{"report_id":"c54dc906-aafb-4335-a99a-b42eb9fa606d","version":0,"status":"done","tags":[],"date":"2026-08-31T07:30:20Z","url":{"schema":"http","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"title":"Mercado Livre - Gire a Roleta!","dom":{"size":14353,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4db08d9b56c9d9d1582c1e43ce412bcc","sha1":"62164c252c239d926b387f9a98b4127f7094dc31","sha256":"0b491055a42b40ccfcdf9982c3d5afb8c9bd3665d4d7f8703981e5e1fa3ba1cf","sha512":"333cf34621080b9cd1fb1e0da9a6f02af9b4250ff084af51caf5d3dd30a1baad53a66617861cc61bb1aec222ac50191b1e09f9468c66535262e2b484262ef86d","ssdeep":"384:jdjswY8GgGVPZFwRZfzA1HWLGZaQZlampCbCI/hd22Z5yirMUEpnS0:pswY8jqPZFwRZfGN","tlshash":"c952526766fa247943a311491e872a4f3b309107ee59ed043e7cc9901fcdeeed42b689","dom_hash":"domhasha0362e60a716df7c1dc0da492cf5b601","first_seen":"2026-08-31T07:30:24.917817Z","last_seen":"2026-08-31T07:30:24.917817Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:30:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tracking.utmify.com.br","ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1674326,"first_seen":"2024-08-31T10:04:06Z","last_seen":"2026-08-26T06:14:10.583489Z","alert_count":0,"request_count":6,"received_data":9479,"sent_data":3378,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-08-27T22:02:06.839668Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":3257,"comment":"","tags":null,"fingerprints":null},{"fqdn":"promo25anos.click","ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-29T09:34:25.796928Z","last_seen":"2026-08-29T09:34:25.796928Z","alert_count":115,"request_count":23,"received_data":1207624,"sent_data":11911,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.utmify.com.br","ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":1350186,"first_seen":"2024-02-12T18:06:21Z","last_seen":"2026-08-28T08:24:30.629327Z","alert_count":0,"request_count":3,"received_data":103178,"sent_data":1423,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":469582,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-30T22:54:14.488664Z","alert_count":0,"request_count":1,"received_data":546,"sent_data":964,"comment":"","tags":null,"fingerprints":null},{"fqdn":"inetstats.org","ip":{"addr":"104.21.72.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-15","domain_rank":4928357,"first_seen":"2025-07-07T12:45:33.038332Z","last_seen":"2026-08-29T09:33:20.674414Z","alert_count":0,"request_count":1,"received_data":950,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/bootstrap.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36868,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-31T11:57:15.131349Z","times_seen":22241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/jstools.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a66559b76d0ce4d85ecffabb01518e","sha1":"fd6c1666b0314e1be054b99797765ba53f38d7a4","sha256":"c8153a4d1f0b4cf39fb21a5dd23cf254cc8e1c938fe622e5609eb39b1fdb8b96","sha512":"6fa3848f2f8d113b7bddd4f46200b04953ef5c5fe4e626d9820480112bff4383405372d4d0fda4ac38f502f80b5af170c0021594ec0b68512ffae2eea802724a","ssdeep":"","tlshash":"fff05996b120d2fb85f309e9169ab745b0f30296290998d0159c9c45962df4f4e2aac9","size":537,"data":"","first_seen":"2026-03-17T06:47:12.033646Z","last_seen":"2026-08-31T07:30:24.946672Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff078647e8888f28c23d519571c06500","sha1":"c4e1a1dd18e1e87fa354ca5beb5f064f5cf01abf","sha256":"3afb6ab2343e23bb8b4cdde9b659e3af54c67e1157ff2ea75a2ac02e244f8df7","sha512":"a0e86cd5f29ac5058cd18c72ab595aaa921fdcf362b1afb970589d40fa38f1833e6941838925e6efe26af71147a2ae26ff5c0673f940eabb55f2f7bdc58ab3c2","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/zRj02Icmvva:Etnjfz6RYJio+/N09bKtyZ0A43B","tlshash":"f1039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","size":40498,"data":"","first_seen":"2026-06-14T00:04:44.270205Z","last_seen":"2026-08-31T11:16:08.312929Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inetstats.org/g/s.js?r=https://promo25anos.click/roleta/index.html","fqdn":"inetstats.org","domain":"inetstats.org","tld":"org"},"ip":{"addr":"104.21.72.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7cd98030682f624d138c0ed7cb1f568","sha1":"8684d0a7092c6065ce24361726f6b5c635ea9a48","sha256":"fe95ece5682bc3e1649eb1e1cd69a396c089b40284537c90cb72ab68ed6b580c","sha512":"a753b74fa7972e9bf1b264715d153ebb69adee3374deff42448e80229928974540f1c7d7052a3213c64c342314b4f720783b2f4886f3a5ec26d15bdbed07933d","ssdeep":"","tlshash":"37c02b104f1e87b4203901dbd0e3c3cc583020f8b505c8034007c0b45448ee70ec2dc0","size":133,"data":"","first_seen":"2025-07-07T12:45:39.359476Z","last_seen":"2026-08-31T07:30:24.943264Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/confetti.browser.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"614ca68dbb866caa25b1fc15a314d1b5","sha1":"86ed080b3985cd2604bfa864048aff86a01388d5","sha256":"e4f3d22f12d07be903b8f4756763e691561d9b6f1f3bc47b300f8dd0766a2d98","sha512":"7eadeea6160c5dcdd9a5898b7522439a72124be092bfac05451acb064b1575160c69f1435583f573cf264edca3eb634eb4c2e291f5bec6a9320e93d78d678fe6","ssdeep":"192:7tKPGrnmAPsihR3/dZm9YqgZdWybN6TRbHCTzvP:7QinmMhR+9GZdWybN6TxczvP","tlshash":"67f1b69df7513e160b5322baa84f910ea238b56f170f4484a2b9d5a42dbc41c333ff29","size":7464,"data":"","first_seen":"2023-04-07T21:08:12Z","last_seen":"2026-08-31T07:30:24.945008Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/api/pixel.js.php","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfedb0ce6672cf794b477dcc78f47ab4","sha1":"77ce003640caf15d3a42490cb6fe8f965e2655c2","sha256":"249602a9ec41bd7fd2e4dea60a9929e184308edb50cac2aecaabe09631a135a9","sha512":"7815817262404583b7d7cb43f9abcfd08c2d70682b9b96545e9b2b5535e19cc864cf45508e5e1320c0c16ee63e476e824865dc607a0c1d4f1c3ac6d679616462","ssdeep":"","tlshash":"2ff02bd91d6b943281e75d1727bfe248306321a7e011e010399ddf082f60e8bcf09c91","size":587,"data":"","first_seen":"2026-08-29T09:34:31.144902Z","last_seen":"2026-08-31T07:30:24.926487Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"944180892603a8887e126b1a2aca415a","sha1":"f3f1e4b6669f369d9a12b9c196969863f98db9f3","sha256":"efdaacdfe976acea46ce3584d8f2461e42cf26c4ace4bc9b5d9c968259ef71ae","sha512":"b010655a5a24a8f4b78524fec1901463bb1c662958a7da0b4d74a0443f775b2589357ae5aa9c9412aacd644631f317c24c71315a2c90f1932e9610c9e9c11e4f","ssdeep":"","tlshash":"2dd0a77e197867b3a97610dbe87a7b893c85b53e5442d157428ecd8a3d0dd571cfc010","size":259,"data":"","first_seen":"2026-08-29T09:33:47.230883Z","last_seen":"2026-08-31T07:30:24.950427Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f04a13507f9c3526d9a67cf74e7b06a8","sha1":"d395d23fea3a7121fdbe7905cccb8397cb9fb13b","sha256":"ff4fcb63c719703c9aca26bc4a2b8eac203c0173fd183f4934f92ea91ea993ad","sha512":"6f59549a398d930f8838b48a215d4a0cc3e7201e2533cc5299fb66ff1c3e9c2dce6447c89f0ea6e36aaeed9cc2138aa66182151df79cd608e46270648a1e73df","ssdeep":"","tlshash":"5bd0a57f3d64677319665047987b77543fd5643d5452d12b039dcc8e2d0ce8108bd051","size":272,"data":"","first_seen":"2026-08-29T09:33:47.233054Z","last_seen":"2026-08-31T07:30:24.951184Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5537a704c5d1e28cd26f59b3e393bfab","sha1":"c61e08ff929d1c680f66980dc1c6dd075d96f6d8","sha256":"29b74281c9c971701183a6da858e8fdce1d30e2c5a4b274d486894b2bbfc61e1","sha512":"b4b7674d4ac4b3a0d8f8cc6da68bd5bf11394fce0291408c287d7cd26869f62332aca5999afd4fdd941b0b20d70d58d8f73adc7520fb9c9f8fee947a7e7a8e86","ssdeep":"192:+WzABTH9a0+LGZaQZlampCbCI/hd22Z5yirMUEpy2SI:dzA1HWLGZaQZlampCbCI/hd22Z5yirM1","tlshash":"9222cf6763fb246843a321590f472a5b3b315147ad59e9087e3cca501fcddede03a6ca","size":10029,"data":"","first_seen":"2026-08-29T09:33:47.234773Z","last_seen":"2026-08-31T07:30:24.9519Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/utms/latest.