{"report_id":"e03e9c9e-9807-4575-b145-acaced932a59","version":0,"status":"done","tags":[],"date":"2026-06-28T11:23:29Z","url":{"schema":"https","addr":"flybrazilbenefits.com/","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"172.67.170.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"flybrazilbenefits.com/br","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"title":"Emirates Platinum Brasil — Experiência VIP","dom":{"size":97929,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37733)","md5":"0a856dce048717a53707f3b50ec204d4","sha1":"dab100c6664ece1dab2b381f4ed1a94af20b9b73","sha256":"87066a982875b44a04e68c619c0aafe9a26f872decc329aa9da76e9bc6ba23ae","sha512":"9b738f57094a99bf5b790012fda388db2752da66046630255b76b13e12b4d76deceda7cd51738d08dec942c129dcd1f410fef873c6e44e0295e079d797fc6980","ssdeep":"1536:mpQAuQA4QA2AjabYDnizAlQArPJ3Az77YoF5IJ:m+ELJwTH+","tlshash":"08a348a051240a7de5038be897a9eb39f02e91ced9a7c88cf7dd011b13c6dcc5e696d4","dom_hash":"domhash2e95b77a3d753d43aa47fc425e497e66","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"flybrazilbenefits.com/","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"172.67.170.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T11:23:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"flybrazilbenefits.com","ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-06-28T11:19:54.133591Z","last_seen":"2026-06-28T11:19:54.133591Z","alert_count":108,"request_count":36,"received_data":7678577,"sent_data":18019,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rezervtemka.cc","ip":{"addr":"172.67.159.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2025-12-15T12:38:06.57368Z","last_seen":"2026-06-28T11:09:56.20996Z","alert_count":0,"request_count":1,"received_data":815,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/main.06a11e27.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b877c0930d7b74136f0611aa066d7c","sha1":"0eef1383329aee2fcc5b9cc252a7c50e73ce6f9d","sha256":"8bfe3d0792dbf6a981208d9f15d2ab8c7b3e53b6edda998c09c05f3c9a893479","sha512":"42efef2db07bed0e31b47abaf30cdf357ca5b77564daa097580c001844c93d1649860b9921aca0361b2aae5e5a4fb04d40a662d5964a6355c6a07667e4f25c42","ssdeep":"6144:pvCwJW/fbVKc7Qxa3h+urk6fWGePa71AanY6/OImJnl2Lvh/SCLlu//wDkbH3nQ/:pv4Eva7MEO1l6gCLlu/4DkbH3nQ/","tlshash":"f7d46dc93292b06157f302e6907f0507b33d591a380cc864b569fcca65a998eb27bf7d","size":625960,"data":"","first_seen":"2026-06-28T11:23:35.231215Z","last_seen":"2026-06-28T11:23:35.231215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/22.0b6ce66d.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c6c6299b1f615922117c713020d15a","sha1":"0c6a3aac49b00941a186304651a4f13727253fc9","sha256":"66278ce15a6fc77f95f0ecdb84df3aded7e34726c0e7bdb9f1dce4cbbfdabb20","sha512":"12cc69c07968bf922b04abddc76ccb3956c65d7932e4a6c334d3829131f81ae2ab9c2666b7933e74b1ec7a541ba4c314befd9fb5f1136a997fc7d00394915f78","ssdeep":"768:5x+o7hVXT8eQVXRSPeMDp+onzaG3jC1Xue0Kcz3B8a0D8NaZGNwcONY/dVSya3L7:9RQZF6aVY+Z7","tlshash":"40b209d893546af97501dfecde075818392e25b5af83c5a4d3d89c2aa0100d8af4efd7","size":25251,"data":"","first_seen":"2026-06-28T11:23:35.207434Z","last_seen":"2026-06-28T11:23:35.207434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/312.d9d76438.