{"report_id":"b1685d35-365c-49f3-ab9e-42816aac6255","version":6,"status":"done","tags":[],"date":"2026-03-22T21:54:14Z","url":{"schema":"https","addr":"www.corridadodesconto.site/","fqdn":"www.corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"corridadodesconto.site/","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"title":"Corrida do Desconto – Shopee","dom":{"size":175068,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7e9bd5c476e37e6ac4edefb6db44d0d6","sha1":"4a381bc89079955dda6a0f3d4aeca4ba25f51514","sha256":"59bf7695496e3a86381dd61c1208fe908d99ced4397948d08b4b252544f4570f","sha512":"94e46a284a8f1bc6825fbbf1ada061c30a26845ea84720e92a2298cf47a6c5dec738af8a2ea5823129cf99a88349028e2a5ad582a0c8309aa8e7843b824da55f","ssdeep":"1536:rCDduPFRTsXenwVv+tGsi3rR0UbVpa18ECOoOcYlFQoynTRDwj:rxXTsumiD3j","tlshash":"a304956696f3043d641381a96bab539a3764b103c50ec6287edc13948fcacdaed3776c","dom_hash":"domhash1c2244d341a0ffe741a95d2670752579","first_seen":"2026-03-22T21:54:26.654197Z","last_seen":"2026-03-22T21:54:26.654197Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.corridadodesconto.site/","fqdn":"www.corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T21:54:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"www.corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"corridadodesconto.site","ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T13:53:06.214261Z","last_seen":"2026-03-22T13:53:06.214261Z","alert_count":204,"request_count":51,"received_data":8608442,"sent_data":25536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":5,"received_data":246835,"sent_data":2810,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.corridadodesconto.site","ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-22T21:54:16.84525Z","last_seen":"2026-03-22T21:54:16.845251Z","alert_count":4,"request_count":1,"received_data":175993,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"corridadodesconto.site/","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b83bebbfb9ddf879179d73d1832811c4","sha1":"9b024460326c5804d45a3756a7d540fbb503eade","sha256":"9061c526f91ac52e12251c4baac2816c54d30a0010d9459fabb2b1fa55be4527","sha512":"918e94876e460aa1e3df892a634af9f724aa0f78cc2bbe2b87ea45cf777766c3625178e17605a41ccf70f6bb4ea3d27adde9b5d7c84d11acbf88544da60aa6eb","ssdeep":"","tlshash":"dff0dcac2c42a06633fe2634c227aa6b3b670700a4c2d568ca42c4542ca4a821c429ce","size":467,"data":"","first_seen":"2026-03-22T12:57:40.961123Z","last_seen":"2026-03-22T21:54:26.698949Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6eb4373da212834bef4a2d8ddb4c2931","sha1":"ac63f7de04c2e20c830c9978467e8ddec9f0c41c","sha256":"539f7e7504e7166695734b6a48b5a329fd5e7653d65d15d27a3cf3c630094d50","sha512":"37cb6c6e5dbe29b68688ac55900a39bc9e4fe025baa5507ca731e39aa1f352d65b694a6baeb0252f6d90eba398c8445449778de2d365f7453491ba42d6317e5b","ssdeep":"384:yhIhbwh+jraNLdAw1hO5u+mEVEVaEC241A5CREVEVaEHnp6uIEEEdEER01TJQYMT:br6DLOI+lOr11OrHnDrfGERDw2","tlshash":"03f2e62a70f318348aab62bea3cb53c4363520433905d8547d6cd2851fd2de9dab7acd","size":34494,"data":"","first_seen":"2026-03-22T12:57:40.962213Z","last_seen":"2026-03-22T21:54:26.699728Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"corridadodesconto.site/","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T21:53:51.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 21 Mar 2026 17:09:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bed0d7-2aeb8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3bad3520c3ab0f5233f7d54574a7cc5","sha1":"6078aa6ca0b37ffb3072bc92d398612fbdd6ff93","sha256":"26250c00a662df4260e0abee45f02d5bc31a67c83880fc8ca0e3cecb0e3920bc","sha512":"cac172e41b1812ccbba59aaa6878320954805a162789df8b347189fc8016caded2d7345a2d6201b31d63c0823f5f177024fbcffc64c2764b9604f2e564e30d83","ssdeep":"1536:0CDduPFRTsXenwVv+tGsi3rRRj80Ma3hIfFUmrtRHhoynTRDwX:0xXTsumezWX","tlshash":"ba04a56696f3043d241380696bab579a3764b103c60ec6187edd13944fcacdaee377ac","first_seen":"2026-03-22T12:57:40.903233Z","last_seen":"2026-03-22T21:54:26.656866Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto5.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto5.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 429592\r\nlast-modified: Sat, 21 Mar 2026 03:08:56 GMT\r\netag: \"69be0bc8-68e18\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"f3045853a3cd9d75fa946032f27bba0c","sha1":"f92d66598badc81343aa3950b46d07a1a74aa9fc","sha256":"d4d90ae0abe06ef68c2e5dab081722b4d477e1c8950402567aa0a3386cf142ca","sha512":"d230f38b42bbe22995127026144b151aa5304322bee6dde9db9b86a4b250cc7d9b2b9da279ef4106d059b140f56875b5ef824f3cffeb5c2fce9536d3bd536583","ssdeep":"12288:HI6ogXiIW8EEGqwpDSuFAceOw1pA+txeF:ygXit8EbFAcxkpAcxeF","tlshash":"0f94236a912c6a615f01faa182fa73f8e27c216d3da3349c2bc68615dcd07b0fb77415","first_seen":"2026-03-22T12:57:40.926098Z","last_seen":"2026-03-22T21:54:26.658293Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":1409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp7/WhatsApp%20Image%202026-03-20%20at%2023.18.36.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp7/WhatsApp%20Image%202026-03-20%20at%2023.18.36.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 175520\r\nlast-modified: Sat, 21 Mar 2026 03:08:58 GMT\r\netag: \"69be0bca-2ada0\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"f17af9fb5a479adf619eb9f9c38ff24e","sha1":"d451b2e1eb89190dc0713c4ec4a1a06fbc8256d4","sha256":"1c6b2232a2104cd79a7f4446b34bcb90beff6ac811858331f8bb114d1d46366e","sha512":"b3a8b88790b8b9f399e3e8f9f8ba1abca4383477f6f3b3a31489692ca5636579cfb3311ddedc0329a85607dc43a38cce642ac90269ddf71e39e3a09b30345d12","ssdeep":"3072:Lcmtj9GwdilEZa5fRh87IuecAjfGAbHd8Kip52iSbNSROSw9C:XZGOilEZ2Rh8Uue9HZnip5BSR1Sw8","tlshash":"5504237b7cb5d5368615eee8b392b21c956d9b88b25cda1b3d06343c3b076d7900c83a","first_seen":"2026-03-22T12:57:40.914153Z","last_seen":"2026-03-22T21:54:26.659619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":703,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp8/WhatsApp%20Image%202026-03-20%20at%2023.19.05.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp8/WhatsApp%20Image%202026-03-20%20at%2023.19.05.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57413\r\nlast-modified: Sat, 21 Mar 2026 03:08:59 GMT\r\netag: \"69be0bcb-e045\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 486x1080, components 3","md5":"bf34754143228bfee3256aef637bd163","sha1":"1df8f8ab075067a8a0cf063b01d089842ce94636","sha256":"4d998204bdcf83645d2456c7de55e2553dd775546602328fe8a34f2cf8b7fb09","sha512":"bdff73c4919457fcb9fa7b4b26ba7781f5efdf2b1600ca7d1624160c99cb79107cf8be91880fa286d07701907d0470011edd6a3da8c15a41e041f633754aad9a","ssdeep":"1536:IwPsiEaOymJWKNYETTOLfOmGY/N5yVRkWdou:IksiERyQLYYC3PyVBdl","tlshash":"c543023970301d561c1fd8f1ce22aa1faba3fd6c146c7dad5284a5aba3ebd124e484c1","first_seen":"2026-03-22T12:57:40.917915Z","last_seen":"2026-03-22T21:54:26.660297Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":422,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto2.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto2.