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"095e507c5a14a41feced352c26dd729b","sha1":"7f46093ebba00fec47f53c6a8082656e31a48267","sha256":"599af0d6ba0795a397f44815d223d4fcd968d57f176b167e8a69ae8283b8107b","sha512":"39c84ec76af96473ea5a379b55be4c7d9dc1648ed55feb5a57539ecb0a3abf88de154c077e71d1848d34a972769e9c566055ed4e41bfe7ecc13c4296ae789811","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NUGwNviLDFzI0M+urGc2ecbsbSdlaI5:uszukMaPJEuYEsOj7ZudQ9e49d3NUGwq","tlshash":"7e9297a4f1aa909416b28cbf40b75232f22cb725b145c180a54f5d89345eeeb63f3d7b","size":19449,"data":"","first_seen":"2026-08-12T12:45:50.348589Z","last_seen":"2026-08-31T07:30:24.931438Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/latest.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dd66cc0aa8428537cd8258d211afec4","sha1":"366ce9cc7a1cb9ee6908c14bcf18ad0edb7bdf77","sha256":"d58a0651391fea6f2538b1e81138bb458e0418b37bc73b445b34bd9100d67f7e","sha512":"93963dff2b741eeac105a4f00887eadc73699410c74f16da2f4c2b8f579a5d58e008eb64b00e9cd72bf247eff8ba1bccdfc8d665aa9d34743625a88f3ebdb026","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NURxeCiHDFzIlM+urGc2ecbsbSdla6t:uszukMaPJEuYEsOj7ZudQ9e49d3NURx3","tlshash":"d49298a4f1a5909412b24cbf40b75232f22cb735b145c180a54f5d89345eeeb63e3d7b","size":19506,"data":"","first_seen":"2026-06-23T14:07:39.965421Z","last_seen":"2026-08-31T07:30:24.923846Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/jquery.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d36ebce3809e275245efe5ea92f6e411","sha1":"fffa39ac2b7f468b9bf38f99fa73a882ee37ad30","sha256":"94d3359ffb8cb6c50c43b62d9d144313570981034da174d7320192be940e773c","sha512":"213d20fbe0244dfa74ca5881aaed1ff5ca9d4fda109ff7c7aac867ebc36f915ca869cf3c05874ab2490d84bc7ceed657dd42b47060bf67f41e415a64ce195915","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUJTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9M:t4J+N3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"9993d7d9b6d6706287b734b850bf410bb17aa8eab40c4c60e058d8e47e74e9d507bf2d","size":97600,"data":"","first_seen":"2026-03-17T06:47:12.028852Z","last_seen":"2026-08-31T07:30:24.944206Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18412421659","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be56c9593de5a48a12d05af690a502bf","sha1":"82165abc5bf7f5ddaa703e7359c86936596cc983","sha256":"e5ab744afe6879887e2134ade73ed3325a5299ac810e718631d2e12da5e3fa06","sha512":"39976933046a539216ce4ae027e23d29e92c9c6ec3c07b2c25a4dee6cf8bb45921fbcce7c60bbab9e6cd5538ce2f8d658b3920222ff6aec65149a665a7a5b13a","ssdeep":"6144:+L6Ntu47i6mInP9RaUvvccUQ/xEkY3Uc6xfO/adcfKQA:+Oa7PIftvfxIadcCQA","tlshash":"f7a419cdb3d674229392f574903f018bb67a29a2b84cc895f289dcd42e3459a4277f7c","size":468978,"data":"","first_seen":"2026-08-31T07:27:05.055424Z","last_seen":"2026-08-31T07:30:24.935181Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel-google.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4c673c32c09960c65aa780d6289520","sha1":"caa54e28bcaebcfc3ce7e7b5ad7be077f6330ba7","sha256":"edb5504c63a92d3c2eda5e4b8ca6be450dd546db2c0beb2d3179420d11cab5d5","sha512":"5a0a939db523c4305f9c9feca4e96a68546a6d915d77ddf6119d444b7be72902a02dc01f290e5741c130fa439529a782560b61ed5301483fdd907c275212d3bc","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/TRjU2IcEVv9:Etnjfz6RYJio+/tU9vKtyZ0A432","tlshash":"9d039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","size":40502,"data":"","first_seen":"2026-06-14T08:04:00.23828Z","last_seen":"2026-08-31T07:30:24.942222Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/3bb7a9c9-fa70-47d3-9dac-7af546d1d352","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"0b264f98bdccda2c3c9bb4a0c6f681fa","sha1":"7f563a0c47c06f2b43399ce4730bc047341b2067","sha256":"52dfc67da32a0bd7106b8cd7b016c5d76e6065b853b9b1d7dd581d6b7486108e","sha512":"124a0c4e231ce3c1f7168f5bcface83e2ab179d63c8121a5af3f9df51c408a69aa4d9fcda2350933d214ea030fcce2d70f5d99d0f93847c26db23a614704d5d5","ssdeep":"192:ktKPGrnmAPsihR3/dZm9YqgZdWybN6TRbHCTzvQF8zGsGAh:kQinmMhR+9GZdWybN6Txczv8VFAh","tlshash":"73f1a99df7513e1a0f13327a985f510da139b56b170f4544a2bc96a42ebc81d333ee29","size":7605,"data":"","first_seen":"2026-06-18T17:48:02.554981Z","last_seen":"2026-08-31T07:30:24.952599Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/jquery-3.0.0.slim.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7846af619b5aa7859af14291d8375d","sha1":"3e818ef47246acaf4bc608aaa6ae6b6186e5a097","sha256":"beb66e38b20dc486e50de380cfd1affe9f952032e19be1eab9becc89a954f48d","sha512":"52c6dbdee03c6ff5959d603dca8d89d2a2e135b438acb8e80c1a6a01ef347b7f2d7b16a9dc32cb3e9f92ba91cf6aad98f64f76792a300863bb653e4b68c95f56","ssdeep":"1536:u5hEyisTikEJqRdXXe2pP7lgoVMEXDdVhvL5Sh4xzAdXtqT9jnx3w6m1DU8Cu7:0QGDHhvLzzuXkT73Y1DU8Cu7","tlshash":"4563c4d9b2d67052d77730b850bf450bf07a98dab44c8d60e0a8d8e47d78a89817bf2d","size":69361,"data":"","first_seen":"2026-03-17T06:47:12.032612Z","last_seen":"2026-08-31T07:30:24.940615Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Tracker Meta version 1.6.1","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":40427},{"level":"log","text":"Tracker.inited?:false","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":29779},{"level":"log","text":"Tracker Google version 1.5.1","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":40427},{"level":"log","text":"Tracker.inited?:false","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":29779},{"level":"log","text":"error on getIpv4NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":6603},{"level":"log","text":"error on getIpv6NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":6603},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj40 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj41 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj42 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj43 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"error on getIpv4NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":6603},{"level":"log","text":"error on getIpv6NetworkError when attempting to fetch resource.","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":6603},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj46 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj47 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj48 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj49 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"response for 6a5261d78277f60546ee8d54: ","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":20281},{"level":"log","text":"response for 6a5143f9a6d5d982ee4fe71b: 1683000296293647","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":20281},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj90 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj91 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj92 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj93 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj94 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj95 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj96 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj97 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj98 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj99 