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdbc23698264ac2026b9e798cbe2a1db","sha1":"dafbd36b7f2069eebacd4f6eea3e207418e96291","sha256":"d2b9f704630d073abdd92de816c5165a4cfbedc7af102db81138f8938ac80701","sha512":"f7c299e0bcdeb3df4eacfbeac5fb50cab6c9bf42e1a10ac94e6fcc8f7ad8b6940ff7c8a97fb66b2f2b77bbcfde09ffbaa133ee9b65a54b99cc66fa69bc520274","ssdeep":"768:DisymQM6/uqNXjMTfF7OchDvYnY9xFlpUAmfh:MLhuFlpAh","tlshash":"afd2005b872e5faeb41ffcc6da5f8b0ce26d2b05ba99d874ecdc59510090082b67235c","size":30933,"data":"","first_seen":"2026-06-28T11:23:35.244731Z","last_seen":"2026-06-28T11:23:35.244731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/995.9478b956.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb733d4e8aa985c220818a93a35507a","sha1":"889463e23e63935f945a94f64c6b01fe380a2b7e","sha256":"862bceeb0d92cd0b34dc14c434914ea3a6f2a99071a5f6768efcdf8ea34aa132","sha512":"7ff0ba6de0e56d23a73ca5402e6e464357ac5aaf6271f16d9c8cbbd6345e934591111f7e4523ab71d0236f6df015028740b1a18cb96446d60c828660d3dc0fc3","ssdeep":"384:7OkCTQzbeex9qVuxxxY/oPxC8XI1IxJxxVxbxtYxxEfAV43Uyyf0x4xmXox/KOx/:7eQXlx9wuq/v8Y+fd3BjC3z","tlshash":"5ef2f980f5106e792da37d5643de9b0de12e51c258ef084d7eef844d2681bc91fb2b1a","size":34740,"data":"","first_seen":"2026-02-19T04:44:57.80194Z","last_seen":"2026-06-28T13:11:03.9631Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/video-preview.691f190c.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be7138fd4c8f9de0bd8a1c30fb3b3855","sha1":"01e29dec6438929cf5e7f754c01a139f1a414921","sha256":"6d38e43d63c0a46b5caa39ddce2795f2a2298732415b101224a650ac25447548","sha512":"fd5e00db33c676b4894552f145d8bb152ec5a139d1291bd332cc30ee968c91f242999589de058e122c1c04445341bf2d451b5bcb613564908e29f162c940afe1","ssdeep":"96:v/E0ei9A28hJlcZpFG92uIRyGLHoRrFyy/cR9ukaMDxAeOa0ULjY9/NTV:nVeiq2yvczF7yGLHoRRyykRjn0ac1P","tlshash":"77c175cdd2933c2e995b0ac5296bc20a103d49d4fd778c88b3bd2c0a41021597d9fbed","size":5838,"data":"","first_seen":"2026-06-28T11:23:35.252307Z","last_seen":"2026-06-28T11:23:35.252307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/67.a7e688d9.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c158826d3fc0110afc516f4cd0b25a","sha1":"e96989db6e8dbd772db141af35bd7d360a885c21","sha256":"753d52ec640155ec1b38d0cfcd79d428846f907304fc1d0c26cd3501978930b7","sha512":"9834671bcd324f369b3af36bc2e4c39abefc181fbf2b9d2ea3d58cfa6b1b255ca7e73a21a5d0f8a92f1cd90c4d47365becde6b1046874a6e658f3e320b20103e","ssdeep":"","tlshash":"fb41f7c5ebe5aeecbc690dd6641da41c761f6f9ec73a89f4b8b42c0005050a07a17bdd","size":2067,"data":"","first_seen":"2026-06-28T11:23:35.214955Z","last_seen":"2026-06-28T11:23:35.214955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/328.185f3bdb.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"298514c306784aec20dcdde8f988ab77","sha1":"497eb8d8ba5097bcc3e2306abce9fd43787589bf","sha256":"cc72c170fc5f72c6ffd1b355ed0d53f0d81085943f7edfff0b8de14963263feb","sha512":"5bdde9b34c6a1b904a2ce60ecfac3559a2da9f093e74147f101d59fbcbacdeb38b8cb157491b0073b965b44cf79d796cf144853b9d80d3707f1f9e3ee7b6c5e1","ssdeep":"384:8KxcEDINI8SWUwcjU7um00dqQX27udEXPccK0nGJ5nCaZbAX9bW:vNsNI8SWUwcI7um00d9X27udQUcK0nkD","tlshash":"c2520a443193f899ab570ce1987f810db1346a48b64fc870b36c6c872a3965bb597f3d","size":14310,"data":"","first_seen":"2026-06-28T11:23:35.262918Z","last_seen":"2026-06-28T11:23:35.262918Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/232.1d466fdf.