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 153624\r\nlast-modified: Sat, 21 Mar 2026 03:08:56 GMT\r\netag: \"69be0bc8-25818\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"eb9759dcfe047d9a0e2ecb06cb8806cd","sha1":"447b440f1a33988c2dba951d7694f59373291404","sha256":"2216f4b0b755bfe8fda795bb30f123d4511eb4958a38d7c346643a03b072dcb2","sha512":"2559f36f6c18344b134e48d8397eef180d609cede659b6e3daf32e899511d13a8c4868862012635657559586ae21873d7c935cb4f468bd0848c91585c8f56409","ssdeep":"3072:o1pdzbVSJ7y+wQhN7PVzQQ6bPzptFGAptAS5lSlKLvm5+LQP7Tag773vhKmFkgPb:KdSHwQhNBzQQ6b7pPGAuAmfTTag77/9j","tlshash":"33e312f83e8823f2d8943537be945759bd6908adc9500dcabc836e049dd0a28e1f6f25","first_seen":"2026-03-22T12:57:40.944478Z","last_seen":"2026-03-22T21:54:26.66136Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":1348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp2/WhatsApp%20Image%202026-03-20%20at%2023.14.23%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp2/WhatsApp%20Image%202026-03-20%20at%2023.14.23%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61935\r\nlast-modified: Sat, 21 Mar 2026 03:09:03 GMT\r\netag: \"69be0bcf-f1ef\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"f26d75757a323ab5bc1b5262b1d95f5e","sha1":"2739dc36701669e063da50e7b8a8440eed13e9c1","sha256":"e277dfe741d9e2affc03f8821efbbd9910cc472401137c918fd1fe0ef6e71b49","sha512":"83c44895adeaeb76770f38427354f2e5c77d4d7ce2fa54310e479777efc65fe596cf4f5f65983c662ffa2ff8f9b6cfa2e216a1ef2c0ca0ef2cf2b1a9778c0b3b","ssdeep":"768:/ec7g0E6L3KPWG7MSXUmAaQMtZVEViFltyM3+VtRmg2+ueib/3rzOXwJmkUgbcoJ:2h0BeHMEAaQCXmhzRIeovm1gooJ","tlshash":"38531213312b59dcd562c8be1142e7223ff50d8e3129ea73b663b3679ef179828b9005","first_seen":"2026-03-22T12:57:40.952706Z","last_seen":"2026-03-22T21:54:26.662251Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":1152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp9/WhatsApp%20Image%202026-03-20%20at%2023.19.35%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp9/WhatsApp%20Image%202026-03-20%20at%2023.19.35%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103615\r\nlast-modified: Sat, 21 Mar 2026 03:08:57 GMT\r\netag: \"69be0bc9-194bf\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x810, components 3","md5":"576348710f845b1145e64e77fbebe4a5","sha1":"d9de56ff219ff3d3aaf1f166d7401210dd72cb07","sha256":"0b5afb4140b6b0ce3e57713005dec883bc16f10a958e8b381df8878ec76caef4","sha512":"9ebd6a27ab61bdb8fa6b65f32bc1fd8c6f9b6055cd858e3d9f2165e5a8435f31d286c0fccbebb5ce224b9c91bb94392a8060edb5da0e2c0c2ce4601f769c152a","ssdeep":"3072:Sy2xoGk/fwoUV/Dhv5PzIrDtV+nNY7x64sTs4bZd7Fs:j2Rk/CePtV364sTsMZdhs","tlshash":"1da3128a773ae1621d9187bd945465acf53316db47e38a4f3ebd0fc364a11b22ce31a0","first_seen":"2026-03-22T12:57:40.908326Z","last_seen":"2026-03-22T21:54:26.662841Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":658,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Mar 2026 21:53:52 GMT\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9ca8b0466d6259625410265c0da5ed15","sha1":"6dc8aeba67c1b28c78404033f26d4945ba571f65","sha256":"5941510344f6177ef576b0afe21680213c6f832abf2f77961736e4487d57abc7","sha512":"6ab0b3f643967e36c1424d13ec1fe40f8ad849dbef154c2d655e60b5cadd605db07cceb3a0cb410506118384eb9b422927ae1a807543bd6bab206ae2c98f2a42","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3Lxxgx:vXJp2+g7GQK","tlshash":"17428a92002ba400ab971dc233cf7f3aaece50856085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-17T01:16:56.841438Z","last_seen":"2026-08-09T03:41:57.810203Z","times_seen":229,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":104,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto1.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto1.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 198263\r\nlast-modified: Sat, 21 Mar 2026 03:08:55 GMT\r\netag: \"69be0bc7-30677\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"26dd84c75f858c7f1295fb46a48360f2","sha1":"ff65e17e498236907801c24852e7bc5aa7b96f52","sha256":"4da3699000549b9412df80241f66b55a87c6e56325b32f2d88c6992c27abc7a8","sha512":"e0262bb15ae3198e9c1ada43a0d2cf0a885e9bfaf377e863c368955dfb6512992ac414de8c0ad0d60290ce9e6dfd0e5e5787e4257adb53482edba90c7305493f","ssdeep":"6144:DGMpEZBg5tTnHbE0HDuinEEJoduLWP09F0NZGfn:FUS5lI0HDzHfWPaFMZGv","tlshash":"ae1412f85cd25a73b5bd189323c5894ed3b8448b10e342725e9a628469b7bf1f7a343c","first_seen":"2026-03-22T12:57:40.950729Z","last_seen":"2026-03-22T21:54:26.664684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp2/WhatsApp%20Image%202026-03-20%20at%2023.14.23.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp2/WhatsApp%20Image%202026-03-20%20at%2023.14.23.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37790\r\nlast-modified: Sat, 21 Mar 2026 03:09:03 GMT\r\netag: \"69be0bcf-939e\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"6d3d50ba1767267a91c07049795cd29b","sha1":"3e928668d79e589ef0b972cd4cbcf4642d6a1d59","sha256":"397bc4b21ca4bf10e71e1d1d067d41efe48e5cbf0f6a9730c530447b67730f40","sha512":"8c258c7ee5d2ed5e3c526b0ef36f218f796224329cca1f49786a8faa7fb5d5b094ba5253950daeac068038adc5a87cbbcbb7efe5e1be942d5b32acfb5a4298dc","ssdeep":"768:UNSmLnCDm17Q4qFMIgADl7qEwUAJpom/JTcbqf6YZ:U5N17dFhUQppqOfv","tlshash":"3103f2e3bb2986c0fc9cf87a0d4717eab32c74976272155919c104b856267d16c06af9","first_seen":"2026-03-22T12:57:40.936879Z","last_seen":"2026-03-22T21:54:26.665462Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":1150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp3/WhatsApp%20Image%202026-03-20%20at%2023.15.36%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp3/WhatsApp%20Image%202026-03-20%20at%2023.15.36%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101017\r\nlast-modified: Sat, 21 Mar 2026 03:09:02 GMT\r\netag: \"69be0bce-18a99\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101017,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x960, components 3","md5":"c34f565f14ce6039fa3d1f01d1282578","sha1":"6b43408c4e51ff01784f74928dbd7c1583f8216f","sha256":"35ad3e692f62d7e2511431d5ece0c5e8d05686e9569339f2d5a5208eb81bae79","sha512":"2ee85ec17e9e9adffd50eaa093ab74bbfe02d67fd7ab4dce1157139797c96ae32a00662685468186d4ed9421dbe33d829634c76cbef8547489acf9645b27978b","ssdeep":"3072:qmkokcPg8yD5SBKBA4spaC/QfnX2ky+iY/q:vhghouspX4XHy+H/q","tlshash":"e9a3122e794f80fcda5c5233c899612c5e12f1aeaf61a2c6b7da24ff425132774d6250","first_seen":"2026-03-22T12:57:40.91681Z","last_seen":"2026-03-22T21:54:26.666404Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp5/WhatsApp%20Image%202026-03-20%20at%2023.17.22.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp5/WhatsApp%20Image%202026-03-20%20at%2023.17.22.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 98304\r\nlast-modified: Sat, 21 Mar 2026 03:09:03 GMT\r\netag: \"69be0bcf-18000\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"32a0f828fc821c1693425810ceef29e1","sha1":"06b741dadf49e154cd569de5fdca007bbff14659","sha256":"d7a902008fb679e268879ff4bf297d67b42b2fa1ea87aaa4f977f7f0cc736e84","sha512":"c5bfb2ab0398984c55353595a08143e996421b757ec8d039a2d19371225dd6cb5a0a90ab2f75046499a60e256ae7608e0c73136e4bc9ac5d4ab9484eabfb4ebb","ssdeep":"1536:3Kn+foGIup5gcBv4B+RaMeWo7oCYt58lZCftSXiGhZpzsbtih/05Zyj:3Hfoc5Tv4wRaMoVJ/CfGiMZP","tlshash":"b9a302ace2645730046edf3c5efeb578f03aa12446b4fcf9a0192da067dea5e54c019b","first_seen":"2026-03-22T12:57:40.938958Z","last_seen":"2026-03-22T21:54:26.666974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":638,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp8/WhatsApp%20Image%202026-03-20%20at%2023.19.05%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp8/WhatsApp%20Image%202026-03-20%20at%2023.19.05%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55359\r\nlast-modified: Sat, 21 Mar 2026 03:09:00 GMT\r\netag: \"69be0bcc-d83f\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 486x1080, components 3","md5":"2f8dd342b307c4d77c13f33d4dbbe161","sha1":"d9c9bf472fd5baae939521aaa5bb3ff0539d623e","sha256":"6382de75cfb3cb7a63e7eb66c48bae25c527fcc1c6c1f461b575aa0d5e9300f5","sha512":"83ab51158ea2c822e972a61e5d13f9f9f66686b3aaf31467f5662dd9bbe4ee8d2004f350e663fcfeb01f3329a59c5c3336fc48d08781c27336a3c07aef84a8cb","ssdeep":"1536:JPi/sFT2yGIiMDTbXZrk4WiVY4pGhjfuQfpDLIq04w:JLKgpQ4jY4pGEsLFM","tlshash":"6a43024f7b538b016cad817732b3d5fa7b4adf153e42d86e3ea6444292a734267d2304","first_seen":"2026-03-22T12:57:40.924028Z","last_seen":"2026-03-22T21:54:26.667747Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp13/WhatsApp%20Image%202026-03-20%20at%2023.22.45.