seen":7,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.325Z","timestamp":1784390119325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89444\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89444,"size_decoded":89713,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 89444, version 1.0","md5":"12818ed760f44ddb76120723ce89a2f8","sha1":"dd73c07bb44c886ef75b5f11f974d367992f38a6","sha256":"772a939fe72b662d152060e58932d5a64a8eeb3ec32c39335da803ad4e5d4ca8","sha512":"a717c7abaab97768f2f59847caffce3259d3e1e794790312be1c1caaef71579f2e0d26e0c950a1a0cf7cc9a3ac71b9b3bec3f5ff1f2b8033864da266e59c57d2","ssdeep":"1536:VktufpOuX35SZEsQYm7/TgwcpedYUPa5sunirAJIBaEEVgI4Ya2hJ+IA:Vkt0LX3EKfR7coSjBMAaB+g5u+D","tlshash":"089302cbdad296349fd1f36a26e5a1bf8ac62f04281e4345c650c74f742e0d4a6b8fd0","first_seen":"2023-04-07T03:19:52Z","last_seen":"2026-07-22T06:43:15.121886Z","times_seen":517,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/fonts/fontawesome/css/all.min.css?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.626Z","timestamp":1784390118626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/fonts/fontawesome/css/all.min.css?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10724\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48641,"size_decoded":11036,"mime_type":"text/css","magic":"ASCII text, with very long lines (48456)","md5":"fca9ae3052dd3cdb2ddb2646ec5a62c4","sha1":"7f8648bd7fd311e6ff4e2c3b7f5a284e9e62573d","sha256":"0200048e9d4d4a49557eb863165a49423fff5c451d213019f677df774f640008","sha512":"da6e60e53d240ed6cc24c884da2d604dc60987f8852fde8b1924b8818345c089235e31274b60c7b1f470b8f9d29aaf56a01613bd2c615314a910a2d1e2e54e6e","ssdeep":"768:bTa31Ezd2Q6tXU2Wf9kHt/CMzj3RCgwSxS8/PB:bTrzdb6tXQl2sgQZSzXB","tlshash":"15230bb8e54c41d5a731c04fff82b2b861baf73ce5854d95f00e691c2ad26a811c5fba","first_seen":"2025-07-07T20:41:54.5772Z","last_seen":"2026-07-18T15:58:59.355187Z","times_seen":8,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.738Z","timestamp":1784390118738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4238\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12987,"size_decoded":4475,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12987), with no line terminators","md5":"6ad9165b167d54947b37f4b9de75ab39","sha1":"4c02f66fd8c26141450e310d6786f50f99913dd4","sha256":"eea0b9621509f98be77c5af1e9b5c952a675bda2b27c419876364017069e0c19","sha512":"dae93e3fe93a1e04d65bf1a64dbe7ab4f58938363c9b0d519ddcaa4608c0beb4dab995db8b115e174d8f2b2a539f5dadb0b60d79d96110477cbef6b172c1af9c","ssdeep":"384:4v6d5sHteQkJmVUrITdnMrQk2Y18e2pZN5+:6Es8QkJmmrq79YCe2pZN5+","tlshash":"5f42e9943a6579b307b362f280ef2342b2b6385ee44bc6519650cde45c78ccb61a2f27","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-26T17:57:55.723469Z","times_seen":2874,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/admin.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.620Z","timestamp":1784390118620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/admin.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3524\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26468,"size_decoded":3835,"mime_type":"text/css","magic":"ASCII text, with very long lines (4516)","md5":"fade8913100c7716a2c2ad26efa5ed93","sha1":"981ceba5f7dc0f100697efbfee88e79b5808dc13","sha256":"ae1b58b7fc4776ccbc63b34902bf5ee9481339e57da043f3616ff90d9d12ed0c","sha512":"2e83588189525139bd9621175e3415606ea560e6b3ea9c7aeb94596a0377c6a064282324cb5651a6c4663792b666c707c449e3ad634aab854b02efc54ce8cd71","ssdeep":"192:9zrn1FEFYL7li3liX/GtCsgg+FFFmyNFm87:V5FEF/gPFFFr37","tlshash":"74c28b075a3f1c657426147fea6caacc5f915153f22a9ce4b8d1cc2a8b4f02e7b4217b","first_seen":"2025-07-07T20:41:54.619967Z","last_seen":"2026-07-18T15:58:59.408445Z","times_seen":7,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.721Z","timestamp":1784390118721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4406\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11224,"size_decoded":4643,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-27T04:15:28.171438Z","times_seen":85834,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.179Z","timestamp":1784390119179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ricardoborgeshipnoterapia.