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"617b4d4a3c30ec0278093d0a17a3dce5","sha1":"3080a692ee80027d20068812b44a363df30cc558","sha256":"245bd371bce511b12dcca376a33c869a0e7d7b6318f0fb9de639122f14607acc","sha512":"6a2f2bff394d218ad8ee031be105ffb04949bd2dacaa9e3720d9d27b5b6449325eaab44d426f178dbcdb38f4ba57baffc73139515c4b635a15079ddf2edef53c","ssdeep":"96:O+A4ShTAZLPBdzFVjkP88Ov0oF7vALP1h4/oi7xDiV:O+bQcdPzgpY7vgP1ti7xa","tlshash":"9fa1b957a091267ce2f780872c5e002eb6356a10fb0a8862f6bcbc1835543c5a672fde","size":5086,"data":"","first_seen":"2026-06-28T11:23:35.247274Z","last_seen":"2026-06-28T11:23:35.247274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/benefits.516477f9.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57be1713044e2760c7fc8227c498415a","sha1":"18bd3cf0ff063439ef9a43d562721279e263be76","sha256":"a786822613dd5b9bcbee7239c77d0032ad0d0a25d40db4b865b69edbcfc83380","sha512":"c7d2e07493819787e04fbc971d4744d8efe9d85babd08b5740235bd5e00871a0bfa446d9736a5202dbc9fb3e8d755d8a1a6a886c67e49512ae71f6ae43bae4f9","ssdeep":"192:2ScP9sC36X2FRG6nAoaBl6R9BzOANu1cqi7B:2ScPyC36XsTM36R9BaANLvB","tlshash":"c802e64c82603abf7e2105416d4fe299d25d8e44fb8ac078bf7c340d16e52a66637be9","size":8628,"data":"","first_seen":"2026-06-28T11:23:35.234004Z","last_seen":"2026-06-28T11:23:35.234004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/faq.ad5c0967.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fc0be944d69f2ddeb4825ae953a24ca","sha1":"a96b43d16f865af2b0ee507bc8a963ff590af37b","sha256":"3ddb3cae250df209d888d3d2ab5c0401e278ed67abfd0e4443c7388e042b9381","sha512":"f610432dd8265e4fa7088246e48899d7f4d31095b4a8cc6766dc7a9a5b81d38cef12b789f2a3e2c96c39428e81e47e5983ee6ef9172bd420ed17dc5a62072ed9","ssdeep":"96:bFSW5BJq8lBs1Yhl4u/U6OScr34EzTJAjzQg3DFLO9Q7xpdvLV:UW5BVlBOYfzOScrFzdA3dJ/Zh","tlshash":"c6a1f84ee4d12fb8382343896e8f550d792d6f18d71f0ce076a9108902656fe3623bcd","size":4957,"data":"","first_seen":"2026-06-28T11:23:35.254353Z","last_seen":"2026-06-28T11:23:35.254353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/782.da77e714.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aab2f9bba8f85db2298f09219859bda4","sha1":"2b605722f51ba5fa7be90e3ca4066eb8119dfdf4","sha256":"aee321ff6191648bef180374403e1cc5290a881bd9a6fd8597893affc6c3315a","sha512":"4a24e5d337dcac0b643168ab0a78e96e41e7023b2e472f176f0aaa9c2d72fbe8702689248e70cbfc0dcf3003382eb047d755c3ae899e8ae9fba90fd3762d382b","ssdeep":"384:6B+8H32zoxeVQpnaN9GcGE4BpFDnm8z4iuo4Cm16aOTsPzlA0bQXPrIMY:6M8H32Y3TEQnPzrXPrIMY","tlshash":"d4a208d8b65071978bb7127284df4206f275676a188f9524b13ae0d82cb881d537ff3d","size":23199,"data":"","first_seen":"2026-02-19T04:44:57.784316Z","last_seen":"2026-06-28T13:11:03.951408Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/184.c44e07e8.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"604778751cb87910193fcc91087e3c07","sha1":"737a0e225ad27402de0d0066e153282bc687d102","sha256":"197fb311315661138129461077eb1d266e289663f992b7030fb39ad408e347ce","sha512":"fc4bcf27a2be7e1edff3caf0507b12a8f9fcbda286b47bf71bf1f859fd17c6e9660c9469bf583b38d507bdee430e76af0d7ec3b38625799d03e3dbaba247c0da","ssdeep":"192:XGMG+HJg15hlpur+m9Tnx8E00U9IcHZSN2mGqRZAOpLFC5g5i3QzKclqim:XGX+HJg15/pI7rSE2H5SN22RpPiylqim","tlshash":"e732e895f31473bc59c203b0c6762141b65f259e31da91b8a2f1c9e0b2875dce1bb8ab","size":11158,"data":"","first_seen":"2026-02-19T04:44:57.794714Z","last_seen":"2026-06-28T13:11:03.954313Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/popup.67878afb.