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp13/WhatsApp%20Image%202026-03-20%20at%2023.22.45.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 178642\r\nlast-modified: Sat, 21 Mar 2026 03:09:00 GMT\r\netag: \"69be0bcc-2b9d2\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"5810e77c62d7d19df941f60e6e6eb11f","sha1":"c843dc1979993f6c435693b9ad88ea3cdff8f1ed","sha256":"fe85439eb4ca481f7f3a52c8a9ac2b62931995f031138ec80d654a701a743e10","sha512":"61930168898a981b4bd65b75c1bca3fd5d20fc5a8d9de10e9f055c3fb0d8d6e5bc7218155b8d6ed6da72e1595ae4ce291764d1aeec95a7a0b81aa3c5046c1228","ssdeep":"3072:G81Wo2KjuZDHbxvQw99u/rltLNE0AhtNnKnqj6ORRx1oSA4fZV1U8xMBEZUCf+ut:G81W+qTvQ89MzNgGaFx623VuBYUC2uNf","tlshash":"3d041286bedc6047dca8de79426d0f21a1144a6c3fd0277fe04f684240b9bba5abcd57","first_seen":"2026-03-22T12:57:40.904426Z","last_seen":"2026-03-22T21:54:26.66857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":707,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://corridadodesconto.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532565\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T19:46:52.342204Z","times_seen":255549,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":122,"dns":1,"connect":21,"send":0,"wait":23,"receive":2,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto6.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto6.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 416608\r\nlast-modified: Sat, 21 Mar 2026 03:08:56 GMT\r\netag: \"69be0bc8-65b60\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":416608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"50ef7882cce9b2d39eb36036c7064347","sha1":"1ec8320cc089a0930c2a77abd4aadaa92ae4cdc6","sha256":"2d69336f9cf1f0403b7f9f5b7d65ab32b24cdb5ef1b90fc058e68da611ca4621","sha512":"120302fd1cfa4e6ea9393fe35607663f2bc55d97f37aefe0d227c2919eb6cc281dac37706f8438466a06e35542e7750430eec5efdd46fae7301cc3927f28c2d6","ssdeep":"6144:hO8XFuL8pR5kR9E3HfTiLGX6b33WuRHYt58JyfMR6FHv7hSxs+p+pdxmq9g:h3XF+9EPd6LnRHJ0FP7cO+p+pdov","tlshash":"b894235f0218486b485bdb088ff575ceda7d33a086109565b0ad4a87fc1fcbfbaa8505","first_seen":"2026-03-22T12:57:40.909564Z","last_seen":"2026-03-22T21:54:26.670512Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":1421,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp3/WhatsApp%20Image%202026-03-20%20at%2023.15.35.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp3/WhatsApp%20Image%202026-03-20%20at%2023.15.35.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 169654\r\nlast-modified: Sat, 21 Mar 2026 03:09:01 GMT\r\netag: \"69be0bcd-296b6\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"b2707e5b786075b030f1e873d4a1ee77","sha1":"25de74581454378480c3fa5f1a03ab7b8abb8878","sha256":"53e3b4867918bb90d5e80acba605c12e2bd7877f68e4b9f2cb4faff6a94a994d","sha512":"9e96e0fee4055396ba3a0134a902329ec786ec1f88fab34816fde1ac93ae31bba358d8a3904c2a9a206a99f54a12654fc9a6d450c10196620398803bc085d818","ssdeep":"3072:dISt6k+zk5enBqAYLkMF/CQ/l+2utd8FVR2j/xtgbW4/pZPE+CdRrD6rp/:lk9zk5eb2qMlUtqD8/xtgb5/pZfCXr0/","tlshash":"3ef31203eb5d4a0390e5e5ba34bcc1e91a6efe3cadd10a48675bd4f2442849147f8cf8","first_seen":"2026-03-22T12:57:40.927914Z","last_seen":"2026-03-22T21:54:26.671308Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":679,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp12/WhatsApp%20Image%202026-03-20%20at%2023.21.41%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp12/WhatsApp%20Image%202026-03-20%20at%2023.21.41%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74970\r\nlast-modified: Sat, 21 Mar 2026 03:09:01 GMT\r\netag: \"69be0bcd-124da\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 498x1080, components 3","md5":"c7de7c5f18b7e95b67e526f72b9c490c","sha1":"d08c008d5501a89053910ed7dd2ab542f5939cdf","sha256":"85f103362e2545eee881d8338335c9923b556eb8dcb86d494186d4f12a5b793d","sha512":"e7569ab3e0a0c25aae571e3db09f05122439ab92d027195159e25304ba75658a7a27c03592039ef86c673d2d176219357360456e0c1e717f2e44732be54e29c1","ssdeep":"1536:b7LLWybbVCo9eMcytmaqJFF9iZioQPkuKvlFnRD+9E1ydk5X4hPuDEl:uSVCokMcytAJFG4oQPkuKvlNRD+O0k5W","tlshash":"7b7302e076e049489380467d27f4166bc339b019a27d5e08c9ef93395bba43bfd97b02","first_seen":"2026-03-22T12:57:40.94348Z","last_seen":"2026-03-22T21:54:26.672231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":664,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://corridadodesconto.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532565\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T19:46:52.342204Z","times_seen":255549,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":118,"dns":1,"connect":21,"send":0,"wait":8,"receive":4,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://corridadodesconto.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532565\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T19:46:52.342204Z","times_seen":255549,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":76,"dns":1,"connect":7,"send":0,"wait":9,"receive":10,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp7/WhatsApp%20Image%202026-03-20%20at%2023.18.36%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp7/WhatsApp%20Image%202026-03-20%20at%2023.18.36%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 139082\r\nlast-modified: Sat, 21 Mar 2026 03:08:58 GMT\r\netag: \"69be0bca-21f4a\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"393b380a9396ded0f975aff0e076050b","sha1":"b54c282a99b1399ee8d2fbc7d8ba714a2853c644","sha256":"672be06c68998bc1a25cb01c6de13d1f411de827f7e4bb431270fc63a4aa5bf2","sha512":"0ee48d09b531875c44636f923800195c9de135b9355fc8a4dcb0e5017ce2bc003f918fdff9d8e56508e4dbc2920bdf94edf2e4e0e20986bf754a78b3882006ad","ssdeep":"3072:vw4EotJGMJ1hEPwDK+/MKEBgdwXFqX5jOLURQjyV8921+wfbL6Ekhe:1lqu1hEbXgKYX5iLSQGq92nfSm","tlshash":"f7d31244e8150ad9f849d7333949e7ce21b260ae51e9e39f1fea4c60c30de64a61fc67","first_seen":"2026-03-22T12:57:40.945462Z","last_seen":"2026-03-22T21:54:26.673058Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":706,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp10/WhatsApp%20Image%202026-03-20%20at%2023.20.39.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp10/WhatsApp%20Image%202026-03-20%20at%2023.20.39.