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:53:51 GMT\r\nexpires: Fri, 16 Jul 2027 05:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208888\r\nlast-modified: Mon, 08 Sep 2025 18:04:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34236,"size_decoded":35049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34236, version 1.0","md5":"fee1dc1edf94921126077c4a0034eadc","sha1":"427949faee52b0848aacce8dde79939e4956c3d3","sha256":"50cf7d32c18e1001749b51f1565ef745bc0687b0297b2b13465ed577cc20a8ff","sha512":"ee1a28f6b6f05df9913a7c9a6e006c4728a2d818afc3c3cce2c99dc51c71436ea415eee46b6dd82e83cbfad52713d078878ee92be1db8db3d132c7d631119c13","ssdeep":"768:yJ4irnFQpWzt8cJdyBSWj2rXnX+GyOMPyr8lWpreMqDGfP2/rTJa:ydrnFQOBJ8Bz2rH+lKYlWJtqXa","tlshash":"71f2e19d0b61d12382642aa3f409501f1f47b5c800efdf6bb05d54351caa25b6eabefd","first_seen":"2025-06-02T17:58:00.99575Z","last_seen":"2026-07-27T04:12:09.072423Z","times_seen":20240,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/portfolio/portfolio.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.664Z","timestamp":1784390118664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/portfolio/portfolio.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2525\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16729,"size_decoded":2836,"mime_type":"text/css","magic":"ASCII text","md5":"f3c6a633af0f4eee8dbd7b6f957cc193","sha1":"60b7a2e5b67fc8a91a35e44ca3ad4834fc4a654b","sha256":"75eebf2352384068025ec77e582d5228dfa97fb659670124b959652143f0c2b0","sha512":"c9960662bbba5892d49ef507d42a26e3f5182f05aaa4c173f1069901688782906605e512d4dc3afada4acc80f9a3e86debfe00f6a9d8d88185058c89e7392518","ssdeep":"384:86XNX/XQXtXtqrjrOPraPLPV0b7X4XkUrxa1vyDBkrV5UqgKXWXjXnXgXkXbX7Xl:86XNX/XQXtXtqrjrgraPLPV0b7X4XkUB","tlshash":"38721077a37f1e046bcf5d2d166936812f18f0f3720ab99a79c113485f88e969492b4c","first_seen":"2025-07-07T20:41:54.588267Z","last_seen":"2026-07-18T15:58:59.430979Z","times_seen":7,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.4","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.684Z","timestamp":1784390118684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.4 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 776\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":1041,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-07-27T04:13:27.804708Z","times_seen":39494,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/owl.carousel.js?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.741Z","timestamp":1784390118741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/owl.carousel.js?ver=1.8.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14581\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64152,"size_decoded":14819,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7ca2e4681b1248297630b778ed7e8491","sha1":"f1e2da6325463d98e5143021c6a4375b889e2125","sha256":"ff773d1106f72bdf2c3e61801b73696bba45e3d592a5d5d0cac4cb41520149e7","sha512":"5a375d5726267466a9f38fcdd7b55dbc2aa250074bff2c28e15e237e1bf0237d24b09153aee112a60ce5923935d2cd8e12860ba998676a6843efb7dcc319318f","ssdeep":"768:ksRFVIX4Bo3orUy41P/a3dKiqTcjZppHwRJRDN5Wvu1UmJ1Q:9S4ZC6jZp1wRJRDN5Wvu1jJW","tlshash":"7853fe0967fa1529c16730785f9f52057239850f990aea1cbdac93c8afd443846beff8","first_seen":"2023-03-12T14:05:05Z","last_seen":"2026-07-18T15:58:59.388416Z","times_seen":50,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/css/dist/block-library/style.min.css?ver=5.8.10","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.681Z","timestamp":1784390118681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8.10 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:48:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11426\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80574,"size_decoded":11738,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33376)","md5":"43c4bc05b5e3b0a6684a7c3a52e63590","sha1":"ed6d95d525a710a82e8b8583e9ba7bce3b2a4722","sha256":"9110fc122dda3067c424d9b8ff7747e2030b0bd9298f69a3683d399ad3373a6a","sha512":"661ce465d60c6c6d5738c9a7e948985772e3cbfed985d91d704121f77b91e7cdd43421217fa9a19dba6d2f5ac68ad4887dce1cede825395966587f29c8bace79","ssdeep":"768:LX1XvTz4EkA5SOV+LQ35lqCXm9XhUnoeYKiFzL487Plxo66F7UJGqUzu8ZZ+ucJ0:LX1X7DkA5SOV+LQ35S9fBFrS","tlshash":"3673e99007b4ccf835bfa73a8e5de148a517d942c54abbe6f0b2d190728c9455ee3b0b","first_seen":"2023-04-05T08:47:51Z","last_seen":"2026-07-27T04:04:06.145339Z","times_seen":7143,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/elementor/css/post-4376.css?ver=1632245799","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.695Z","timestamp":1784390118695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-4376.css?ver=1632245799 