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj100 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj101 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj102 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj103 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj104 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj105 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj106 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj107 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj108 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj109 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj110 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj111 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj112 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj113 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"response for 6a5143f9a6d5d982ee4fe71b: 1683000296293647","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":20281},{"level":"log","text":"response for 6a5261d78277f60546ee8d54: undefined","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":20281},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj114 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj115 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj116 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj117 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj118 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj119 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj120 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj121 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj122 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj123 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj124 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj125 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj126 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj127 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj128 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj129 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj130 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj131 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj132 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj133 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj134 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj135 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj136 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj137 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj138 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj139 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj140 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj141 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel.js","line_number":1,"column_number":7984},{"level":"log","text":"buttonsmap[actor:server1.conn0.watcher17.process7//obj142 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj143 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4425117483388379] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[class:runSpin id:button-cta] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj144 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.4026843516708344] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:try-again-button] attributesLength:1 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj145 class:HTMLButtonElement contentDomReference:map[browsingContextId:3 id:0.5520499939612198] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[href:responda.html id:resgatar-premio] attributesLength:2 isConnected:true kind:DOMNode nodeName:button nodeType:1] sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://cdn.utmify.com.br/scripts/pixel/pixel-google.js","line_number":1,"column_number":7984}]},"http":[{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:55.839Z","timestamp":1788161395839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://promo25anos.click/\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:29:56 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B40%2FjgVcypDRoEDklwzyCCCQSw5VMRjgjg%2FF6lCJsezqgj%2BmW7lWNTAfs%2F0yITHptwWAKOo2aemhzIGJ%2BzpBYD98p2VKkgolRzUz5H72RYm%2F7w3NlJfbKBs640hODnCNJQKg0sLnjAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a53b40d9fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1326,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/W3wf26XX/14.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:55.845Z","timestamp":1788161395845,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /W3wf26XX/14.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/roleta.png","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.080Z","timestamp":1788161387080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/roleta.png HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-33313\"\r\nexpires: Wed, 30 Sep 2026 07:29:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209683,"size_decoded":207354,"mime_type":"image/png","magic":"PNG image data, 692 x 845, 8-bit/color RGBA, non-interlaced","md5":"c717f36b6718e3db7cc0477a6fc75009","sha1":"9d291292fe9828cc8f4f1358f851b31d5ed6499c","sha256":"b9c9c7d1a705f3cc32b8e59a2565a1d72d7a9d066f7a452b369c3200e00919f1","sha512":"6e10ce547b89a5bca3855eea8edb23904ebdbf11c2435fe5a6afee18732b8238fb449461287cd36c7ecec5925f6f9b430abc7d304de192811742da57fee29492","ssdeep":"6144:CqBfXwP3siYa068tzZxiPL2qqCy1mXbGHlTBxbO:fdO8iY7Z0yqq91gbGBB1O","tlshash":"8b2412c767d1c21bd4c129a698629d26e11b385dba66cd7cb830ffef0e1920c6641c6f","first_seen":"2026-03-17T06:47:12.009626Z","last_seen":"2026-08-31T07:30:24.922091Z","times_seen":15,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/css/stylead8e.css","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.878Z","timestamp":1788161386878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/css/stylead8e.css HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-3049\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":3175,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"be05f88498532d900c04f13e32ebbd28","sha1":"b63331df46e8afa10dc04de8d7e233d73039e1bd","sha256":"8e2820a7b16ada227558ecd619f88184e6fc772d8f2b960591e43fc24ae25ff5","sha512":"d342edb5b87b5769383bb2a911f6837095f4da06a90c457fafb647a69cdd7d90f66a61a063d6911a4bfdaea65f4071a709b0d50da876c8efff19c8b71e4be8df","ssdeep":"192:ml33nqMcgGkJHMHJypeXbm2fGA5RIOPsUa8UF1zwOx6t1U7mTQunHzLxnJdhZkto:0A7Et0D","tlshash":"91420f66dd025046f23797686ff24b69e7aa40139b0246b97fdc72858ff42ac0161fcd","first_seen":"2026-08-29T09:33:47.20485Z","last_seen":"2026-08-31T07:30:24.922889Z","times_seen":13,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/latest.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.070Z","timestamp":1788161387070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/js/latest.js HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-4c32\"\r\nexpires: Mon, 31 Aug 2026 19:29:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19506,"size_decoded":6616,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19421), with no line terminators","md5":"8dd66cc0aa8428537cd8258d211afec4","sha1":"366ce9cc7a1cb9ee6908c14bcf18ad0edb7bdf77","sha256":"d58a0651391fea6f2538b1e81138bb458e0418b37bc73b445b34bd9100d67f7e","sha512":"93963dff2b741eeac105a4f00887eadc73699410c74f16da2f4c2b8f579a5d58e008eb64b00e9cd72bf247eff8ba1bccdfc8d665aa9d34743625a88f3ebdb026","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NURxeCiHDFzIlM+urGc2ecbsbSdla6t:uszukMaPJEuYEsOj7ZudQ9e49d3NURx3","tlshash":"d49298a4f1a5909412b24cbf40b75232f22cb735b145c180a54f5d89345eeeb63e3d7b","first_seen":"2026-06-23T14:07:39.965421Z","last_seen":"2026-08-31T07:30:24.923846Z","times_seen":155,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/25gVzM07/21.