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75725\r\nlast-modified: Sat, 21 Mar 2026 03:08:57 GMT\r\netag: \"69be0bc9-127cd\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"586ea1d3412575d7ff1fc737997ec29c","sha1":"942f1ee1c33d030ed6d8660e4d4861fb7c5ee313","sha256":"c73c3ddcdc64461cb6e2ec6e0877e26ec9d343ba5f534361c93c2c490d5d5cad","sha512":"4a2f3b61224c05e5fb7caecba45c154a7700d0cb8908868dd34a3bef6dd7ea9f136200b90eb666a46f9880d77dcc089dfac8fb570d4bed9bdf5a10f8f805aabf","ssdeep":"1536:5dE6UMQQ4v+vJe9HmvxvY+nsVjh2sQtklYMUuxwKfYOEgol:U6Av6J+mvxvxsVjYqlYM/uOcl","tlshash":"bd730225f7277a76995cbc796a0d44e1a7e6c28978fed42620779933cd37770082024b","first_seen":"2026-03-22T12:57:40.929776Z","last_seen":"2026-03-22T21:54:26.673672Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":660,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp10/WhatsApp%20Image%202026-03-20%20at%2023.20.39%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp10/WhatsApp%20Image%202026-03-20%20at%2023.20.39%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49731\r\nlast-modified: Sat, 21 Mar 2026 03:08:57 GMT\r\netag: \"69be0bc9-c243\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"204145e499da52b736119a1f97a12fd9","sha1":"fe9c62176b95b5f3c05fbab316d2f5416956d8a4","sha256":"7568ac496bf5ef40dbdcb13607e22e4664690a02053534cf28e9fca542cbb324","sha512":"81bb0ade85b60b9876c95165cfaf95bc79aae199b975b0c139981c951a1a73419ca195c266ba58743bf791961808d80e6a2f8f05ad1f1a7cd97bb3182a28573e","ssdeep":"768:yFDGxrBvv7qM4a5EzJ3ZQL0GlB3xEBag8q4ovjjXS0gFeFR2/w7X5ba8roBVXS:yFDwnuxdzJK3xCjrcER205roBVXS","tlshash":"6623f284fd9df372e295d332a809b1297dcc9822c7c19f5c98864b472fa88cd5059e2f","first_seen":"2026-03-22T12:57:40.95996Z","last_seen":"2026-03-22T21:54:26.67426Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp10/WhatsApp%20Image%202026-03-20%20at%2023.20.39%20%282%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp10/WhatsApp%20Image%202026-03-20%20at%2023.20.39%20%282%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66352\r\nlast-modified: Sat, 21 Mar 2026 03:08:57 GMT\r\netag: \"69be0bc9-10330\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"032b52885d1da6f385fe8a6dd52eef6b","sha1":"7f1db786bb755c4998dd2ab661d2c001e22670f9","sha256":"f35b1764d6711c8e7fbf943e6ef3e530725727726833d29ce50bfaf0975b986b","sha512":"4ef77746f114692ff0e51ebf5ebed69d42f168a5feb64d2ca7fedbc8a159771a804441bab2afbe80106965a62f7242e03da8d62f32d8aaa60d728e596ee9ada9","ssdeep":"1536:32ctFYzHsMSyR+2MO89d8ER9IGdzxpDtq3TQD5Fw/Ol:hysMSyk2ZW8ER9Zdbh51l","tlshash":"225302b37a6ac644ce86eb35c0c163ba6eb9a217f442ae0fcc764f255c5f955044e036","first_seen":"2026-03-22T12:57:40.946728Z","last_seen":"2026-03-22T21:54:26.674825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":660,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp11/WhatsApp%20Image%202026-03-20%20at%2023.21.17.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp11/WhatsApp%20Image%202026-03-20%20at%2023.21.17.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86754\r\nlast-modified: Sat, 21 Mar 2026 03:08:57 GMT\r\netag: \"69be0bc9-152e2\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86754,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"6da063f709ff10abc6e5cdf9c30a39ae","sha1":"247e46dd9316715611f61f3879e5fa734589029c","sha256":"6c44b73586bc63cbe80d353d0711b1502c212f0c89f2c0d88c526adf6222a7c3","sha512":"6073c3030508bd2d0df160ec1de1b0394b3c0d25fbcb60d71d92cf72a546ea921ca1e2c75bf96601ac6083bbb5dc80ecefbe0eba0550c73c71494ba0f4efa027","ssdeep":"1536:gCbsqVIG+aHZjG8KtvCwVsc0a/vTAS0kcdZ9:TApGDHZjG8Kttsc01S0kc79","tlshash":"ec8312f32f26c3d5a7dcf5784e6a0a7459bf7a229c6eb09b70a13c22495062d07cb471","first_seen":"2026-03-22T12:57:40.937894Z","last_seen":"2026-03-22T21:54:26.67566Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":663,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://corridadodesconto.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532565\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T19:46:52.342204Z","times_seen":255549,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":117,"dns":1,"connect":21,"send":0,"wait":18,"receive":2,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto7.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto7.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 128483\r\nlast-modified: Sat, 21 Mar 2026 03:08:56 GMT\r\netag: \"69be0bc8-1f5e3\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"ad8d1a43b8f2708784919699108f7dbc","sha1":"f919b81852f46bf8e6a9510268ce918fa2062b1a","sha256":"132f115411f3958d37c299a59cc3f0d35c8bb1381bdf09d74225425db4528bd7","sha512":"e2b31c85e6652c65adf8a2ce5024c6dab75588089c18d03439fb4e5543935780558df7640b38fada11a6c42dc3be37dbe58bb9bc2dc924de47ec36ee1638b9d6","ssdeep":"3072:DcnYT9Q1CHjlyN7IZaRZ4tS4lojgOSOdkK+XPkVFFR4:tT9BDlyWZaRZcloEOl+fkV2","tlshash":"a0c31348c60ff42ce1e1aeb44e84d328ad3b58717bc519369fdf444f3afaa5901b6246","first_seen":"2026-03-22T12:57:40.95165Z","last_seen":"2026-03-22T21:54:26.67648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":1189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp1/WhatsApp%20Image%202026-03-20%20at%2023.13.18.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp1/WhatsApp%20Image%202026-03-20%20at%2023.13.18.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68246\r\nlast-modified: Sat, 21 Mar 2026 03:08:58 GMT\r\netag: \"69be0bca-10a96\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68246,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"186f5bde8a8a17043d8eee01be74a4b6","sha1":"172e137107266005e502d945fbfef484522bc608","sha256":"1f10edafb24ca514f769931826f14ea7c5c0190b443e5f34a3d6e2c700802077","sha512":"d0ad834f7ec2e9e9ae100a445d191b34f38671ef07c641258989b3708d3f76176c2525ba811c29a172c5f13dd83f6d4cd8be4caa3c000c9c5ea5b77f760faae5","ssdeep":"1536:TVWBPI1FR8xd6abeZiQX0zzxvC7EsoApJpowruXG8P:0wEOZbAlvCZJywruXGC","tlshash":"796312a8f4c01b05c8b4f77b12f85bbb9a9595a668cf53bc50dc933ae040291ecad573","first_seen":"2026-03-22T12:57:40.915568Z","last_seen":"2026-03-22T21:54:26.677514Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":1192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp12/WhatsApp%20Image%202026-03-20%20at%2023.21.41.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp12/WhatsApp%20Image%202026-03-20%20at%2023.21.41.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64992\r\nlast-modified: Sat, 21 Mar 2026 03:09:01 GMT\r\netag: \"69be0bcd-fde0\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 498x1080, components 3","md5":"8eae0df500f72c514a45734d6f0cf6cf","sha1":"faa1901c546ba54349be2f7e9a4daabd60a68f75","sha256":"106c42e6fabee27d0fc466c3223363c5fe7f751f89377c629f6f554fbf7a4d71","sha512":"cd53788229831f4442230d6e3ca8f4232461a1e5596685bfc77add9957ada53c1748a27565599fcb5ca68b10514c16412461a0ad7d894db5caa511829d9065fe","ssdeep":"1536:stiSwOLIqvXE/X2Z3lBvpywHGahELqucvEdMoHpliR3l:stLIqvX5LmwmG3UMq4","tlshash":"245302472986b36ad7bb57b41111720e8b830fec74bdb62c891f2702a3f55f5752640b","first_seen":"2026-03-22T12:57:40.910712Z","last_seen":"2026-03-22T21:54:26.67836Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":441,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp12/WhatsApp%20Image%202026-03-20%20at%2023.21.41%20%282%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp12/WhatsApp%20Image%202026-03-20%20at%2023.21.41%20%282%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78556\r\nlast-modified: Sat, 21 Mar 2026 03:09:01 GMT\r\netag: \"69be0bcd-132dc\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78556,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 498x1080, components 3","md5":"02fcadd8316d6253bb33fd2b70c74e2c","sha1":"6a84d6c1f63bfa18b2bed3316881cdaab9ef892a","sha256":"f1d8a5d5b6705cdd41aeb78122aef6c647f4afad66dfe85a2e989d2f7b6c172a","sha512":"81faafeb2c9ff9dae579aa9f8ee94d9e8a978ad2efdb637457a397b1aefcfd31b301761b4708f14d4c59d02254725c80195de44397795b5e9e6b7c4390fa0491","ssdeep":"1536:F859EmWdWAcwC6erH+JpIkSlqeQ8j30tMO75yPraCIOtAp+/:FiWxcwC6o+MJlTj3st6aCfAp+/","tlshash":"a27312e0f223a513bd8cb47987a5fdd5186766e33007ab3d674b18f74a5128a1c7e027","first_seen":"2026-03-22T12:57:40.947746Z","last_seen":"2026-03-22T21:54:26.679125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":665,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://corridadodesconto.