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Sep 2021 17:36:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5245\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5245,"size_decoded":5511,"mime_type":"text/css","magic":"ASCII text, with very long lines (5245), with no line terminators","md5":"a539ee365f4972dc022af6703cb3cc8e","sha1":"bf29302bed8b389cc937c0e192d21ffac0e58803","sha256":"d5387b834283a77540c26089200b676bc989eda384130d58effe0d98c983c3c9","sha512":"9e0401a17217d47e04169031f89d212c19871140c9648b57c3a50cd3703539823ba04fa5669c572a7aa1192955af91f70ee26fbda192cb950bdab2d3f4f49564","ssdeep":"96:SiLAnBRvxuzaFMUiqkrcuLuzaFMUi2HC1X2ZZgfN1E6clZLAnHRvfuRRNORv3vdl:R0BPuzxqkrcuLuzx2HUX2ZZgfN1E6c7u","tlshash":"d1b1d15a3d472518706f725b4033a2cc6a244ccde6a976e6ea7c6433f436eb133f1912","first_seen":"2026-04-10T12:06:50.956045Z","last_seen":"2026-07-18T15:58:59.33356Z","times_seen":4,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.736Z","timestamp":1784390118736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:48:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6300\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16470,"size_decoded":6537,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16322)","md5":"762d59fdeee92ef4463539c532d5888a","sha1":"de8bf80d48ad6a0deb338be442df963691ecd18f","sha256":"da81a69ebb55f38c50b06ba18862edfc60a98904cf7ab25a1ee654166a8adfcf","sha512":"348aec12ddd60b156ec7750cf07faa109db3b2b25cf9d07cb713a9a3200266da85d5a58168abce70eadc870c5b80670a661250249beaf68c2a5e9f6f7ce4605f","ssdeep":"192:wtPfqyePEjWePwydyCt3kP1oAGVTbd9KDD79q/yu3kqITOmrvcJT0RL+rV58jYI3:D1PEjZPwEt35AqTbd9c4yu3b3ZrVDNzS","tlshash":"a972308dbd99f4510763a17a522f840ff3bb1a96b45f94e0d12ed5e0ac7888f402be1d","first_seen":"2023-04-05T09:20:27Z","last_seen":"2026-07-27T04:14:13.292423Z","times_seen":4220,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.753Z","timestamp":1784390118753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1801\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1801,"size_decoded":1993,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1801), with no line terminators","md5":"4d43b2fcb5ef3e6afdcd539f46148514","sha1":"0ff4d5160beb004c439b20c6343044917c629d10","sha256":"9aa9bb8be2b834059533ce5de7eed3a662ad3d3e70643bbe5f75265075e9bd28","sha512":"00a0c46b067c1609d996bd438d6ef3342a6cdd6323fc8b8c4853cf4a8c2ff983b98e77545ab3b16ba2a8d0e58a2d35ec77b5765ba172f6532b8000239f06e396","ssdeep":"","tlshash":"9031e1187181b22dc66354b1c10b53099232ac751532a168b87dd8e6bc68ecc6677ff7","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-27T04:15:28.203632Z","times_seen":24804,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/20210914_160443-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.831Z","timestamp":1784390118831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/20210914_160443-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30873\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30873,"size_decoded":31142,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, manufacturer=samsung, orientation=upper-left, datetime=2021:09:14 16:04:43, GPS-Data, yresolution=198, xresolution=206, model=SM-G950F, software=G950FXXUCDUD1, resolutionunit=2, width=0], baseline, precision 8, 800x476, components 3","md5":"8cf69121e8bd1fa73e64b68dc8443fe7","sha1":"ac1648d0c93971e9aabfb6279022e71e2fcc8635","sha256":"e9077e1f5ae3e110e88c797a46c213063f51a973786a8c3d09483a90fe7a0cac","sha512":"b9f6b354d85463424307b8e1bccf36c61a5ec2ea6e6ed17c7c5dc39f877f708ac6d46f185409c0c74c680cf5efdefb23a65b206a7f1864988bfbee7fac7f57a1","ssdeep":"768:Wi9PoOF12Wlp90g+W5aZFvbH848KFX+DM:Wilo6HBaZ18ixJ","tlshash":"0fd2d04f6e630501e172eeba7383079466b8d8b4ba831b2b247484b05c644d4fcfadd9","first_seen":"2026-07-18T15:56:07.617798Z","last_seen":"2026-07-18T15:58:59.468503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/calendar/calendar.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.635Z","timestamp":1784390118635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/calendar/calendar.