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2982f7266a0683b19566bd514adeb9c3","sha1":"70773c4e470596d6ca60925d6263754b163cd246","sha256":"82bd337db34f30ef8998804aeec3873f48af98fc7ef420374611f197e2a343fa","sha512":"72de6e1353190aa360547772027fabe89e3e3a1b910ac63a3a60fc384b20c0d359f53c66cc4b1c3373bef5d0ca71148dd5af45d772c228cda4f02ae6445b3b59","ssdeep":"","tlshash":"bd01fd48a1a0bde8a03f098ac2aed54d633ebec49a248cb4b56c78010b414bc5b07ba4","size":756,"data":"","first_seen":"2026-02-19T04:44:57.795886Z","last_seen":"2026-06-28T13:11:03.955523Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/testimonials.60070de3.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1ba7b06dd1cedd118d18fc188932e07","sha1":"e9ffde6406bf2e236f4feb9ce8b30eaaf1380bb7","sha256":"e534a0b183f84c23eca5e2c59691ad4ae7b54a313fd67bd0a21f4a447f97d777","sha512":"e352aca4d04ab292f83726ae121ab9cf6c8c026eb1e96c9d22f73695d80f52755b7a4157dfd9d836e6eac2ebc3f1612500a56aa08e8796bb66080939996316f4","ssdeep":"","tlshash":"e651c783c1b03ffcb16716605e0f819de21a1f10d50e8ca4b5f838582659cbc2a667f8","size":3121,"data":"","first_seen":"2026-06-28T11:23:35.258156Z","last_seen":"2026-06-28T11:23:35.258156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/235.1a9a842d.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b321b34a3063f8912eb7705057e1c76","sha1":"1ad3bebfabd32558deaa33ab77e6822c40845fef","sha256":"9961ce1ace21bbca9efdc54a3641236385ebbade26227172ecf21eb4b5eeab38","sha512":"3426ad1cf2158bd329c680b9a07f853bdac0766b03c149f144b69efea010b9d0fccd12ccefdb5b0fb9b44cb1d0e8318517e267ab6bebef920825f668dd942a05","ssdeep":"1536:BzfGIoKMmSmVy4JQeD9BlxvHk7+NEosXiA6wPXNHAgdmpIW9kjZC:BHMuR0CSXmn","tlshash":"5d831989a130b57692e715cb83a5c111b3b24905b949c4e4b1bd8cbb987dd9803feefc","size":87288,"data":"","first_seen":"2026-02-19T04:44:57.762451Z","last_seen":"2026-06-28T13:11:03.960385Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/200.ae0003d6.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f42332d3321bd88eec9f9a8975bfa44","sha1":"9f48b0e25b0847a40ee5032ebcadf457f684edb8","sha256":"f99ccd22fb419326e25c69e331a310458cdcda2c6fc648596f39bc6bf6445a66","sha512":"f671299c8563021458b2b6ffb87d4181481f7bd0797f5b179207e4b3c98510dde37ce6ba8f08f27581e25f8bd0789b67b21a4627f104f53f3bde0c09f53d6e4e","ssdeep":"","tlshash":"8d616380b295b9b861c381e890bf7607f139351b307ef094d7a2c5f0b4b449a6536ebb","size":3266,"data":"","first_seen":"2026-02-19T04:44:57.809306Z","last_seen":"2026-06-28T13:11:03.960955Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is maintained with support from locize.com — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://flybrazilbenefits.com/static/js/main.06a11e27.js","line_number":2,"column_number":314265},{"level":"log","text":"[WS] Already connecting, skip.","filename":"https://flybrazilbenefits.com/static/js/232.1d466fdf.chunk.js","line_number":1,"column_number":1242},{"level":"warn","text":"[WS] Error:map[actor:server1.conn0.watcher14.process7//obj37 class:Event extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:DOMEvent properties:map[bubbles:false cancelable:false composed:false currentTarget:map[actor:server1.conn0.watcher14.process7//obj40 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] defaultPrevented:false