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 532565\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T19:46:52.342204Z","times_seen":255549,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":118,"dns":1,"connect":8,"send":0,"wait":12,"receive":7,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto8.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto8.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 343099\r\nlast-modified: Sat, 21 Mar 2026 03:08:57 GMT\r\netag: \"69be0bc9-53c3b\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"5edc274405dbf1b6a7e149ce35303994","sha1":"388d3dca726aecf96688cc94942c72f1f84fc007","sha256":"82e5de3d76ea99843d7086c6b328a14d339c492914c020216e90e78692518e11","sha512":"e8e22300e09cd949bed507c7fcdec419a392ae4c1ea60af997116a388973e0e6951b6a092d6de587f63f814236d4c54704ac01ecca7f31e15270511342b7a863","ssdeep":"6144:pBDFENb6dy4srRrHPwKNZu8uiBszSDgcavSqBbvHPFA8jFhTzENnKTEwJcfvp:rBENeY/F7P7NZpEFcWLP9jzTzqDwGfvp","tlshash":"c3742316981ec3429c2879207f9746cb9ae1ec50f0bc3b623fa550d7ce9ef42cd2a655","first_seen":"2026-03-22T12:57:40.919827Z","last_seen":"2026-03-22T21:54:26.680063Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":1530,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/lumex.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /lumex.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 810962\r\nlast-modified: Sat, 21 Mar 2026 03:09:06 GMT\r\netag: \"69be0bd2-c5fd2\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":810962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit colormap, non-interlaced","md5":"03ce69c35644b7470dcb61f34a717cb7","sha1":"b4626de09464494992edc7b0dfba92bd2cb60c86","sha256":"4d94b3846432e6ae1d7870c4799221c8e12e2f37dcb56cb18839d90b0d8c980a","sha512":"940c42044ebdee4955be1b37fe908857e20d69a6d158e60d5563ee53a05b210aa7c22c6283f5e6814fabc2eea31731de69c5e1e53af70a0e282a7f5851aec878","ssdeep":"24576:mJbG4sAWPN/ochLGxrX+OUX4sKQ47Wqz93Mm:Uq4sToIur0X41QEWqzBl","tlshash":"80052303368b9fbcd662c5b5d0c92a10941dba1f0f11532baa66d9bf12cc76b0eb4764","first_seen":"2026-03-22T12:57:40.957404Z","last_seen":"2026-03-22T21:54:26.680621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":1570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/organizadordegaveta/foto1.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/organizadordegaveta/foto1.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 341385\r\nlast-modified: Sat, 21 Mar 2026 03:08:54 GMT\r\netag: \"69be0bc6-53589\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":341385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"8b8bb4b5d31786aa1a8ff7412d048c96","sha1":"2a18493d4f75550f901e1225cd52ed1d4cdd54df","sha256":"8fb71c4cd9e590f5dc38787d7f354c305764a6295a67c75915d1cad72e080b0d","sha512":"6963c3b9baf108b5be666abc79e361abeed28bae87599d1ac47a16dc8c99be600f1e0f16b50e081a67f2ae43d9210fdf93af185725256ee7fdfa031e61384302","ssdeep":"6144:2uQFEvH5JQaR6oQ8MYqXtJ63bS85IcwpGm1Dtvxygf1qqZ4p+KC4KSQSCkrREFjE:tUCZGM6D8BqdA+/RGDgf1q44MP/SCXLA","tlshash":"707423acfae9de427328d31303a9ca647bbd71b835175952a8cc06ca917cf963cd3065","first_seen":"2026-03-22T12:57:40.92711Z","last_seen":"2026-03-22T21:54:26.681415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":1380,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp9/WhatsApp%20Image%202026-03-20%20at%2023.19.35.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp9/WhatsApp%20Image%202026-03-20%20at%2023.19.35.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 95395\r\nlast-modified: Sat, 21 Mar 2026 03:08:58 GMT\r\netag: \"69be0bca-174a3\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95395,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x810, components 3","md5":"1b80307f5f2c83d9cf771f881dc65cce","sha1":"41369fabb731063a18a909c468ab729c870e6715","sha256":"198f1976dc0e768aefb50144561db1f12c2f99cb196c9e3dd40c74d82343cbbf","sha512":"a7da04f01edd77a1812e7984b35f977c0bbf287cffc0f59f1c3ec0c58cff2219f75db1146e6de7c6e89ce1f3cf6b6f026abac15f1446beb062673bef2f3e8ec8","ssdeep":"1536:zqjmrYucHLUZMQ3lgU/LYcz5oq/nY3xVA/o2qoWthJ41+6Sho4UsKeAcb250LfF5:2jEYRkZ3uU/LY8oeY0w2bWh4w6Oo4Umz","tlshash":"9993127467924ff3953cc5709aafce347289f779bb5ad0eda0dc66623ad40809ed0620","first_seen":"2026-03-22T12:57:40.934624Z","last_seen":"2026-03-22T21:54:26.682104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":654,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/shopee.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /shopee.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 6717\r\nlast-modified: Sat, 21 Mar 2026 03:09:07 GMT\r\netag: \"69be0bd3-1a3d\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 226 x 73, 8-bit/color RGBA, non-interlaced","md5":"60562ea99f90469ed1839cb16f13b8ce","sha1":"7b99f7c5b6dd5062e7622940e6bd457d6a882a82","sha256":"313aacb1a4d0fea5b64cee33f27f8f7286761aa53c34342f6f87012487d9ed8a","sha512":"d070ecd8b9091f58f3fbc8ec034692c7c2af1b37f235f3fc636cc9b7869bab91222db6e62a5441c0f539f714a4183ec47ec3c5d0e357f8431200034a58baba62","ssdeep":"192:Nkn6BxxpQrYDqyFYy4ZTDcKMBijX2tZHolOugFFKSg04/rZuGG:unUxxKxnN52tRolhZSK/ty","tlshash":"02d18e64caa06c202525fd2679f5b057233eeb89c7c19dd67fdc55960c620b4cb8ce83","first_seen":"2026-03-22T12:57:40.911791Z","last_seen":"2026-03-22T21:54:26.682937Z","times_seen":3,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp1/WhatsApp%20Image%202026-03-20%20at%2023.13.18%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp1/WhatsApp%20Image%202026-03-20%20at%2023.13.18%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71287\r\nlast-modified: Sat, 21 Mar 2026 03:08:59 GMT\r\netag: \"69be0bcb-11677\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71287,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"430a54dbb46a68dabef720e9a3a16e14","sha1":"c98a5e57c2f6eb7cde6e8f5585e70dafa0e68e78","sha256":"75744913617299dfeef22eb2319382a3574333bdc8f858251065f8e3a148cfa7","sha512":"487fbb673bb955287852cb569e2d5a0548c2b57cf0bed7fd99fd3de222dad5e64b40625054f7afeae3160aa4aa570e4608a993da29376e20019e7ff30d29e065","ssdeep":"1536:VUVgXh4b/TLyyoUdIpYEY7o6LDv9gRyQNtCSur:VUVgRe7LhoFpVYM6vv9g4snur","tlshash":"2c6302a23cd242cee144c57fd7068713a9553d7d4e2d5a6fe8e84a6c2c998e84278b3c","first_seen":"2026-03-22T12:57:40.906949Z","last_seen":"2026-03-22T21:54:26.683478Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":1194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp9/WhatsApp%20Image%202026-03-20%20at%2023.19.34.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp9/WhatsApp%20Image%202026-03-20%20at%2023.19.34.