{"report_id":"b809abec-3919-4098-b189-4086370a3975","version":6,"status":"done","tags":[],"date":"2025-09-09T11:24:14Z","url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/no.php","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"title":"Log på"},"submit":{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/no.php","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-14T11:24:14Z","useragent":"Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36","referer":"soteria","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mail.nilmaster.com.br","ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2016-07-22","domain_rank":0,"first_seen":"2025-09-05T20:46:46.805004Z","last_seen":"2025-09-05T20:46:46.805004Z","alert_count":0,"request_count":9,"received_data":1769399,"sent_data":5853,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b6a339f15d886ae396790d7ef9141","sha1":"a827d78932c3209a81f19ed1ebc57d229cefe1cf","sha256":"42815fe47a89f91fbfff4a7cbfc80473f044c7a5179b0ddf394dd82b3c0de44d","sha512":"2fea7e19f55ab27713787e3867a8aea70d5c142a7863c89de553828166b4dd15a11217f4f42e9589da6806ab8e34189f20d5447365c9fc4603084103a45c8622","ssdeep":"","tlshash":"17d0974c6d2a00243723c1ed8a9fa384b833b49f304c8a4c3d1a8e454dc2bae27304eb","size":251,"data":"","first_seen":"2025-09-04T22:12:04.347611Z","last_seen":"2025-11-18T05:49:20.178979Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/no.php","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-09T11:23:52.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/no.php HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: loding.htm\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 09 Sep 2025 11:23:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4105,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":1090,"timings":{"blocked":243,"dns":1,"connect":117,"send":0,"wait":602,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-09T11:23:53.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 22 Jul 2025 19:33:40 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1688\r\ncontent-type: text/html\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4105,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e27cde112a7dd8001f15cb7b5ddf785","sha1":"4bba40f8253a2f89ab6a4b626a8acc6a9f3cf725","sha256":"aff798891a3a488f6b0de0e0718eac373da92056c0cc778918cae18398afee70","sha512":"caf9ccf544da3111e994fd37f510ecf542582344ad25441b622b0bc08bf9b054413c6f5c73556245dde3708f4bcf7892a20abeb764c7633599f9f057f7c21381","ssdeep":"96:CAYOwmaGi2qFpRyvMsxW6UZB58QD3ARAIlSXltK50qrj:QO/aGGRyvMssT5kWk50A","tlshash":"ac818728a443100b3633d2b1faa5b709ffb28517d7065a44baed327b4ffa99445535c8","first_seen":"2025-09-04T22:12:04.326651Z","last_seen":"2025-11-18T05:49:20.175062Z","times_seen":21,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/vi.css","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:53.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/vi.css HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 21 Jul 2025 17:33:56 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1541776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"16558b63e527cf0588c966529f4c08d1","sha1":"64cfff96065eceaa341d6f10a1d2965b1c8fc60c","sha256":"b61cfbef57aa1713d2ea68584ab3faa2281dd467575014d6c5b9eb2fd86100bb","sha512":"c8de844e727ef045a80bee3e2b2bb86ac162d55388fc508f197531469c1f4143ae75b40040d47130df7bba0b5c12187d3d3a26b7d9bbb455e99c2d5596e26081","ssdeep":"24576:uIei6d5xO2PtRzw//Y4p1qO7zEcFp2SHlUQspgikJMq+yV/byUZHlAh/+zAtP3ju:3","tlshash":"4a250e43fa600b2a61131ad5218ff5a7bb1d65c6c70aad98b37210481f8d89fc53bd9f","first_seen":"2025-08-12T12:11:16.024205Z","last_seen":"2026-05-08T17:59:30.677211Z","times_seen":264,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/css","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:53.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/css HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 21 Jul 2025 17:33:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 134502\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":134502,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"abad298b32a0c9b6b173fbe2d27aba89","sha1":"1420978a5cf5ebd87a588a8e903073f013c9d23e","sha256":"485671d887f8f137d94949044b6af42ebdf57c463f1f3f251486071c975a4096","sha512":"c8adb368f1f06f5d7e6fcfb86302d9c3ceb9b18ba8286cac2a95ccdaa2bd971e297905a43d6730e1824e7e9d56da5e8ff7aa6e2c1a9444cdb7514a57c7284b47","ssdeep":"768:4HjMuOE9do8IgbX0CC1Uw/1CCVfQELKF0FiFXFEFLBFNKFGFmFLOMreL9NEgAmTF:4DMFELoxgL0l1ltVNNtPyv7l6a12mYR","tlshash":"26d32f91041b644067831ce233de7e30ee0f92547144d076abfd9b9beedada662b436c","first_seen":"2025-01-16T13:22:01.581367Z","last_seen":"2025-12-17T19:59:49.779568Z","times_seen":223,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/favicon.ico","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:54.