eventPhase:2 isTrusted:true returnValue:true srcElement:map[actor:server1.conn0.watcher14.process7//obj39 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] timeStamp:1206] target:map[actor:server1.conn0.watcher14.process7//obj38 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] type:error] sealed:false type:object]","filename":"https://flybrazilbenefits.com/static/js/232.1d466fdf.chunk.js","line_number":1,"column_number":3646},{"level":"log","text":"[WS] Disconnected","filename":"https://flybrazilbenefits.com/static/js/232.1d466fdf.chunk.js","line_number":1,"column_number":3717}]},"http":[{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/22.0b6ce66d.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.713Z","timestamp":1782645784713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/22.0b6ce66d.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611e-62a3\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktqsczMF4DDBUntKaEQ90Veeu6fOGLUS7cFnPcuPwBvNNSvXEmLWU72i8xHYiKMUAMIxuAEXCbc3xPM3pP3V2oVCX8R2F%2BMZOmguhPfPxqtiUkPU7r91BEXw8cQTxwpmG%2BT96JmQYFo%3D\"}]}\r\ncf-ray: a12c513a7bf60afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25251,"size_decoded":10026,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25205)","md5":"d0c6c6299b1f615922117c713020d15a","sha1":"0c6a3aac49b00941a186304651a4f13727253fc9","sha256":"66278ce15a6fc77f95f0ecdb84df3aded7e34726c0e7bdb9f1dce4cbbfdabb20","sha512":"12cc69c07968bf922b04abddc76ccb3956c65d7932e4a6c334d3829131f81ae2ab9c2666b7933e74b1ec7a541ba4c314befd9fb5f1136a997fc7d00394915f78","ssdeep":"768:5x+o7hVXT8eQVXRSPeMDp+onzaG3jC1Xue0Kcz3B8a0D8NaZGNwcONY/dVSya3L7:9RQZF6aVY+Z7","tlshash":"40b209d893546af97501dfecde075818392e25b5af83c5a4d3d89c2aa0100d8af4efd7","first_seen":"2026-06-28T11:23:35.207434Z","last_seen":"2026-06-28T11:23:35.207434Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://rezervtemka.cc/","fqdn":"rezervtemka.cc","domain":"rezervtemka.cc","tld":"cc"},"ip":{"addr":"172.67.159.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.215Z","timestamp":1782645785215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rezervtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 01:02:50 GMT","end":"Thu, 27 Aug 2026 01:54:41 GMT"},"fingerprint":{"sha1":"84:1B:86:D4:E9:95:D8:3D:3E:C5:E8:58:17:7C:B9:8C:9C:44:42:7A","sha256":"CD:4A:F5:19:CA:93:0A:5B:32:16:6F:17:3D:77:D2:2F:E1:39:03:65:D2:EB:9B:ED:19:2C:73:A4:F7:5A:5A:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rezervtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://flybrazilbenefits.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1i0a7eRkGx8inH1y7i9THA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 28 Jun 2026 11:23:05 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: c4FQc/NFrIQ0lsDSXC1fHbolJ2I=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X0oEh9%2FXI%2BYGXCnxSmMKTMfRRFXhSFaL2wgCEjoDwz7jnvN9CfCqD93JWNn4kaPL4rZeUBm2NrLqJtbdqY6gZV76xRXmhqJ2bym%2BhD%2BQJEinTBQNdSMQqAybo8V1%2FTj1xQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a12c513dca01569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1164\u0026min_rtt=1108\u0026rtt_var=279\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3194\u0026recv_bytes=1324\u0026delivery_rate=2992805\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=c8d6569a262aa6bd\u0026ts=76\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":815,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T03:32:22.804603Z","times_seen":16843948,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":19,"connect":17,"send":0,"wait":71,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/logo192.png","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.659Z","timestamp":1782645784659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 