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73723\r\nlast-modified: Sat, 21 Mar 2026 03:08:58 GMT\r\netag: \"69be0bca-11ffb\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73723,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x810, components 3","md5":"9419373768debac382ab28562e58df8d","sha1":"7f2eb747d5dc9246ad2100060b48701373fd7df5","sha256":"f9bb7389ae9dc5187ce3dfdb9e8baea35cf4b57501986da885fae44b44c913a2","sha512":"80c6b31ec5072af24df4545f27fdeec807544b1d2e1c79585aaaa0150c78f037b97a5ae7d0382b32f879098f3b2bfd9c2f1e2ce38dd0a79f488944ab12c2a9e4","ssdeep":"1536:xgCxlSc9oA6ytmALQAsDSZE2MsQ7qtGc91RORhScQr7Ev3:2CxlS2IytTC2Mb72fRw/Qv23","tlshash":"057312799082c30fdcc2abfb57be76765d211f4bf33aa80e60d9a355808515cb63ad42","first_seen":"2026-03-22T12:57:40.942497Z","last_seen":"2026-03-22T21:54:26.684368Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":651,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/organizadordegeladeira/foto1.jpg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/organizadordegeladeira/foto1.jpg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53132\r\nlast-modified: Sat, 21 Mar 2026 03:09:04 GMT\r\netag: \"69be0bd0-cf8c\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53132,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 679x684, components 3","md5":"1d66c5c7d9f85d75658edd8f8151f396","sha1":"45fa1362b73c1580693416d31b613b88c3633110","sha256":"5d154f97870db26b3108e4190b22df184c9356e3157e3670f4670e0ee9e76ac1","sha512":"d1b40bba7bc9b068b4be772bf68d2ae1fdfae7536d8e3c6aae86b8f6d7074eb37eabbf943cb66d3abb71ab50ab4cf0068c8c3e8767390eb6f12ca05f4ce61c3a","ssdeep":"768:pBlaVuqxa6QJfIaMgD7eQ3RhihGsB55msQZcKmknuo9tZGS4FJ1:p3aVuqxaB+ad2Q37kGsB55msQZcNo9eX","tlshash":"f033027c5831a32df91bae348f2cc1ed5f17ae1b26a14e41804b6b25d0d9337596c53c","first_seen":"2026-03-22T12:57:40.958466Z","last_seen":"2026-03-22T21:54:26.685183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":1173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp13/WhatsApp%20Image%202026-03-20%20at%2023.22.46.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp13/WhatsApp%20Image%202026-03-20%20at%2023.22.46.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115046\r\nlast-modified: Sat, 21 Mar 2026 03:09:00 GMT\r\netag: \"69be0bcc-1c166\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115046,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"ad97280fa1868f3cd15ab55fc2b3f8f3","sha1":"6ce6855695601ab8984101f57ce5308b9b96d932","sha256":"cc8fe77197b5b0ae523bdfb9bfb86654f33ec679f0c19119fc080810e062fd9b","sha512":"ed8efc8593eae82f423eb06fac06357477f24e8031e4e9bbe5443840ec2a6db7d0f2aba35f5617ba2a7a7c057ffd11d852ed01cfc45ceff04b06c0155cd8382e","ssdeep":"3072:4hpK+QPblJRU7apBzCnnyZetP13/yJXT/EhOPR:hJRJonL8pAkp","tlshash":"96b302313a779871c1a457736e8f42303b617af991d2c42ecdbb98bb4259aa4f010fd9","first_seen":"2026-03-22T12:57:40.905629Z","last_seen":"2026-03-22T21:54:26.685665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":671,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto3.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto3.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 301481\r\nlast-modified: Sat, 21 Mar 2026 03:08:55 GMT\r\netag: \"69be0bc7-499a9\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":301481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"28c0f50db241127f0e5ac114db13936a","sha1":"9dd5271a4153a6e7d384837380729554af69d003","sha256":"2c63dc08b84d9dabb0c48e6aad15609918ae0bc36e0bdb71e5e40807aa96bf7f","sha512":"fdfc5b0985ae9a722444bd5f5e028436e8ad63bf69d10fdff621befa49905f7c7cb846bb313d5d5361cdf1be00b1140583087d27e7fe90f834bf91073991ba6a","ssdeep":"6144:J3wFWUH3rvP8jskby543Ylla4S/ppQ9gybD/vf6q0ucdNIsewfvpS:JQbvPzYTwQ4S/neg6D/6qf8gwfvpS","tlshash":"3c54236af4493ed4b5d318bf00d573ebe6d57293dda47462828de43acb3a1881d8c48a","first_seen":"2026-03-22T12:57:40.925013Z","last_seen":"2026-03-22T21:54:26.686508Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":1390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp5/WhatsApp%20Image%202026-03-20%20at%2023.17.23%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp5/WhatsApp%20Image%202026-03-20%20at%2023.17.23%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35038\r\nlast-modified: Sat, 21 Mar 2026 03:09:03 GMT\r\netag: \"69be0bcf-88de\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35038,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"2ef92b45a9d89d770eade61f62d5e753","sha1":"fbbeb213ea55097df03a2786337affee3f364e0b","sha256":"45b71b2673d15802d6a8d9da12205e9eb6fb2983e4b54e9eb7f339b66b3229e5","sha512":"31c1abecad2bc8d8d5aea83811007e492066c5fc453f817919145b04efe273afd72dfec1e14473a14aac0cdccf7453b3d554689f221765f55791230bba15521f","ssdeep":"768:T5WrrP5BgkOzDENLRqvqNvg7EWoQiaEsZzHv1gWKt6xloeiVhtXv:TQrAkNVNOpv9Jofv","tlshash":"1ff2d0bd79624911c14de479e03b1732abaed953b2b8084f31c70d2646e5bc9be9b30d","first_seen":"2026-03-22T12:57:40.91291Z","last_seen":"2026-03-22T21:54:26.687351Z","times_seen":3,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp6/WhatsApp%20Image%202026-03-20%20at%2023.17.57%20%282%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp6/WhatsApp%20Image%202026-03-20%20at%2023.17.57%20%282%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100711\r\nlast-modified: Sat, 21 Mar 2026 03:08:59 GMT\r\netag: \"69be0bcb-18967\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100711,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 810x1080, components 3","md5":"6b309d5bf3b363e9da927e5414d6826e","sha1":"900ae4c3fbd03ad3d6d621f4148d6b1d64ab492b","sha256":"2d65aa65069fba4760c9355cf56e6938e769280f96d2f371f87a933198d686c0","sha512":"f07daec121c218f88b4fbdd93188b1520a8cfab7490ad93e3c459280b5045eb4142220c7bde519ae6bff89397e24d5db50f228fa6fa3a3dc7562bbb523de851c","ssdeep":"3072:VAyiAJZtF9jANGF+dBGrCYwsK8OejRH6oHN9yI0H:VVjZsNsfCYwsBVlKIK","tlshash":"62a3123727fb954f8a0f93fec6fec50f2f18a2838a1165f48565abd241682907d39534","first_seen":"2026-03-22T12:57:40.939966Z","last_seen":"2026-03-22T21:54:26.688156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":646,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto4.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto4.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 316496\r\nlast-modified: Sat, 21 Mar 2026 03:08:56 GMT\r\netag: \"69be0bc8-4d450\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":316496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"5383962f239703aba51b317fa3b81c57","sha1":"b8b1468902cff34055285086248dc74f62736991","sha256":"d425714a5b41fb65fe1698d93a8850c28dce66e66793d167938a470e34b5aa55","sha512":"fb89d277969bb64b25da99be5c3858a98d868e3e7d0032dde685e3324530badaa4d9415c2abdc84c3002ac7243b75185e035471e42a13afe67c335d948963dd9","ssdeep":"6144:WMOvEDokPncCK2R59s2ym75P+85IYStVBk/ej42exBz8:Wh0okPcCK2r9BySGGnKBk/l2WBI","tlshash":"3e64238cddd98ed8d5bc64ec7a900518301aafa7d12c445f87d7bd2061b52363bfa09d","first_seen":"2026-03-22T12:57:40.931488Z","last_seen":"2026-03-22T21:54:26.689012Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":1398,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp4/WhatsApp%20Image%202026-03-20%20at%2023.16.09%20%282%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp4/WhatsApp%20Image%202026-03-20%20at%2023.16.09%20%282%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 203985\r\nlast-modified: Sat, 21 Mar 2026 03:09:02 GMT\r\netag: \"69be0bce-31cd1\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203985,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x964, components 3","md5":"b0006dd6c330e44eb92b12bf0e6e7cb7","sha1":"27e68ed6ec7480f12c66f61cbdae6bedb221a90c","sha256":"c287b4909c7de72800bacb0f091239765d12285a85ea443559aa1172156529a6","sha512":"35da39a196fb5d6a5a48cd7fb472d6375aaf5e3eef2fdfe303e11974ba80feb5101f850a62b8a74ef0ed91852844d78b91111ed954cc1380cea3ff4eb7d49234","ssdeep":"6144:lk9mJ1Bh5GxvoHPh/40+mcTPqM6YGyUbJprbIhFPkI1gv:lk9mJ1Bh0xvoHp/4BRTPqM4rb+M","tlshash":"bf14239472d3c56a18e2fac228c71218f065a6e57b4188bf71bb7f7cea790b9c18d051","first_seen":"2026-03-22T12:57:40.932642Z","last_seen":"2026-03-22T21:54:26.689853Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":868,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.corridadodesconto.site/","fqdn":"www.corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T21:53:50.