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:59.871Z","timestamp":1788161399871,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /25gVzM07/21.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/x8Wj92sv/11.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:30:03.909Z","timestamp":1788161403909,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /x8Wj92sv/11.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/css/all.css","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.874Z","timestamp":1788161386874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/css/all.css HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-d6db\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55003,"size_decoded":12579,"mime_type":"text/css","magic":"ASCII text, with very long lines (54818)","md5":"743c2171ed2227358b7950530fe524de","sha1":"d44ff8b5c491d564cc737e913a5cd52bb43a9c6b","sha256":"473fe74f734ab33a5bf90d082ecb1751ce59541517a017a6dcbceea502c7363b","sha512":"83c8c357f682e907eee69ccff7a59de605d232c8b4f1529783595e5bf9d4907fd0436eec168942c8b044ee0dfb7cbb0dc5dcb05c6575daf27278377dcc6ff289","ssdeep":"768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz1:gu5PWC4/vzH5BCkgc7zsi5","tlshash":"9f330ab8e54c41c9a732c44fbf82b2bc61b6f73ce5914d95f00e591c2ad26a811c9fb9","first_seen":"2026-03-17T06:47:12.014684Z","last_seen":"2026-08-31T07:30:24.924779Z","times_seen":15,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/css/bootstrap.min.css","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.876Z","timestamp":1788161386876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/css/bootstrap.min.css HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-1d98a\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121226,"size_decoded":20591,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"ab85f17c72c094c53e4c0b285608704d","sha1":"4a9392be6892bbe5d322e942aac5c6a2a4ea983d","sha256":"fcc7b4257f59535b8630483006f84c2f7bd17174e75aef6c157464b29838d915","sha512":"1b90adc87cc194a46f7a8f8a642238e32b7b55832d0be844f7dabb1fad91056fa705fbee59882d83fd63b5889795540b148ab01ed5f8a14de62f489a26380551","ssdeep":"768:lyAGxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Kw/o1BIuiHlqLmN8lDbNmPbh","tlshash":"99c3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2026-03-17T06:47:12.020413Z","last_seen":"2026-08-31T07:30:24.925703Z","times_seen":15,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/api/pixel.js.php","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.065Z","timestamp":1788161387065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /api/pixel.js.php HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":587,"size_decoded":970,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"dfedb0ce6672cf794b477dcc78f47ab4","sha1":"77ce003640caf15d3a42490cb6fe8f965e2655c2","sha256":"249602a9ec41bd7fd2e4dea60a9929e184308edb50cac2aecaabe09631a135a9","sha512":"7815817262404583b7d7cb43f9abcfd08c2d70682b9b96545e9b2b5535e19cc864cf45508e5e1320c0c16ee63e476e824865dc607a0c1d4f1c3ac6d679616462","ssdeep":"","tlshash":"2ff02bd91d6b943281e75d1727bfe248306321a7e011e010399ddf082f60e8bcf09c91","first_seen":"2026-08-29T09:34:31.144902Z","last_seen":"2026-08-31T07:30:24.926487Z","times_seen":4,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/man6.jpg","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.082Z","timestamp":1788161387082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/man6.jpg HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-14d0\"\r\nexpires: Wed, 30 Sep 2026 07:29:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5328,"size_decoded":5758,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 201x201, components 3","md5":"d764b28a288a2f8ee2901d17ab7ed88a","sha1":"2804e7911cf40e850127a5f6a350529cdc6c416d","sha256":"2de4d68a3741c63389d790cc6b4181636736a0fddef11cae7425d5ca4e77a10a","sha512":"8f241a56266786452cb8d6d60d021b5f448c4e85264e539af066eb075699e5aff7e4f137131a59a6d02dc84b5ba95b18964378ee1ed7fa90be394f5c394f9c32","ssdeep":"96:NIJFziHpwS1ixqmy2Io+cvXU72Z/LkaNENCITh6KY5iIqExRi:NIJRiHpLrq7+ukPaNohDO8","tlshash":"e2b18d95f4ab092fef0da536df1213b186205b15a4748307d9d44bf8bfa9c884ee6290","first_seen":"2026-08-29T09:33:47.180352Z","last_seen":"2026-08-31T07:30:24.927256Z","times_seen":13,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/css2-5.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.146Z","timestamp":1788161387146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/css2-5.html HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/css/stylead8e.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 21:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a90a611-7e2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2018,"size_decoded":1435,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"65d35cc6ab167ed406763545fe46e057","sha1":"6ead0382bdd11024f8d4dc025c614cc59163c3c9","sha256":"b8084ef9ba567e8fb0c01f0d8be6cfb58360f6c2434a05b3ca5375ca9220b5b4","sha512":"3698bd2ccf2be8974daa4b6801e65b4fe97c9fd0da5001deca6cdbcfe88edd1e6215fa4ff3ac07f3ebd678709649f05adefe42c70379025a201761627dd79a69","ssdeep":"","tlshash":"d241983f59d1623760270056f972f74c3a9c91259043cb6226cde45a7e4cde709a75c0","first_seen":"2026-08-29T09:33:47.464939Z","last_seen":"2026-08-31T07:30:24.928104Z","times_seen":6,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/media/ml.mp3","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.726Z","timestamp":1788161387726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/media/ml.mp3 HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 69120\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\netag: \"6a508084-10e00\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-69119/69120\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69120,"size_decoded":69575,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 320 kbps, 48 kHz, JntStereo","md5":"71c4815140892018c6f4fc59a11581d2","sha1":"8a1f9e0ddbdccc570d71b61098d399a9c6d8f2e8","sha256":"e9efc04be08f86d426d16f554a43dc741f241b35a7ebd541e38511c1e8fd6205","sha512":"14594c2e76ef3520bd99d748684c36c0447ebc91c30fd15c514679ebe3afebcca554c5461579a53b0d5de42d929a324fcd25c5855126dd3d2efcd00d08d56e16","ssdeep":"1536:+r3SEk2UEc4FUYEp2D9REvCb2fYpEbFU8kX2tK/tE4hH9T:+rSt2U0UrC6CCQpiU8kXbVE47","tlshash":"69630102d60799fcf82e6579eef27700e508de6c87e804d8c535e7b34ae6fc281a9465","first_seen":"2026-03-17T06:47:12.017276Z","last_seen":"2026-08-31T07:30:24.928904Z","times_seen":15,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.764Z","timestamp":1788161387764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://promo25anos.click/\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhCnCLOj8yanVCJQQGfevkXEYY6CNXsA8Z3h4uPa0YT9mQiU9VRfEQCD8RNnBzUWr2KooWNlRJ1u0oB3lzMvjBgns%2BFVaznO5mtB5qcmkIsuEVy%2B8cGMSBQjMSmeG1%2BJtA2E%2B%2FRQu1c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a53819b20c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1322,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":236,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/index.