10:34:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a612d-14e3\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LTR4zSTs6dIHfUtA0FHyRkj%2BJaPVvZvZw8FsnNY64PCBi3c7jDG%2B30NUdlf9C2fQZ91OBBLrHKUTws8yjVyMLuXm9RTBNwWdqI5zMml3CmSt40FjLA86QBjfH1n81KKy6xYKxHk7PE%3D\"}]}\r\ncf-ray: a12c513a2bf30afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":6093,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-06-29T22:46:14.629236Z","times_seen":11058,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/782.da77e714.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.711Z","timestamp":1782645784711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/782.da77e714.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6122-5a9f\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCiZ1ZCps23vRH4ucVu38ZYaXdZo5t8bNxrzxWatzqKe47ku%2FHo8o9ftcQCipAOZZiHDeMfO710ML8zu6LJ86Aw1NZMZoxX3JkbpRdPjGNvCf0zoGttZ0GdrWn%2FVp1vItZExd2EGKps%3D\"}]}\r\ncf-ray: a12c513a7bf50afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23199,"size_decoded":9176,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23152)","md5":"aab2f9bba8f85db2298f09219859bda4","sha1":"2b605722f51ba5fa7be90e3ca4066eb8119dfdf4","sha256":"aee321ff6191648bef180374403e1cc5290a881bd9a6fd8597893affc6c3315a","sha512":"4a24e5d337dcac0b643168ab0a78e96e41e7023b2e472f176f0aaa9c2d72fbe8702689248e70cbfc0dcf3003382eb047d755c3ae899e8ae9fba90fd3762d382b","ssdeep":"384:6B+8H32zoxeVQpnaN9GcGE4BpFDnm8z4iuo4Cm16aOTsPzlA0bQXPrIMY:6M8H32Y3TEQnPzrXPrIMY","tlshash":"d4a208d8b65071978bb7127284df4206f275676a188f9524b13ae0d82cb881d537ff3d","first_seen":"2026-02-19T04:44:57.784316Z","last_seen":"2026-06-28T13:11:03.951408Z","times_seen":21,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/67.a7e688d9.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.718Z","timestamp":1782645784718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/67.a7e688d9.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6122-813\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXjeRHS77gkDvn8yER7nJfDDOONDVqbWev9%2BKRDlNQWYtjm2An7D67599unoDaLGvOB3TtNg3Ca7134WlavoqNymXr2LPrbmCMXnLND%2FWL%2B0SPoKg8t%2Fo2duV85ocl815QGJn42qo7Q%3D\"}]}\r\ncf-ray: a12c513a7bf80afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2067,"size_decoded":1564,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2021)","md5":"11c158826d3fc0110afc516f4cd0b25a","sha1":"e96989db6e8dbd772db141af35bd7d360a885c21","sha256":"753d52ec640155ec1b38d0cfcd79d428846f907304fc1d0c26cd3501978930b7","sha512":"9834671bcd324f369b3af36bc2e4c39abefc181fbf2b9d2ea3d58cfa6b1b255ca7e73a21a5d0f8a92f1cd90c4d47365becde6b1046874a6e658f3e320b20103e","ssdeep":"","tlshash":"fb41f7c5ebe5aeecbc690dd6641da41c761f6f9ec73a89f4b8b42c0005050a07a17bdd","first_seen":"2026-06-28T11:23:35.214955Z","last_seen":"2026-06-28T11:23:35.214955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/f4.svg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.840Z","timestamp":1782645784840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /f4.svg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Jun 