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Thu, 15 Sep 2022 10:03:46 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 836\r\ncontent-type: text/html\r\ndate: Tue, 09 Sep 2025 11:23:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"11a0bbc52834cf74da795d5815b7dc63","sha1":"5d401cf953df570210427a92d27e00ddf403f4b7","sha256":"c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5","sha512":"bdc773e24231dcc13db01881c1977c091f565d1505ab8fb8aaf7f6565ddcbc36b1943126d51e43e701a49c6c024e9d335b50ca546e8058029844255f2796a62c","ssdeep":"","tlshash":"75418d8348c04d4f3231a649ba5b63a9d982a147cf6e9e40b2de631f4ff2da1c573131","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-05-15T06:58:17.169082Z","times_seen":7161,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/lcar.css","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:53.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/lcar.css HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 21 Jul 2025 17:33:56 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 624\r\ncontent-type: text/css\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"39d443ac69646964feb244087369c679","sha1":"6f77734542fc86cdb2eb81df8b76ef87c5b7c656","sha256":"564a5f7a5a428fe4b61c0a1574ca1f9c073c032d6cbc23f38812fbc5774901ad","sha512":"197478102636c72a2561815a54f2f0423fdc5332dfd1f26037e97e30cc2d82a0d831c92889e9e2db7dac89526706ab48e3604b082445680f71ccc03b3bc960bb","ssdeep":"","tlshash":"3441e34525b17008a0476c763bbf35457219ac46af1ecbe9d5f13458efa0af300a278e","first_seen":"2025-08-12T12:11:16.011592Z","last_seen":"2025-11-18T05:49:20.178509Z","times_seen":78,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/logo.png","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:53.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/logo.png HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 21 Jul 2025 17:33:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12364\r\ncontent-type: image/png\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 74, 8-bit/color RGBA, non-interlaced","md5":"5f5af157b7a567443608522a1ddbfbbb","sha1":"38094fc1b33e4f29f1e835437390b37c73bb2666","sha256":"c6efc46b0a490e58effd258b3f2d587ddec4232ff181e1b128d6d60ccabac011","sha512":"d1f6b76e94ba3cabaf67592e271edd37ddd0b1d85aa4c58929b760a6ae475afb5be2ebf927604c392b4172b9ffbfed94d46c743efdc15e0a29ab47ba0c560c14","ssdeep":"384:cadMIJpy5bDvto8f56VEAEl0XWAYLKkfYx00rr3fs6:vdMIJpCbrf59AEl0XKLJfYx08rvs6","tlshash":"7142d0fe0141c906c35a579a01a7a7703983c638bac6650df28f2363ead65c6b7c305b","first_seen":"2025-08-12T12:11:16.017627Z","last_seen":"2026-05-08T17:59:30.678622Z","times_seen":239,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/mld.png","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:53.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/mld.png HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 21 Jul 2025 17:33:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17417\r\ncontent-type: image/png\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 449, 8-bit/color RGBA, non-interlaced","md5":"441c5e3d7d717b6320d3cceed09aabb9","sha1":"282f1d7025a162a723a31f2d687ffd0b1c33b391","sha256":"616a1b5837a47beeedd31d16d47f7d7a916b50039b4f89c25f4bbf270806d81f","sha512":"6f85fc817c736b8fed70c84623d32530d4402dbdcb595a2c360f3bd8f769b7d07adb34ed1e42564a61de31809fcad6637fdf26b1eaa115c64858c27091897261","ssdeep":"384:la9lpI5Wrd3m1cpMAdZ78dl34RzCEYRKibu1Damsr5jZaRaTLr:laLpFs1cuUi34RCV0amsVVTn","tlshash":"fb72bfb4f952cd7311042b1c837a30f3012a29f8e01aaffa6b49da6957c4899db339c1","first_seen":"2025-08-12T12:11:16.026909Z","last_seen":"2025-11-19T18:59:18.108121Z","times_seen":109,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/cvi.png","fqdn":"mail.nilmaster.com.br","domain":"nilmaster.com.br","tld":"com.br"},"ip":{"addr":"50.116.86.73","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm","date":"2025-09-09T11:23:53.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.nilmaster.com.br","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 09:59:03 GMT","end":"Mon, 24 Nov 2025 09:59:02 GMT"},"fingerprint":{"sha1":"61:F3:8A:8A:59:4C:F1:6F:E6:C9:78:BF:6A:96:85:FC:F4:2F:05:35","sha256":"93:90:D6:4D:3B:71:46:3B:18:6C:BE:18:4F:2B:87:1C:84:45:6A:48:45:6D:AE:30:3E:91:E5:B0:1B:58:8A:69"}}},"request":{"raw":"GET /sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding_fichiers/cvi.png HTTP/1.1\r\nHost: mail.nilmaster.com.br\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.nilmaster.com.br/sounavegante.com.br/.trash7309/ol/wabibabo/mobilepa/online/loding.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 21 Jul 2025 17:33:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48803\r\ncontent-type: image/png\r\ndate: Tue, 09 Sep 2025 11:23:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":48803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 358, 8-bit/color RGBA, non-interlaced","md5":"fc6223ae66bdf46134b782241f7a8c11","sha1":"ca9824da97086de17afde9695daf842b97d7046a","sha256":"e7ab1cb64641500a76ea822e873a2ef91f8d37a95a1615325508d7398d8a72cb","sha512":"cbe0606d544d8738442915b2b59fea5920154dd96744b788844a65cbc6edfa2ad0c3e81cacd4dfe06038fe4193146323842952d2e1a9fbc27f70c3bf65e81fe6","ssdeep":"768:cb43FdfLyFi2Yz+OY21EkamnyIF27kP89rK4b8yT/ZjWmH5Fu4gWUwIou3N8Nefv:e8LsiV6OY8Ek1yXdGVyT/gYfu4/6ou3z","tlshash":"0123f187d264e228e5aac0d8774536f1e37b9de316fc57fd0a18b92d4a317c0882252f","first_seen":"2025-08-12T12:11:16.020666Z","last_seen":"2025-11-19T18:59:18.104962Z","times_seen":79,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}