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:29:46.098Z","timestamp":1788161386098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/index.html HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 21:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a90a611-3690\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13968,"size_decoded":3565,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"83ff9ba720d89c5bfae19a202e74fbb7","sha1":"dd251c803e77b2dc3f14a4c5a5e7f91b397ffaa2","sha256":"a0faa25d23ca9238412db945620f7a595b7eed3929b379d8ceb09ac409e3621e","sha512":"b5512a1eb6e10eb5a8e00a14e5e5fd8802bb95eb2fcdd98175304902b264247a7e2cd34635f224467c783eddfc353260cb0e0e4a74679b3fdfeb4d14804667f5","ssdeep":"384:fdkTs68GKhKFDRZfzA1HWLGZaQZlampCbCI/hd22Z5yirMUEpnS0:GTs68lhKFDRZfGN","tlshash":"8252532762fa2479439311491e872a4b3b309147ee59ed047e7cca901fcdeeed42b6c9","first_seen":"2026-08-29T09:33:47.432118Z","last_seen":"2026-08-31T07:30:24.929662Z","times_seen":6,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":7,"connect":128,"send":0,"wait":131,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/bootstrap.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.882Z","timestamp":1788161386882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/js/bootstrap.min.js HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-9004\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36868,"size_decoded":10382,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003)","md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-31T11:57:15.131349Z","times_seen":22241,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/utms/latest.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.063Z","timestamp":1788161387063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"GET /scripts/utms/latest.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 21:17:55 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"095e507c5a14a41feced352c26dd729b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4c304736e6087956cb00821d710060a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: gq1H3rHPUYld5vu9-8lRUpda8aWUjiu9yMQKSdyXVtYA54rx_uc3Ig==\r\nage: 6899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvPwyZWT%2Fw0EYWvc8fSC5jGbNy2eO%2Bp9PCO6WAAnStlk%2BHKc2rpIXBccjHyGfAeWxfHvnInRnDJtm%2F5mnIu9atBQRwD%2FpKWMnb08j%2B0BTeR5%2F0hx4d0aR4R2YMAUmexsKRLj\"}]}\r\ncf-ray: a33a537d4e7e0afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19449,"size_decoded":6793,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19364), with no line terminators","md5":"095e507c5a14a41feced352c26dd729b","sha1":"7f46093ebba00fec47f53c6a8082656e31a48267","sha256":"599af0d6ba0795a397f44815d223d4fcd968d57f176b167e8a69ae8283b8107b","sha512":"39c84ec76af96473ea5a379b55be4c7d9dc1648ed55feb5a57539ecb0a3abf88de154c077e71d1848d34a972769e9c566055ed4e41bfe7ecc13c4296ae789811","ssdeep":"384:4PszukMaPJEukW1pEavsOj7ZudQ9e49d3NUGwNviLDFzI0M+urGc2ecbsbSdlaI5:uszukMaPJEuYEsOj7ZudQ9e49d3NUGwq","tlshash":"7e9297a4f1aa909416b28cbf40b75232f22cb725b145c180a54f5d89345eeeb63f3d7b","first_seen":"2026-08-12T12:45:50.348589Z","last_seen":"2026-08-31T07:30:24.931438Z","times_seen":63,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":24,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/star-struck.png","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.085Z","timestamp":1788161387085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/star-struck.png HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-847e\"\r\nexpires: Wed, 30 Sep 2026 07:29:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33918,"size_decoded":34466,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"6139bf7ea2b98ebcf8f7f816c766edc9","sha1":"6d255c0fa9532602b741eedae6b833f3792d0172","sha256":"8c1eaca3b50066596293590d941f85b78e6161c89b15bb228148fb01d90666e8","sha512":"a93197be483eca967805fc1ae87a4f3f7c687ac1b4b0b168c1961d28cf2fd069162c0433a165afe54c72ab3d8e2d4105390a998cf24f650e559f6987bd6b152f","ssdeep":"768:ZvK3JsIUA+Tol+kQNt+tJaJdS8IK99n7ZOcT1IqKc:opmqit+tJaf9+kyQ","tlshash":"75e2f1d6c4a122052b363ce94a58a4682d0394bdea73531e342dc56fe3cdf572d1c98a","first_seen":"2026-03-17T06:47:12.021243Z","last_seen":"2026-08-31T07:30:24.93241Z","times_seen":15,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/responda.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.693Z","timestamp":1788161387693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/responda.html HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 21:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a90a611-7e2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2018,"size_decoded":1435,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"65d35cc6ab167ed406763545fe46e057","sha1":"6ead0382bdd11024f8d4dc025c614cc59163c3c9","sha256":"b8084ef9ba567e8fb0c01f0d8be6cfb58360f6c2434a05b3ca5375ca9220b5b4","sha512":"3698bd2ccf2be8974daa4b6801e65b4fe97c9fd0da5001deca6cdbcfe88edd1e6215fa4ff3ac07f3ebd678709649f05adefe42c70379025a201761627dd79a69","ssdeep":"","tlshash":"d241983f59d1623760270056f972f74c3a9c91259043cb6226cde45a7e4cde709a75c0","first_seen":"2026-08-29T09:33:47.464939Z","last_seen":"2026-08-31T07:30:24.928104Z","times_seen":6,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/media/roleta.mp3","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.728Z","timestamp":1788161387728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/media/roleta.mp3 HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 265093\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\netag: \"6a508084-40b85\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-265092/265093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265093,"size_decoded":265551,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, Stereo","md5":"1585c483a23b06bac199cf477fa781bd","sha1":"551fa01ed0a974894bc7d773fc5c66861a9047a4","sha256":"b3a493e3fb4e0a3a229fd6398daca61e60b33efd628794b3920a9adb55c53ece","sha512":"d64bfa0937a205ebc3de75adb5d6231a8de05e75b0efad6d10b8fbd4fe5c09963fd2addcb2942ccb2e36c47593f70ab53bf653b9b9a8c656299ab29019aa70eb","ssdeep":"6144:vdeYBTn6HkjWRD8xv4XuT1rgdVldvcekt9inPPtN7L4fugpr2kzh:v8Iqnt+JWVsVtUnPFNUfugprjN","tlshash":"b94413bb4fdd9836d6b411b58233ce49a359ad139b007097ef4cf2068cbc9415aaa47f","first_seen":"2026-03-17T06:47:12.025009Z","last_seen":"2026-08-31T07:30:24.933328Z","times_seen":14,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/RhB8zCK5/24.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:30:11.958Z","timestamp":1788161411958,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /RhB8zCK5/24.