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1873\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1873,"size_decoded":2139,"mime_type":"text/css","magic":"ASCII text","md5":"0556cf2f9993c74c58e5fc85e863f570","sha1":"bf52d20144de951c34eb70ce395f67be01e1656c","sha256":"183340022b221643d1249d5504a8762300425fbeadf6b7265085c6b7724cb614","sha512":"08338714490fb72a95407847823a406eddf780fe20b4e212cdea03ec99afe2d6a8c13d75c7df256ddbaa35ba0fa84d5af57038d4bb97c17128cd17684814aa98","ssdeep":"","tlshash":"fe3189438b62399ab41ad138cf6d9a55bf159803055ffdf47d4d3acc8f490918089fac","first_seen":"2025-07-07T20:41:54.633068Z","last_seen":"2026-07-18T15:58:59.423726Z","times_seen":7,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.754Z","timestamp":1784390118754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4879\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4879,"size_decoded":5071,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4840)","md5":"29a653dd2d07b765985e7780ca75a45c","sha1":"a60afe9861188873c506fb2803e9090a959f4966","sha256":"d4666d95e2a69b762241ad7257fb0efb87be752836a9d3ef36ec132ba5e8b271","sha512":"086da20b7644bcfc5d6d27517a77a3c2b5820fa9db35026757083b7c804073c4829d8cd7715cf6de3c6ba9ec851cb0f9409bc06c2069eae4f53f93e7e5b70859","ssdeep":"96:BLNt0jqf9fzsoRb4Y7iylCjNVobVDPkqf8kxy8S2:BNCjw9fxRb44iLN4FPkyzS2","tlshash":"69a131d41b90fc2735e135c8a11aa735652fd0337d1bb8c2fa22dced58e8ad187a9931","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:50.996615Z","times_seen":113,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C400i%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700\u0026ver=1.1.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.624Z","timestamp":1784390118624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Open+Sans%3A300%2C400%2C400i%2C600%2C700%7CPoppins%3A400%2C500%2C600%2C700\u0026ver=1.1.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Jul 2026 15:55:18 GMT\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33698,"size_decoded":2914,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0f36bbf2e573efeca3b1d727e39d2f8a","sha1":"301aa96f6bf81c15a9845570d6d36114550ab865","sha256":"612b772296c338e918db0e470b1cce8e8fa191b8f747045a42e5b2781d3baa1e","sha512":"31f4a4d5e53cee45ef1e7eaf1ff3622d2c86807656dd843249856df04b9bc2cbcc6a54a0ab67665d9d85f4db28ee178b119ad477c5e2d4099d85fdccaedeeb3d","ssdeep":"384:+POmxG+CvxoqY49bjyAYqY4tjXqY4ahhqY4tU8qY43:jiIosL3Jbcg","tlshash":"09e24ea1042b645067431dd233ce7e30ee0fa2657044d0766bfe4b9aeedad6963b432d","first_seen":"2025-11-24T22:57:51.794299Z","last_seen":"2026-07-18T15:58:59.435283Z","times_seen":5,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/mailchimp/mailchimp.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.660Z","timestamp":1784390118660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/mailchimp/mailchimp.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1323\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1323,"size_decoded":1589,"mime_type":"text/css","magic":"ASCII text","md5":"68dd2fc3815c20a9a98baf707121ee95","sha1":"01bb2e309db43c351f234d00576cdaa0fc752441","sha256":"59cdef367350d4b27486f646f0f2193ba069eb4c99c78eaf28b8c03fadb3e230","sha512":"212b61d68fec39a9a7d83cb66a5ebe32b675ef5126773d540f144b79db1d538fd12d327a8adee497d1c77d24b0b5bf3e305a9659b8dc480621c6b24e45188498","ssdeep":"","tlshash":"40213641b5231c48743963a91bea4709530522dfe40f8ee4bfdc34599f9cde26578ba8","first_seen":"2025-07-07T20:41:54.608065Z","last_seen":"2026-07-18T15:58:59.387415Z","times_seen":7,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/elementor/css/post-6.css?ver=1630264671","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.689Z","timestamp":1784390118689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1630264671 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 19:17:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 946\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":946,"size_decoded":1211,"mime_type":"text/css","magic":"ASCII text, with very long lines (946), with no line terminators","md5":"c3b12b1a5151826f24129609f15d83db","sha1":"66c82c0978e9262c5cb14ec5177e4c5fe703fed3","sha256":"c96723305d5f61fcdc2d3971965a796d14b49e620f3148020c6f8235b9341110","sha512":"7a2b97247da2ea781815104c3523bc8a07e75b76ecf74053fbe41a2c838e1586a9b7c93809780742f4190b8e096dae742f7ca63634a9e3bfa77e07a6b4f4b1eb","ssdeep":"","tlshash":"3c1138457923e032d077053f92c3e02c102cc45a519fc9dfe41d8749f9beb0a6218943","first_seen":"2023-04-09T08:23:36Z","last_seen":"2026-07-23T00:12:44.774111Z","times_seen":169,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/select2.min.