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:51 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://corridadodesconto.site/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T19:49:09.059463Z","times_seen":17805050,"resource_available":true,"data":null}},"time_used":1404,"timings":{"blocked":589,"dns":146,"connect":219,"send":0,"wait":220,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"www.corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp5/WhatsApp%20Image%202026-03-20%20at%2023.17.23.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp5/WhatsApp%20Image%202026-03-20%20at%2023.17.23.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59413\r\nlast-modified: Sat, 21 Mar 2026 03:09:02 GMT\r\netag: \"69be0bce-e815\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"c1d50f778159150708e902365284244e","sha1":"b31cd13e1ac1ecd73189c9da0379629ec177ec55","sha256":"a9f0c019dfaff62f5d90c920c58737af8e9b685d9636c82db9fa6edaa05a7285","sha512":"12196549594f6e5149730a12295b6b8323ac4fb2d1f420aa3f20bf45f2e9003d299743a1c723f212bc71868f1b942669a0c76a4e7b73a36ede2a9655c1c2daeb","ssdeep":"768:pUUiHzOG2g+i6NFy+o5e6F4T9KG46feeWKjR/toX+/CXcxnvtwvXXswZuo+49bTx:Tic5XyleMgKG4ajRu9UFwfswB9bPcG","tlshash":"4543e212734271a1db7eac74f7989a660343f7acc6f7821c65104daf29850a773ee50b","first_seen":"2026-03-22T12:57:40.933545Z","last_seen":"2026-03-22T21:54:26.690976Z","times_seen":3,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/favicon.ico","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:53.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\netag: W/\"69bed0d7-2aeb8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3bad3520c3ab0f5233f7d54574a7cc5","sha1":"6078aa6ca0b37ffb3072bc92d398612fbdd6ff93","sha256":"26250c00a662df4260e0abee45f02d5bc31a67c83880fc8ca0e3cecb0e3920bc","sha512":"cac172e41b1812ccbba59aaa6878320954805a162789df8b347189fc8016caded2d7345a2d6201b31d63c0823f5f177024fbcffc64c2764b9604f2e564e30d83","ssdeep":"1536:0CDduPFRTsXenwVv+tGsi3rRRj80Ma3hIfFUmrtRHhoynTRDwX:0xXTsumezWX","tlshash":"ba04a56696f3043d241380696bab579a3764b103c60ec6187edd13944fcacdaee377ac","first_seen":"2026-03-22T12:57:40.903233Z","last_seen":"2026-03-22T21:54:26.656866Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potes/foto9.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potes/foto9.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 433975\r\nlast-modified: Sat, 21 Mar 2026 03:08:56 GMT\r\netag: \"69be0bc8-69f37\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":433975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"94c45c811c52a246e03f7adc15c91b42","sha1":"eb5d936ac0573ae9f87e8a10c80aa9437cec353b","sha256":"99c27e0886be23c91357d172e287278c9004f45d9ed0c0504d2620471aa89730","sha512":"84639733a78367ae4cd7bea9952827e628aa498955b25fac218c6850c3f830dd7ac49a6acd950b77dcbd8813f041f7f1800a491ec6d9fae20e3d6544262b2ff5","ssdeep":"6144:1Puwu2ihxB2aXF23RgkEvvz61BEFmbZRPwntq9/0BxN29IqdbxvgjpKMPENYoMDU:UdhxFLv4EFmb7QBxNmdtvgDfo6Jy","tlshash":"d69423af7df435438b30b0d1a6a05c4528181eaa3cf187a4bab617d17be746731b1ec2","first_seen":"2026-03-22T12:57:40.935736Z","last_seen":"2026-03-22T21:54:26.691574Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":1541,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/organizadordecondimentosrotativo/foto1.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/organizadordecondimentosrotativo/foto1.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 308297\r\nlast-modified: Sat, 21 Mar 2026 03:09:05 GMT\r\netag: \"69be0bd1-4b449\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"02bfb181587aa86e026aeb23f5cd0288","sha1":"a44478b3a96b3a9effdebea628c91502e0d10a00","sha256":"4a8541806b8305e2c1b6421d266f4ac62459bcf15ef4b172e97d6bb60ba12a3b","sha512":"19daa72b8b3f0699a967d9cf63dd941ac4145f374fee3914b733e9d01ebef6abecfde14131d8506cff0649fd5e72005e1a675b4750a44445b802e4ffe3d00c72","ssdeep":"6144:PYLKbazitSsCb7AKCcP6b5WSTOcJ9ZuuQ0QocQklTy7M9sGVbtBbVis5/QbK:14sS7A7G6bcSXJXuuQXTy7vGVpBpiUkK","tlshash":"786423320808e095cc6925fb515b47afe1f9e78200dd48a83f41e05daaf7fd266a56f3","first_seen":"2026-03-22T12:57:40.941416Z","last_seen":"2026-03-22T21:54:26.692479Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":1367,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp4/WhatsApp%20Image%202026-03-20%20at%2023.16.09.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp4/WhatsApp%20Image%202026-03-20%20at%2023.16.09.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 170239\r\nlast-modified: Sat, 21 Mar 2026 03:09:02 GMT\r\netag: \"69be0bce-298ff\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170239,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x1032, components 3","md5":"cc74623b21eea7bb81e5cbb34900bbd0","sha1":"bc322c481aee2942f03db3b15ae6aee2cc307e89","sha256":"92acfbcb30fb1a82762c9cc5a2a744ae1cfd26197c8d7464da2d1c6e0291d760","sha512":"a0d145ab16403ca82e32281270ceef7bc11dc2ac2aa6a9011c69dddb6280c42aea5bb0db57aae292fc239831bd5d1efef17882bb16c8e6d8d675ad12fa38a20d","ssdeep":"3072:l3utzSjixtsiv4ME+xdBQbkmiA8SNHCzbV4jdSzmMe0W6odUA7JeSf:l3RotyMBxdcHqQHcV2JGtw9eg","tlshash":"84f31297b7062a0247a8af73a8c6234111f2d354e5eecd3ded9235ef66e057c361811a","first_seen":"2026-03-22T12:57:40.953851Z","last_seen":"2026-03-22T21:54:26.693285Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":685,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp6/WhatsApp%20Image%202026-03-20%20at%2023.17.57.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp6/WhatsApp%20Image%202026-03-20%20at%2023.17.57.