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/sweat.png","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.084Z","timestamp":1788161387084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/sweat.png HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-6cc7\"\r\nexpires: Wed, 30 Sep 2026 07:29:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27847,"size_decoded":28390,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"c52d266d674379d13a55cd862f72786f","sha1":"75ef25bf82c416ad3757069c2d1205d2b91aa778","sha256":"dba43f094384db451c41ab3fb44d7235608f1db7f9609fef06a00f162a374f9c","sha512":"7ed46a98e1fc657f23de4b0339e812dbc0a5b7b9e8d38433ed27b76fb43301262656d3de34ebfa810e41fb01e1987c3b46abd9350ead02028591ba79b8720511","ssdeep":"768:tRus8sETDuAbiQ2wWrhWE91Fv9oHN7x5SUTIgJ:tR98sRAWQGWE91oRDbTFJ","tlshash":"16c2f1164b43adf48317c19c9e608b0f1c65338a36ca754be6d28eaed54ccaf0865f68","first_seen":"2026-03-17T06:47:12.015926Z","last_seen":"2026-08-31T07:30:24.934179Z","times_seen":15,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18412421659","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.679Z","timestamp":1788161387679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-18412421659 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\nexpires: Mon, 31 Aug 2026 07:29:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160846\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":468978,"size_decoded":161450,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"be56c9593de5a48a12d05af690a502bf","sha1":"82165abc5bf7f5ddaa703e7359c86936596cc983","sha256":"e5ab744afe6879887e2134ade73ed3325a5299ac810e718631d2e12da5e3fa06","sha512":"39976933046a539216ce4ae027e23d29e92c9c6ec3c07b2c25a4dee6cf8bb45921fbcce7c60bbab9e6cd5538ce2f8d658b3920222ff6aec65149a665a7a5b13a","ssdeep":"6144:+L6Ntu47i6mInP9RaUvvccUQ/xEkY3Uc6xfO/adcfKQA:+Oa7PIftvfxIadcCQA","tlshash":"f7a419cdb3d674229392f574903f018bb67a29a2b84cc895f289dcd42e3459a4277f7c","first_seen":"2026-08-31T07:27:05.055424Z","last_seen":"2026-08-31T07:30:24.935181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":42,"receive":62,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.762Z","timestamp":1788161387762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"POST /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://promo25anos.click/\r\nContent-Type: application/json\r\nContent-Length: 413\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":413,"data":"{\"type\":\"PageView\",\"lead\":{\"pixelId\":\"6a5143f9a6d5d982ee4fe71b\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"parameters\":\"\",\"icTextMatch\":null,\"icCSSMatch\":null,\"icURLMatch\":null,\"leadTextMatch\":null,\"addToCartTextMatch\":null},\"event\":{\"sourceUrl\":\"https://promo25anos.click/roleta/index.html\",\"pageTitle\":\"Mercado Livre - Gire a Roleta!\"},\"tikTokPageInfo\":null}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 468\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"1d4-lrIHrMjrsG6wKSJwxLaFW3bsqzM\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZQFYiIe6IL%2F7Q5of%2BmDTx6TSqDu9lF7wNfJMu9BwzVXu1j%2BhKsX8MkTI6hIfVtAjuXZd5ZFgDSOjejjKDjTR2%2BM7VksdJg4b%2B2yVTHu71xzvFfRWY9Ex70H35TyrND%2BKsC%2BoFzpYss%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a53831800c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":771,"size_decoded":1808,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"11d9171c99c2d378a092fc41ef016db4","sha1":"c9bdc4efa2ef0c48721a543864ef6b611c657282","sha256":"f3b404bd25172587d2ce1a7d7fa5de5d110d3966a697b19eb29f23cbd02b8007","sha512":"3cfe5b07e80e1ee530b70166988594d150b6cb8e371d831bcf92ebaedb8d745a3dec066c0e15a12507d25cb2636fd24ebe98a92429dea432d9fc66e51bbb97bd","ssdeep":"","tlshash":"f701202e09b8bd55c591c342de8c3a3800ad3b2b8480c8d254feff5c41cc533203d051","first_seen":"2026-08-31T07:30:24.937061Z","last_seen":"2026-08-31T07:30:24.937061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/VkSKpcMf/19.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:51.773Z","timestamp":1788161391773,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /VkSKpcMf/19.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/bg-vazio.png","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.714Z","timestamp":1788161387714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/bg-vazio.png HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/css/stylead8e.css\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-d76b\"\r\nexpires: Wed, 30 Sep 2026 07:29:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55147,"size_decoded":48403,"mime_type":"image/png","magic":"PNG image data, 1080 x 1920, 8-bit/color RGBA, non-interlaced","md5":"d1d24a8c8b3d0b09e2828d3569b0b9c7","sha1":"9a4d3e277225a368b2e014d4eeaa3084ea4c84a4","sha256":"06b59ff4f9f30786db43b3afdc436c718081cea30f5378944bf8f795755c5440","sha512":"026343d48e245fd43042ba4c711071ce3914eb50c70b2ca540b57212c5316582a997422f192698e5c4f021c6ed6aaff93ee6b4f482722b2b73a819e9e9dff2a7","ssdeep":"1536:E19dGd2tB5UpyW/aCErQE2EyOgQua8UEH:EPbnGUW/rEPFg4E","tlshash":"f643cf6ae837b598cd15b7328c385e13be6f156111c031b3f73aa9a88d85f1cf993648","first_seen":"2026-03-17T06:47:12.035725Z","last_seen":"2026-08-31T07:30:24.939745Z","times_seen":15,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/jquery-3.0.0.slim.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.879Z","timestamp":1788161386879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/js/jquery-3.0.0.slim.min.js HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-10ef1\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69361,"size_decoded":24596,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32462)","md5":"0a7846af619b5aa7859af14291d8375d","sha1":"3e818ef47246acaf4bc608aaa6ae6b6186e5a097","sha256":"beb66e38b20dc486e50de380cfd1affe9f952032e19be1eab9becc89a954f48d","sha512":"52c6dbdee03c6ff5959d603dca8d89d2a2e135b438acb8e80c1a6a01ef347b7f2d7b16a9dc32cb3e9f92ba91cf6aad98f64f76792a300863bb653e4b68c95f56","ssdeep":"1536:u5hEyisTikEJqRdXXe2pP7lgoVMEXDdVhvL5Sh4xzAdXtqT9jnx3w6m1DU8Cu7:0QGDHhvLzzuXkT73Y1DU8Cu7","tlshash":"4563c4d9b2d67052d77730b850bf450bf07a98dab44c8d60e0a8d8e47d78a89817bf2d","first_seen":"2026-03-17T06:47:12.032612Z","last_seen":"2026-08-31T07:30:24.940615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.675Z","timestamp":1788161387675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"GET /scripts/pixel/pixel.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 21:17:55 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"ff078647e8888f28c23d519571c06500\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3a392288dea1bbbea74e310795e2a172.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: i1S3aDby49bQcAvp7BGniE7k9s55mkiwrEypVwl2tx5ayMzetsDRSA==\r\nage: 6847\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZmN%2Bm18VVSveR7W3sIr90Qv7zRLm%2Fq5jXgMEctilZfJAqmkgO5WSfJ137mrF%2B3ZhNomv6aG%2F4N3z88kOLLF7siN0wf2Rx3rTh4pSk0Y%2F7Fi2DTC4VJM3jrSc9yW2GBusZxT\"}]}\r\ncf-ray: a33a5380f8a20afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40498,"size_decoded":10211,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40491), with no line terminators","md5":"ff078647e8888f28c23d519571c06500","sha1":"c4e1a1dd18e1e87fa354ca5beb5f064f5cf01abf","sha256":"3afb6ab2343e23bb8b4cdde9b659e3af54c67e1157ff2ea75a2ac02e244f8df7","sha512":"a0e86cd5f29ac5058cd18c72ab595aaa921fdcf362b1afb970589d40fa38f1833e6941838925e6efe26af71147a2ae26ff5c0673f940eabb55f2f7bdc58ab3c2","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/zRj02Icmvva:Etnjfz6RYJio+/N09bKtyZ0A43B","tlshash":"f1039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","first_seen":"2026-06-14T00:04:44.270205Z","last_seen":"2026-08-31T11:16:08.312929Z","times_seen":157,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.utmify.com.br/scripts/pixel/pixel-google.js","fqdn":"cdn.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.677Z","timestamp":1788161387677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"GET /scripts/pixel/pixel-google.js HTTP/1.1\r\nHost: cdn.