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.699Z","timestamp":1784390118699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/select2.min.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2233\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15091,"size_decoded":2544,"mime_type":"text/css","magic":"ASCII text, with very long lines (15090)","md5":"94622e3f4c0964caa0bbde5b80516f36","sha1":"27eac00ba8555e7e0db4ad0eb245585851556aec","sha256":"7c2bec174c6c9c2c65975c2c6a13d04d23aebe0851fecdc4522be0bee782fa21","sha512":"4b5464102ba8946750583d280a69b1043852cb8d7679354a9acf59b1c7c78c14f74e2558cfbd280f502034cfc5ca552a67453ff6d0e9fd7b95d458d9a14a1509","ssdeep":"192:pL5u/nTfc3aqWJHeQ9CPjOtWlUJKLJcH9tPOF:3u/TfX1+Q9htWGSJcdwF","tlshash":"5562aa25bacc2235b0bf8e7f6cf274946739dd5fc4111b9ab8e9e554c8e04540a8b60f","first_seen":"2023-04-18T21:47:45Z","last_seen":"2026-07-21T18:03:49.453152Z","times_seen":324,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/js/script.js?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.749Z","timestamp":1784390118749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/js/script.js?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7143\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7143,"size_decoded":7335,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dd29ac12b135e611b6701652a536fcbe","sha1":"4c35ad6fe9e4310fe2886ee826f198caf671eb0f","sha256":"f2027bc9f305fdc6846e5f6121d1c3903ba98a4ad07bde13a928e062189d5499","sha512":"f9bd69a752bfa841f45aeeb02076f9e3d332d3d4ab58fda21cb76cfc61b788b60ba06df91b663ecc60549efa74f148d57f40c49adb32770b9f7a5f3d8b81e1e3","ssdeep":"96:I8vVMEqwMkHeFqNEFs+1LG/EpEoyYtJMuVmO5NLHFm/B8yVegpoyIfALXzbEis6+:rYB3Y8LGlsJqqHFm6yVeguyEwLhO","tlshash":"10e10085f7ad2cb314bb316a4d6e30cd561c15728a4229befcbc50645bd827f3632e29","first_seen":"2025-07-07T20:41:54.604831Z","last_seen":"2026-07-18T15:58:59.466928Z","times_seen":6,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/20210202_091406-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.832Z","timestamp":1784390118832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/20210202_091406-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 20:59:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43696\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43696,"size_decoded":43965,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=samsung, model=SM-G950F, orientation=upper-left, xresolution=134, yresolution=142, resolutionunit=2, software=G950FXXSBDTJ1, datetime=2021:02:02 09:14:06], baseline, precision 8, 800x476, components 3","md5":"58655ef0897b6087c48b830189573851","sha1":"4ea87a11e84becf3f84306859e1dd4cc5fd496de","sha256":"94411cd6c4db72728ac728cb33ce379baf72e2269377eeb46684d3e11f51afa1","sha512":"80d1e3deb7ebcc2d63949110d194e7128c1fb97c8dc41cb26e6df1f3881ee5dd418c66b94dc0859a4e422f99f41615db23da3b319a4325492c1747e9a7e565b9","ssdeep":"768:qEdx3mGRUCetxZmSPNHqheESHh/XoKQz376jkv51sRCXXz1r1wUMtLtWw4Z8jh1b:qoxbvutKhepFSyQvPsRw1BwUMtLtWwsS","tlshash":"7d13e04b7ece4fdbc94f5834496a1f8c8ad05dcc72ac7902d893860add8b3e40c95ac5","first_seen":"2026-07-18T15:56:07.626484Z","last_seen":"2026-07-18T15:58:59.442072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"104.20.20.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:19.336Z","timestamp":1784390119336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 00:31:15 GMT","end":"Wed, 16 Sep 2026 01:31:03 GMT"},"fingerprint":{"sha1":"C5:61:CA:02:96:1E:EF:74:7E:9B:A1:6B:79:5D:8E:98:E0:B0:11:5F","sha256":"A3:82:78:47:4C:CA:89:30:69:57:2E:C6:F6:12:67:FC:FF:88:93:99:36:CF:66:74:3F:25:B9:49:A7:C1:05:2A"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXCuSDd3YPsmQXz0dtJ5TvI%2F7o%2BAfOdgigLa%2Fiivasf3Id%2F1YM%2BUzRM3vokndT1Pv9jgOKS1Q8WZSjLdRS13e0o5IDokruEM03SgvCYmWld9jNwPTtkaGeddOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"551efc5187c9f500b4e394155ba03720\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nage: 7917\r\ncf-ray: a1d2ab85dca9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":1346,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"41b7ed0cbe240173eea85148fcba633e","sha1":"39acd5fe099974486a1c9ba11ba0fe7be6bc97ca","sha256":"274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad","sha512":"1ee1d21b138a9f55f823b93d809b3bc58453ddfc3b3ee4d00a1010bbd4ec296546277c6777819cfb744c393ba93fe7578b60ccf0259fd17901f4542714d6c06f","ssdeep":"","tlshash":"c701448bf415382d9673172434e93d89d87e93609c402730b28f62e746c47e75b07b95","first_seen":"2024-01-05T10:14:09Z","last_seen":"2026-07-27T03:48:18.739759Z","times_seen":47562,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/call_to_action/call_to_action.