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72517\r\nlast-modified: Sat, 21 Mar 2026 03:08:59 GMT\r\netag: \"69be0bcb-11b45\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72517,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 810x1080, components 3","md5":"a319194c9e19bba15c2d814368d70d80","sha1":"168d80adf1f9f305d1ba1b2fd47a2d9e8298fd24","sha256":"b9e38e0d718de0908c91f1d7a0e78a3debe83275b1c0e6c89f250332d71f36f1","sha512":"64a06eeea99371ca8fd7da9fe94045d8c9c14f6e5c2b72b1be834090f17f2be328659f2228effec04972c477d45cde95c7b388d67604c7bcc1a05686c765e114","ssdeep":"1536:EKIq2jZyVVHjZy6hkT5XU2eKmNxjDp0JQ7/CFvAY9GqLtjC1e5:AbtMVHjsgku2edNFauDCFvN9G4RCo5","tlshash":"b56312aa1913c19134e1f9b8e51de2820c21f30f2fa5cf0a7e4553e95229ce4ba99d8d","first_seen":"2026-03-22T12:57:40.955424Z","last_seen":"2026-03-22T21:54:26.694135Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp1/WhatsApp%20Image%202026-03-20%20at%2023.13.18%20%282%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp1/WhatsApp%20Image%202026-03-20%20at%2023.13.18%20%282%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89591\r\nlast-modified: Sat, 21 Mar 2026 03:08:58 GMT\r\netag: \"69be0bca-15df7\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89591,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x1080, components 3","md5":"1ae3436ddce57d8d32e05eed025e2d82","sha1":"05cd532024d97e8f7ed0e0a6d9ab0a7a6a3ffb66","sha256":"9976b3373da1d1d7ed523d6ccbe5ed115987457faf0f104723e2ad6670b86373","sha512":"5ba2dc8f1430b033b45c21dd48b34bd8d27efafc22661369975a4be0001aaedfde0050bfc507ba5dad02e29d1ca2c9415011b3f632b8595510ed23c580cb4ac6","ssdeep":"1536:6mGq+Tee2Yqr5Aio1Qr2Iv0QP3aDlqtCkojwpQ6BT2y1vCdjzc5EVE:6mG5eYcai4CYQvwlqtCDuTB1vC+L","tlshash":"ed930239bf842482d4e7cb7c88a03e73bf2e9243acb6c61955c25458f75308759e9b34","first_seen":"2026-03-22T12:57:40.920959Z","last_seen":"2026-03-22T21:54:26.694614Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":1195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/potesdetempero/foto1.png","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:51.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/potesdetempero/foto1.png HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 535014\r\nlast-modified: Sat, 21 Mar 2026 03:09:04 GMT\r\netag: \"69be0bd0-829e6\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"370c09bbe456b9721affda76f6f15b36","sha1":"c420483e29e26f33f6d221066305ce1d6b79402e","sha256":"eccdcc64423044c8b2312f4cac68e667417172760aa2a494a2431316fdd4764c","sha512":"c3903db0a2e84a5b67f4bd0c5df6c0ec96b73eeb158bd136ce37386661b2449dd475575f585f4c12237c3492b44869897a9dd3bbda287947aaf52fb51c62f5f1","ssdeep":"12288:R89wfGWez1yb6u6cEiC9KatrWEkr8JbGvTJH7lLkXbex3iHK:R3eZyGgalPUvTk6yK","tlshash":"5cb423e1a48a14f86a671045429d58f41fba360c2f21dd29f0b6ecd22fdf5b87079f68","first_seen":"2026-03-22T12:57:40.94862Z","last_seen":"2026-03-22T21:54:26.695419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":1335,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp3/WhatsApp%20Image%202026-03-20%20at%2023.15.36.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp3/WhatsApp%20Image%202026-03-20%20at%2023.15.36.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 166922\r\nlast-modified: Sat, 21 Mar 2026 03:09:02 GMT\r\netag: \"69be0bce-28c0a\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"42c8d74d039ddc2402574b7ce90dadee","sha1":"f6a2b6c40c3f5f7be6b7f9f92b60ee420fe2c953","sha256":"9971df671fb5dedc812f5c000a62cb98bc4e389d36ccd5bac25f5c665e092b48","sha512":"4078c40b63abe3cea0ebc4706a24afc1b21281ac7755aad2e5d01aa30bbf15accc631a7d4f76ab849769ba0bf885819f847dc0a4845c4060404b14f6c967cddf","ssdeep":"3072:JNLN+v0ywYRKG09U5NKPrmbukx9P2vwwfr0sz06v/31rwBe7iHXWdJsTyet4cIot:JNL+0yI9UDK8QoEr0szv1D2HXWdJsTyM","tlshash":"1cf312def7f90605d0654fb0b95b6991ce1e148008afc67dfae69d542aab1cf28438e0","first_seen":"2026-03-22T12:57:40.922301Z","last_seen":"2026-03-22T21:54:26.696119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":682,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp4/WhatsApp%20Image%202026-03-20%20at%2023.16.09%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp4/WhatsApp%20Image%202026-03-20%20at%2023.16.09%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 216853\r\nlast-modified: Sat, 21 Mar 2026 03:09:02 GMT\r\netag: \"69be0bce-34f15\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x1044, components 3","md5":"5f1697bfd8f6cfe82a327d749ba000e7","sha1":"1e80c41ae1a5dea4c1565227b0eeee60758d2432","sha256":"7d0ba69969633afcd274e0e5e297181cb4afcb5e2bae2312fd88e60c6889789e","sha512":"cd89143d1b1ce7fdde699eaacc6fbc298e4c612386d7fac34bd22242bd97849abd184c4960bf6abd8b7b342bedb01ee6b6b9e83f6a417dec3b373ae96ec3eb05","ssdeep":"6144:Bd9VWhPi9t9DONrHBIzVuyxpehhZT2Di90N36kzt:Bdyhq9tFiBTynmZT2jNNh","tlshash":"2e24235729ad3e814ce8a872ccd96a1e07b73c0611e4f409e5046e6fa436bc2ffd1395","first_seen":"2026-03-22T12:57:40.928828Z","last_seen":"2026-03-22T21:54:26.696861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":864,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp6/WhatsApp%20Image%202026-03-20%20at%2023.17.57%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp6/WhatsApp%20Image%202026-03-20%20at%2023.17.57%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78222\r\nlast-modified: Sat, 21 Mar 2026 03:08:59 GMT\r\netag: \"69be0bcb-1318e\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 810x1080, components 3","md5":"99f75a5f17c24d57b8ae06266acc4b5b","sha1":"3d50737dc6d00f9b83fc79a5740e9d733cecf5d6","sha256":"0f1b063d9664837c4781f81f1914673f3b243adc831de859c50c8b4b882df965","sha512":"22d89670dbcc8cfc1356ae46fb2b32b325ce5c3dd1497e7c0d270db547b9f6f0f9ca84b3086029b36e4b6737345f131351ba7efba7ad6eb042478131131fe030","ssdeep":"1536:qcIu2dJNJDY8QmTqCwn7XmoOiTinflRKK22Ngc:bIV9zxd6kfPK72NF","tlshash":"d4730206f53a4a5cf5adddf2c3652fa0eda29e6835ce1d068debc27a28d3d2917100c4","first_seen":"2026-03-22T12:57:40.949705Z","last_seen":"2026-03-22T21:54:26.697346Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":642,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corridadodesconto.site/assets/depoimentos/dp13/WhatsApp%20Image%202026-03-20%20at%2023.22.45%20%281%29.jpeg","fqdn":"corridadodesconto.site","domain":"corridadodesconto.site","tld":"site"},"ip":{"addr":"187.77.62.110","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://corridadodesconto.site/","date":"2026-03-22T21:53:52.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corridadodesconto.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 03:05:36 GMT","end":"Fri, 19 Jun 2026 03:05:35 GMT"},"fingerprint":{"sha1":"D3:A2:0F:64:78:E7:20:CA:5D:DA:8E:69:42:BD:38:32:AC:D4:FD:98","sha256":"1F:53:B4:92:E7:49:1B:26:F4:B4:94:4C:F7:94:B8:6C:02:DA:D6:12:24:AF:FF:42:18:AD:71:C5:AD:80:CC:EF"}}},"request":{"raw":"GET /assets/depoimentos/dp13/WhatsApp%20Image%202026-03-20%20at%2023.22.45%20%281%29.jpeg HTTP/1.1\r\nHost: corridadodesconto.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://corridadodesconto.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:53:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 171516\r\nlast-modified: Sat, 21 Mar 2026 03:09:00 GMT\r\netag: \"69be0bcc-29dfc\"\r\nexpires: Sun, 29 Mar 2026 21:53:52 GMT\r\ncache-control: max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"20913c4da2f67338f5ea68fd84e41c7c","sha1":"952615a9e9c5e76b641c85a59e42db46ef0c145f","sha256":"8d9a06f96097a03d0b6c1459142944d6a69835650128bf64852a3b1a9a5250d0","sha512":"fcab909a2a0eb92c39ff06052b70c7e3b1690c935e727837558dec107b49a6405a7fecf8944f0bc598b8c1d0f2cc17bfead5867bc10fe1862c073b4a81348f9f","ssdeep":"3072:X9NMpEIFZ/oSUzsMJSU18pjjpS/qIuOIgTIiJ80MlsZOCZJBtHx7:tNMp3FZ/bUtJSUN/IOB7Mb8nj","tlshash":"fdf32301e8c2cba6569bf1f739e63376e4aa17e35392db59910edc048d07405fb2d86c","first_seen":"2026-03-22T12:57:40.95639Z","last_seen":"2026-03-22T21:54:26.698146Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":711,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"corridadodesconto.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"corridadodesconto.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}