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 21:17:54 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"bf4c673c32c09960c65aa780d6289520\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0eb659b3177cc8c6d47a4ad42c31ad9e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: EM4A6_8kQCfP2sYadaosY9SKp1xfDZJakFY422q68FtV_Wg4EXilDQ==\r\nage: 604\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pibsUf8T9NCgg4%2FEFM8yi8i113JfeaEwnEgpbuztpPp2NYkzXt3vzGpmlh4NUpx5FiJVg%2B3YQZtaRl9cDBtp7BGJUJMXNBouwtirfKcVMjEmmjFq1%2F0dk22Ltsv9sA8IXKj\"}]}\r\ncf-ray: a33a5380f8a30afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40502,"size_decoded":10197,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40495), with no line terminators","md5":"bf4c673c32c09960c65aa780d6289520","sha1":"caa54e28bcaebcfc3ce7e7b5ad7be077f6330ba7","sha256":"edb5504c63a92d3c2eda5e4b8ca6be450dd546db2c0beb2d3179420d11cab5d5","sha512":"5a0a939db523c4305f9c9feca4e96a68546a6d915d77ddf6119d444b7be72902a02dc01f290e5741c130fa439529a782560b61ed5301483fdd907c275212d3bc","ssdeep":"768:K1s8TD5fI1b8tWH0FfCmr3GRZklmZZ9quBM5Uq9zKqDBXWpFcZkv/TRjU2IcEVv9:Etnjfz6RYJio+/tU9vKtyZ0A432","tlshash":"9d039685ea9be45407e384a6c8771136f33c3a3f616a8450d12badd67c28bda7223d35","first_seen":"2026-06-14T08:04:00.23828Z","last_seen":"2026-08-31T07:30:24.942222Z","times_seen":44,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=11\u0026frm=0\u0026apvc=1\u0026auid=1460479198.1788161388\u0026dt=Mercado%20Livre%20-%20Gire%20a%20Roleta!\u0026tid=AW-18412421659\u0026en=page_view\u0026dl=https%3A%2F%2Fpromo25anos.click%2Froleta%2Findex.html\u0026scrsrc=www.googletagmanager.com\u0026rnd=1307996184.1788161388\u0026navt=n\u0026npa=1\u0026gtm=45be68q1v9262506244za200zd9262506244xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119259606~120213116~120385422~120763597\u0026tft=1788161387961\u0026tfd=1896\u0026tids=AW-18412421659\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.967Z","timestamp":1788161387967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /ccm/collect?rcb=11\u0026frm=0\u0026apvc=1\u0026auid=1460479198.1788161388\u0026dt=Mercado%20Livre%20-%20Gire%20a%20Roleta!\u0026tid=AW-18412421659\u0026en=page_view\u0026dl=https%3A%2F%2Fpromo25anos.click%2Froleta%2Findex.html\u0026scrsrc=www.googletagmanager.com\u0026rnd=1307996184.1788161388\u0026navt=n\u0026npa=1\u0026gtm=45be68q1v9262506244za200zd9262506244xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119259606~120213116~120385422~120763597\u0026tft=1788161387961\u0026tfd=1896\u0026tids=AW-18412421659\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://promo25anos.click/\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://promo25anos.click\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":546,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":2,"connect":25,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inetstats.org/g/s.js?r=https://promo25anos.click/roleta/index.html","fqdn":"inetstats.org","domain":"inetstats.org","tld":"org"},"ip":{"addr":"104.21.72.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:48.660Z","timestamp":1788161388660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inetstats.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:04:44 GMT","end":"Sun, 01 Nov 2026 22:03:05 GMT"},"fingerprint":{"sha1":"72:73:EB:A6:02:25:2C:81:60:B1:2D:EF:5C:57:F5:DF:05:35:A3:3C","sha256":"2E:F2:62:6C:C6:31:E5:6A:D3:F4:32:75:FA:FC:C1:A4:D9:B4:3D:98:A8:DA:1B:26:F3:A1:94:69:F9:FF:3B:E4"}}},"request":{"raw":"GET /g/s.js?r=https://promo25anos.click/roleta/index.html HTTP/1.1\r\nHost: inetstats.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lz4r2hw7jGzyBzylqEeFdi%2BurLvSxwgaUhwOOL0XffyRjSBUp9EDGJ%2B%2BgQIvs5KDh6Q2Wpo%2FIZrVpyVL6YIKqgA%2F2HFLJB16g5jVGFXstKTpZEbCsuHcLE4q1yHW4BlX\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/8.2.1\r\naccess-control-allow-origin: https://promo25anos.click\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: X-Requested-With,content-type\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33a5387493b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":133,"size_decoded":949,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e7cd98030682f624d138c0ed7cb1f568","sha1":"8684d0a7092c6065ce24361726f6b5c635ea9a48","sha256":"fe95ece5682bc3e1649eb1e1cd69a396c089b40284537c90cb72ab68ed6b580c","sha512":"a753b74fa7972e9bf1b264715d153ebb69adee3374deff42448e80229928974540f1c7d7052a3213c64c342314b4f720783b2f4886f3a5ec26d15bdbed07933d","ssdeep":"","tlshash":"37c02b104f1e87b4203901dbd0e3c3cc583020f8b505c8034007c0b45448ee70ec2dc0","first_seen":"2025-07-07T12:45:39.359476Z","last_seen":"2026-08-31T07:30:24.943264Z","times_seen":105,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":6,"connect":17,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/jquery.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.880Z","timestamp":1788161386880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/js/jquery.min.js HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508084-17d40\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97600,"size_decoded":34785,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32446)","md5":"d36ebce3809e275245efe5ea92f6e411","sha1":"fffa39ac2b7f468b9bf38f99fa73a882ee37ad30","sha256":"94d3359ffb8cb6c50c43b62d9d144313570981034da174d7320192be940e773c","sha512":"213d20fbe0244dfa74ca5881aaed1ff5ca9d4fda109ff7c7aac867ebc36f915ca869cf3c05874ab2490d84bc7ceed657dd42b47060bf67f41e415a64ce195915","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUJTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9M:t4J+N3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"9993d7d9b6d6706287b734b850bf410bb17aa8eab40c4c60e058d8e47e74e9d507bf2d","first_seen":"2026-03-17T06:47:12.028852Z","last_seen":"2026-08-31T07:30:24.944206Z","times_seen":15,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/confetti.browser.min.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:46.883Z","timestamp":1788161386883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/js/confetti.browser.min.js HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-1d28\"\r\nexpires: Mon, 31 Aug 2026 19:29:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7464,"size_decoded":3694,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7117)","md5":"614ca68dbb866caa25b1fc15a314d1b5","sha1":"86ed080b3985cd2604bfa864048aff86a01388d5","sha256":"e4f3d22f12d07be903b8f4756763e691561d9b6f1f3bc47b300f8dd0766a2d98","sha512":"7eadeea6160c5dcdd9a5898b7522439a72124be092bfac05451acb064b1575160c69f1435583f573cf264edca3eb634eb4c2e291f5bec6a9320e93d78d678fe6","ssdeep":"192:7tKPGrnmAPsihR3/dZm9YqgZdWybN6TRbHCTzvP:7QinmMhR+9GZdWybN6TxczvP","tlshash":"67f1b69df7513e160b5322baa84f910ea238b56f170f4484a2b9d5a42dbc41c333ff29","first_seen":"2023-04-07T21:08:12Z","last_seen":"2026-08-31T07:30:24.945008Z","times_seen":130,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/button-gire.png","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.081Z","timestamp":1788161387081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/button-gire.png HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a508082-7a6b\"\r\nexpires: Wed, 30 Sep 2026 07:29:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31339,"size_decoded":31882,"mime_type":"image/png","magic":"PNG image data, 266 x 231, 8-bit/color RGBA, non-interlaced","md5":"380042c8df4837e367c16852d525f1f2","sha1":"180ccc7821577fa2e2426b3b34b7e264619d26f5","sha256":"73fa645263ef0ecf467d580c4e317ee8549119b49d8c86b338ef87be99b8a7a5","sha512":"57c74d2ef85175b2a5a83f53e46c424c67b16f3770c5a1f1445aca7e87cf6c38a781cd01eeb6c7d310c677c24b258993462ab5f7206d9341837a805f8ae4e5cb","ssdeep":"768:wNjF6T5O1GYpmQ7EZc1wv+duaWCAtFbtwqSWH/2HU:w3gOMY77Ic1wG4adAt9txSWaU","tlshash":"73e2e13d5f52f29c700a191ec79976f635bc1639fd7ab843ab2438d4382a14f2fa1818","first_seen":"2026-03-17T06:47:12.01334Z","last_seen":"2026-08-31T07:30:24.945722Z","times_seen":15,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:55.841Z","timestamp":1788161395841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://promo25anos.click/\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:29:56 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPj9mEEQkaVH0%2FUySv4P0IrE1zPMI%2FiiM2G8Ayl5pCaoWybiPBBTMqFvI7dENNLZAkgeZMEoJs9ABMxGjnWM9UaFlSnDa5WmP8nx4GLAbPJ3e%2B0mqwDCS%2Bn69W0w6%2BWjs4DhDIyMIWk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a53b40da4c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1322,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/kXrTRHtD/6.