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.637Z","timestamp":1784390118637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/call_to_action/call_to_action.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1415\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1415,"size_decoded":1681,"mime_type":"text/css","magic":"ASCII text","md5":"b9c29ac08dee8d09b46d20bb6ff8f5e9","sha1":"d5cb30b7a898eb9af0839a7d66e733fc7250748b","sha256":"8c26133bcedfe12d3e149f0d28a7da97f6d9997a0d0a1c2f2bdc3c435d70ddd3","sha512":"65edb37c54436e7e5b3f0e8b65f8e0c3cf07b590f9a4ada7027c8d6fce515afbaaeb34e95304d89e139aecf2bb1589039095a9c8cf65d15129ed54855f451b08","ssdeep":"","tlshash":"7021478bb2723e7ca40b76444eab4651f234f677411fcd9b3849ad188f9c0e462c694c","first_seen":"2025-07-07T20:41:54.592461Z","last_seen":"2026-07-18T15:58:59.395437Z","times_seen":7,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/heading/heading.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.649Z","timestamp":1784390118649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/heading/heading.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 266\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":266,"size_decoded":531,"mime_type":"text/css","magic":"ASCII text","md5":"01059d11f607c8782061a43220b6aa2e","sha1":"8510a6b579700a90400cdb61907c9544b9bbba0e","sha256":"a79f52456f0d967c0db55fcf95488211e9e9615867ce27d0834982cf69641364","sha512":"c24cc6e0ef5ab67d0b3393f76266dd3a12028238e43eadda59c0a41f434b67d95e6a08a514896cdd263db9de696a3c8b85e8f4ce9329e29655eee40be97a54a4","ssdeep":"","tlshash":"4cd05e6025730408b80664054fd903a83594c08b598af9edbce624c95f8e8c4d9716fc","first_seen":"2025-07-07T20:41:54.598399Z","last_seen":"2026-07-18T15:58:59.432758Z","times_seen":7,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/owl.carousel.min.css?ver=1.8.1","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.705Z","timestamp":1784390118705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/owl.carousel.min.css?ver=1.8.1 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3927\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3927,"size_decoded":4193,"mime_type":"text/css","magic":"ASCII text","md5":"66a5123942d78dd8cae79023d205e3d0","sha1":"6973d7c34dbd247e0bab71de20608eb5c2537874","sha256":"e24b5e7045172b1c079df650592d5e7db7728b1eefe3958ee4f43762d256879a","sha512":"a856aa24a8c5132861f6b4306c6fa2b4c7d2a1b3e0de8ec6d0016f411d983991543c470c8c84c4f6d3b156ab8914ac56d1fa779fa74289de9b9c6ae3779fcb2c","ssdeep":"","tlshash":"9a81abf435ba050e380e839419ae9b76357d8891d80d8808e6f7570a9f8df6d211ff6e","first_seen":"2023-05-08T23:44:36Z","last_seen":"2026-07-25T14:49:15.318589Z","times_seen":81,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/fonts/icons.css?ver=1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.612Z","timestamp":1784390118612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor-stm-widgets/assets/fonts/icons.css?ver=1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:42:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6456\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42874,"size_decoded":6945,"mime_type":"text/css","magic":"ASCII text","md5":"007687a6c46a43c3e77f9c29f5616e8f","sha1":"cedf1157c83b7c6a37846634da879dd32ec8ba2d","sha256":"9802188e74edfb7fe3caebc74a59497f8ced76a990abe3cf9ce17cc445af71ea","sha512":"e9a055b1a9ec5a35ace12c51bd93cadae49e93093fa69b63d55e5d7134f3196cb00924039671c7eb8066cbc3a5536ded1d6712707dd8d9ad94f5d0d9a53d025a","ssdeep":"384:DiR6ALo5qSszvk7tj0t3OYjfpsBqn7Ll1G:D/AORRQGqq","tlshash":"a01371f1807e28a46715e0c43287b724a748f23d85466c7ed6667ccdead2a19c3c27ed","first_seen":"2025-07-07T20:41:54.629276Z","last_seen":"2026-07-18T15:58:59.417745Z","times_seen":7,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.2","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.764Z","timestamp":1784390118764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.4.2 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11203\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36245,"size_decoded":11441,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36206)","md5":"4027ac7a00829c328071a63c63890c44","sha1":"ca324f7392ea2640b83f7483c7717746bfa69d01","sha256":"99e3aa195d7119c0076107da5a35ff5d6fef0ee8d44086707a2ae9a419a4a84c","sha512":"91fdec575e7b4769812c1c6e4b125655df77740f4e99a41e737daab0feb4b2b92ce7e983388499a875e6267539b9b770e8fd3047b6a8f93861472e81e5e400ae","ssdeep":"768:ORxxDvxXz/mlVKHrVehz8gMGQEAzDc5G5TSebsvZiVC+WLOeQ5oedXLf6lTv3x+d:ORxx7xXzJrVngqEAzDc52TSebsRiVC+7","tlshash":"e0f208653193d46a529b48e7b033021cf7660ed9f402b45eb6bd6ce6a5b0e8333767b0","first_seen":"2023-03-07T12:11:18Z","last_seen":"2026-07-21T14:47:50.984596Z","times_seen":117,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/Alta-Performa-se-370x193.jpeg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.840Z","timestamp":1784390118840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/Alta-Performa-se-370x193.jpeg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Oct 2021 13:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12297\r\ndate: Sat, 18 Jul 2026 15:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12297,"size_decoded":12566,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 370x193, components 3","md5":"d3c774544e32b29140a9f038447baf9e","sha1":"28268ca823c12d917c1d7fc585ae145d770e6af6","sha256":"2f988097ac74b0e8a51708a241d785823f492db67b4881fb0fede08c15ec4b79","sha512":"2ef5fb62d38a902ddeb5f39cd6c2babbdfb66e871c61142c1b496c7cd60a5f7bee90c6dfaaaf26075ede562802b7900567f9dc5bcd538325533e95083ee400d0","ssdeep":"192:/3O4h7tItcl3rZKmApIdJf7Olq7vco+KpOZXxzD5wWRynhQM2yRngbEvAudb5d:fO4hAcF2qqM70o+CcxCnhNpgbEYK","tlshash":"5742cf2a5f22c3f20225fffad96647c6e9209e16ed4116409c71d4d2cb10acb949ea7f","first_seen":"2026-07-18T15:56:07.634343Z","last_seen":"2026-07-18T15:58:59.429205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":218,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/2021/10/ATENDENDO-800x476.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.834Z","timestamp":1784390118834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/ATENDENDO-800x476.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Oct 2021 21:00:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70731\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70731,"size_decoded":71000,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=samsung, model=SM-G950F, orientation=upper-left, xresolution=146, yresolution=154, resolutionunit=2, software=G950FXXSBDTJ1, datetime=2021:02:15 17:12:05, GPS-Data], baseline, precision 8, 800x476, components 3","md5":"b941a20ec03f053bf59b9a9486c437bf","sha1":"5a5d8d7b001970f6e56705df793b43b8f2e74ec2","sha256":"480dcf34141629df55f7e7ee549ed9109a62e47ee0aae04e7c9ce9c0d4bb6504","sha512":"127095d571028f41e3802ac71fa8785365af1db4e77c022b2a3e14ef81cf6409fdb891b0e844533821fac973cefbcb70754407a84463da9aef7a28415208fce7","ssdeep":"1536:WIoN2nFtmIQzKOrRwAL3Gi7GDK0his0yqXD0TixCS:LptmIQOOrRwc3Gi7GDK0gyQ0Tix","tlshash":"1d63f1a61d92db26d8017eb4b79cc3d982da07a971e18f035ab43724bc245c4ddc6afc","first_seen":"2026-07-18T15:56:07.636081Z","last_seen":"2026-07-18T15:58:59.415045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/plugins/elementor-stm-widgets/assets/js/scripts.js?ver=1784390118","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.724Z","timestamp":1784390118724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/plugins/elementor-stm-widgets/assets/js/scripts.js?ver=1784390118 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Aug 2021 18:42:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5911\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5911,"size_decoded":6103,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9d5580146c88e5a99d094ece46ed9d32","sha1":"ded0959140df93a337638c72fb47edfa1ff0c08b","sha256":"368f12ea08f0cbbb4c4d2bc8ea66a6dbeece66183ab3935f9e702a9ac4942743","sha512":"9f2faa1c47457fa7bd5483e8fdc1f3c6cfdba1bbf4ef0730ee935212cd19eacbe012ef06ca35654dd5c2a004156fed9b3fa7ef5e5d60be9bf9a005e59f7670da","ssdeep":"96:isaZcqBbNJB34yE5idR0IRCRpRuCYs5RDarAkRagkg2j6F3FpIRjzBJiTTwd4TdT:ifZcqBbNb31EARLRCRpRuZs5RDar3Raq","tlshash":"76c1c04a7bfe70525337b03a6aefb159b237040355488ac1f8b812b53f6486a65bcdcd","first_seen":"2025-07-07T20:41:54.594367Z","last_seen":"2026-07-18T15:58:59.400164Z","times_seen":9,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/uploads/elementor/thumbs/home-pccesqirghga8rrv89an3h5xt99jytwoaml5janugw.jpg","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.825Z","timestamp":1784390118825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/home-pccesqirghga8rrv89an3h5xt99jytwoaml5janugw.jpg HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 29 Aug 2021 20:14:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27098\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27098,"size_decoded":27367,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x400, components 3","md5":"7569f031c7c839ed26ac09fede926c18","sha1":"fb793a2174e8bdf7762de7043fd997f5f9914218","sha256":"2380270a4f5d8a85052e04bdf7a21f8a06372735eca7a5742a0e46754e5450e7","sha512":"82d88a597225ad510dca30b86dab503de7468028e7daa2647e6e391ed45a34ac5ee50e16e05b7e325ebd3f6b721c65a789a4dc033edc2a6ed4f7c6d866ea4e4c","ssdeep":"768:vALKl2VD9+L6m5/5wARPVs2isFJ3DLF31v6:vAmK9+j/5NVs2dfFJ6","tlshash":"d6c2e129c297ebf8166fbf4ee00eda1e6f1f48d55480d589623ed080c414ee62c6df45","first_seen":"2026-07-18T15:56:07.63841Z","last_seen":"2026-07-18T15:58:59.454647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ricardoborgeshipnoterapia.com.br/wp-content/themes/betop/assets/css/widgets/testimonial/testimonial.css?ver=1.1.0","fqdn":"ricardoborgeshipnoterapia.com.br","domain":"ricardoborgeshipnoterapia.com.br","tld":"com.br"},"ip":{"addr":"148.113.211.197","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.670Z","timestamp":1784390118670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ricardoborgeshipnoterapia.com.br","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 05:35:35 GMT","end":"Thu, 15 Oct 2026 05:35:34 GMT"},"fingerprint":{"sha1":"93:BB:DC:E2:2A:5A:89:4F:81:02:DF:6F:25:F0:99:00:97:7F:99:AE","sha256":"24:AE:50:C3:BE:2C:CE:E9:6F:A6:65:D2:C2:DE:47:E3:3A:7C:EF:35:98:44:FE:71:39:6B:0C:6F:67:02:51:21"}}},"request":{"raw":"GET /wp-content/themes/betop/assets/css/widgets/testimonial/testimonial.css?ver=1.1.0 HTTP/1.1\r\nHost: ricardoborgeshipnoterapia.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 18 Jul 2027 21:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Aug 2021 18:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 777\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":777,"size_decoded":1042,"mime_type":"text/css","magic":"ASCII text","md5":"3bb24139586e19cf11c63938850676d5","sha1":"74209e025d525ab57e526610a80d289eb1a76583","sha256":"4ab892607acdadb00abed040d0ca10f51a89cc9039db0a7b6909c2355d2438de","sha512":"9d6718df5d5bc6306406a3c21bbb30d7e04127881f2f764004fb4323f5dcae8f6b4a0c37158a28347d6e0b9401febc461f141969ecb4d2f55181d6ea0571dfa7","ssdeep":"","tlshash":"b80149627b3b0100650f717dd30be245572068c39685ce38b500b68f9fc59b0bb23e4c","first_seen":"2025-07-07T20:41:54.611084Z","last_seen":"2026-07-18T15:58:59.390237Z","times_seen":7,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"ricardoborgeshipnoterapia.com.br","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins%3A600%2C500%7CRoboto+Slab%3A300\u0026subset=latin-ext\u0026ver=1632245114","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ricardoborgeshipnoterapia.com.br/","date":"2026-07-18T15:55:18.712Z","timestamp":1784390118712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Poppins%3A600%2C500%7CRoboto+Slab%3A300\u0026subset=latin-ext\u0026ver=1632245114 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ricardoborgeshipnoterapia.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Jul 2026 15:55:18 GMT\r\ndate: Sat, 18 Jul 2026 15:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4720,"size_decoded":1461,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e38a8201200721ef99710cfdb48890f","sha1":"8d81cd842468a3284020f8225a02e37566606aae","sha256":"cf0bd2284f29896ea05bc99ea8e0e9ebaa7d0be8a0f85236e62a3ce84e97e524","sha512":"c73eeb33d7220319c753e3e9b20dd470c42be4830b88846906ca113d0cff43e75f93718d8fb42ab53e20a8492419afc02091c302ec1af674c6626b669c3857b2","ssdeep":"96:SOg3OgvJc+ukOgON3OxTcOxTUJc+ukOxTrNYOWNjTxtOWNjTaFZMOWNjTyOWNjT9:M1rV3HwwyNjFBNjZNj2NjW3wNj6Nj+L3","tlshash":"6ba1fde2487be40067831cc223cf7e32de4ea2447444d479abfd1ca8ada7c22136176e","first_seen":"2026-07-18T15:56:07.641354Z","last_seen":"2026-07-18T15:58:59.410319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}