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:30:07.944Z","timestamp":1788161407944,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /kXrTRHtD/6.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/js/jstools.js","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.068Z","timestamp":1788161387068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/js/jstools.js HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 537\r\nlast-modified: Fri, 10 Jul 2026 05:17:54 GMT\r\netag: \"6a508082-219\"\r\nexpires: Mon, 31 Aug 2026 19:29:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":537,"size_decoded":1056,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (537), with no line terminators","md5":"71a66559b76d0ce4d85ecffabb01518e","sha1":"fd6c1666b0314e1be054b99797765ba53f38d7a4","sha256":"c8153a4d1f0b4cf39fb21a5dd23cf254cc8e1c938fe622e5609eb39b1fdb8b96","sha512":"6fa3848f2f8d113b7bddd4f46200b04953ef5c5fe4e626d9820480112bff4383405372d4d0fda4ac38f502f80b5af170c0021594ec0b68512ffae2eea802724a","ssdeep":"","tlshash":"fff05996b120d2fb85f309e9169ab745b0f30296290998d0159c9c45962df4f4e2aac9","first_seen":"2026-03-17T06:47:12.033646Z","last_seen":"2026-08-31T07:30:24.946672Z","times_seen":15,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/responda.html","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.078Z","timestamp":1788161387078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/responda.html HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 21:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a90a611-7e2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2018,"size_decoded":1435,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"65d35cc6ab167ed406763545fe46e057","sha1":"6ead0382bdd11024f8d4dc025c614cc59163c3c9","sha256":"b8084ef9ba567e8fb0c01f0d8be6cfb58360f6c2434a05b3ca5375ca9220b5b4","sha512":"3698bd2ccf2be8974daa4b6801e65b4fe97c9fd0da5001deca6cdbcfe88edd1e6215fa4ff3ac07f3ebd678709649f05adefe42c70379025a201761627dd79a69","ssdeep":"","tlshash":"d241983f59d1623760270056f972f74c3a9c91259043cb6226cde45a7e4cde709a75c0","first_seen":"2026-08-29T09:33:47.464939Z","last_seen":"2026-08-31T07:30:24.928104Z","times_seen":6,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.766Z","timestamp":1788161387766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"POST /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://promo25anos.click/\r\nContent-Type: application/json\r\nContent-Length: 413\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":413,"data":"{\"type\":\"PageView\",\"lead\":{\"pixelId\":\"6a5261d78277f60546ee8d54\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"parameters\":\"\",\"icTextMatch\":null,\"icCSSMatch\":null,\"icURLMatch\":null,\"leadTextMatch\":null,\"addToCartTextMatch\":null},\"event\":{\"sourceUrl\":\"https://promo25anos.click/roleta/index.html\",\"pageTitle\":\"Mercado Livre - Gire a Roleta!\"},\"tikTokPageInfo\":null}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 448\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"1c0-dwtA+dlzQXCm9lkGLMaodD3ruJI\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ty2by0Js%2BID2IQLq6Q17lH7AaRiCeZ7OthegD8TYKLlZUMV1sK5Oits5YwSPIjtZKKQw3Z3GX2IYf%2FwpnZUbJ3znfl3wV7jG8u3B71lyzbVvS6XI0wKhmRVpCpnSQSRLnXyG7qcHA4I%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a33a5382be5fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":750,"size_decoded":1778,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff6b35feb51fdc275ce4632f73e03bb8","sha1":"3ea8d5b73b5fe73945e20211a39f243168ff5434","sha256":"0c0a451e495042152cf91a72d4062021e1aa596a097c48cfc759bf75c9a10a4d","sha512":"057792b3669a1511ae31e09c6f2dfccea15cd9b696da0109540edcaf94acabba27c24bdcd8d403f5050fc8c54f677beccb236adc9f80d11c428e68e1326a0011","ssdeep":"","tlshash":"8301d0ab6cf6aca58445c1039d5c7979119d262b954084d75cfdff5c41cca67703d022","first_seen":"2026-08-31T07:30:24.947399Z","last_seen":"2026-08-31T07:30:24.947399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking.utmify.com.br/tracking/v1/events","fqdn":"tracking.utmify.com.br","domain":"utmify.com.br","tld":"com.br"},"ip":{"addr":"172.67.68.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:47.768Z","timestamp":1788161387768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utmify.com.br","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 08:02:01 GMT","end":"Thu, 26 Nov 2026 09:01:58 GMT"},"fingerprint":{"sha1":"90:CE:E7:10:3C:19:B8:7F:64:B6:96:B9:73:D9:41:06:4A:4A:4F:4D","sha256":"AE:84:79:38:77:D6:DC:60:B4:6A:9A:74:FD:AA:D1:E9:7E:44:53:7E:F5:E2:AF:4D:1E:B6:B1:FC:70:42:17:EB"}}},"request":{"raw":"OPTIONS /tracking/v1/events HTTP/1.1\r\nHost: tracking.utmify.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://promo25anos.click/\r\nOrigin: https://promo25anos.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4p0OoXKGUvUd6v554orMB9TqEFS4hMW1Ie91Q%2F6HaRgouydAdk9OrMLoXqOnMFG87OdYHPok1S91pbtJeXM7gq9EWCFlmQwabAuuFTt%2BWgV%2BoMPUs4DWesgEfxIfFCWRrlNcUak7MkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a33a5381ab29c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1318,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":173,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo25anos.click/roleta/images/favicon.png","fqdn":"promo25anos.click","domain":"promo25anos.click","tld":"click"},"ip":{"addr":"172.86.73.107","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promo25anos.click/roleta/index.html","date":"2026-08-31T07:29:48.073Z","timestamp":1788161388073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promo25anos.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 13:29:12 GMT","end":"Mon, 16 Nov 2026 13:29:11 GMT"},"fingerprint":{"sha1":"E9:6A:70:7B:D7:E0:C5:04:2D:5D:E6:AD:41:B4:0E:D5:1E:6C:7E:61","sha256":"BC:A5:99:AE:E6:10:A4:8E:E6:B3:C6:69:D8:46:C8:E0:72:FD:79:16:EA:1F:C8:0A:C2:F8:1D:B4:96:C6:5C:21"}}},"request":{"raw":"GET /roleta/images/favicon.png HTTP/1.1\r\nHost: promo25anos.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promo25anos.click/roleta/index.html\r\nCookie: PHPREFS=full; _gcl_au=1.1.1460479198.1788161388\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"6a90c4c7-e3e6\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58342,"size_decoded":44150,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"83cb8bff3e2d8498f259a1ccd43fae10","sha1":"5728ad6cda4cc8a07e7436b35cf05581acfcff70","sha256":"504f38878efd8dd6bd41ef7260cbe80b2c0b906a2371fcf6c3199b584e808167","sha512":"ecf169029be49978f0daa6e3bd0fba970356fb18a19b297a861e326432d6cb9ab372456c9af0bb2eb634cb6ffc7c9f0c7a679c7ff9017c2b42e069f6f1283d28","ssdeep":"768:JHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:5mDD6oeFUycwpk06hWp1b99c7VM","tlshash":"3943021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4cb0d8a4767f1e9","first_seen":"2026-08-29T09:33:47.478384Z","last_seen":"2026-08-31T07:30:24.949598Z","times_seen":6,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"promo25anos.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"promo25anos.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}