2026 10:34:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a612a-329b\"\r\ncontent-encoding: gzip\r\nage: 661\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IDdte%2BKFuSnrOnqSxIfUQbjBakj6ZUdUp%2FJn6xTbTOKqFAUQaFH2b5oNy%2FngNqpXg5SyLgMslk5HgWHnHHNhe0mRmyc8v0h0K4fsTleiOK0qxe%2BIRB2LiG4ML5oXmP%2FNjIV4eBEGrZE%3D\"}]}\r\ncf-ray: a12c513b4c080afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12955,"size_decoded":5820,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49f2ba822c38198416ece6ff7029f322","sha1":"2c6d79bc7292347b963375c2b0633b1ba07391fc","sha256":"b82affff84599a0085bf78b687f166bbe616acb77a0e8be05e2b451b37d32f7d","sha512":"514ee5a7ca8f22e6b3bf0439b385e3bc1a7fffde88bbb72a592382c4e1db6c07c4ff7c5d34204700bf06a94cb0995c0ffa9142acc2adfcdb84dce83447cebd39","ssdeep":"192:aukGiUUTUXC8pH7xklBHRluMFX9TZ2ZrmNI1YOc5l+e7cyqWYRNZARceNdAXerI:x/fM8nQdJFNTZ2dmNV5lt4tWsQRcOzrI","tlshash":"1642d7f5ab7062e0e848e7a6b6254138795f78fb7fd5c288c355ad64bc521ad8c4ccc0","first_seen":"2025-07-14T01:40:28.338986Z","last_seen":"2026-06-28T15:35:09.705585Z","times_seen":48,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/images/benefits/getty-images-t_jCuKaIrk0-unsplash.jpg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.266Z","timestamp":1782645785266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /images/benefits/getty-images-t_jCuKaIrk0-unsplash.jpg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Jun 2026 10:33:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a610b-174c6\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poK3qEI%2F9BV7xp4S5BrNcRLgqDr4paZCjiijFFSj8VX464ehlS8WM%2BzYYv4H%2B9vTwU%2B6q23nhXhuuhFsA2uzDPH5gmVUmSK61CvH%2BAvF6WRCvocFcIy%2BMLdu5c9BpTJfZG06SCdmeKU%3D\"}]}\r\ncf-ray: a12c513dec1c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95430,"size_decoded":95443,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x960, components 3","md5":"da86c1aecfa6528742095be4ccea2e29","sha1":"99fed3ba0aa007a6a6ed4a133e3082e19ca63509","sha256":"48f28b420a7075b5478993c5bd5d710a549c874a540bc4627744f6c40030ffa3","sha512":"f934890a4c9d9b718e74a6a1e1df5cb55542f10713a438b93691dbdb0210963fc16eb112ed8ef11922514a0c5512b98404ccd77d11bcdce79d95be35efde8eb6","ssdeep":"1536:h6SbzYLNwSMdxzL1b9v8ZHwuxbe20E7ZURKZdCjC0vnzLT9mjvyqagL73Q:h5PYLPMdxV9EDUwZUPvnzf6/Xg","tlshash":"c39302744663a8b5c552ad7c0c414fc3f496367cede26aba04a01fa293839d31e9d8fd","first_seen":"2026-02-19T04:44:57.792698Z","last_seen":"2026-06-28T15:35:09.696615Z","times_seen":23,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/images/benefits/mohamad-ilham-fauzan-bSPh_zQbHkM-unsplash.jpg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:13.975Z","timestamp":1782645793975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /images/benefits/mohamad-ilham-fauzan-bSPh_zQbHkM-unsplash.jpg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Jun 2026 10:33:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a610c-d4ea\"\r\nexpires: Tue, 28 Jul 2026 11:12:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 662\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTumEVl0uZpxfBpFLhghDa8aL7c2LwvprWyPTH259Hq7qWaPIK9bUXLtm1qkGhZpRA%2BjoDsLxWuXB6hKIV9MlGzR071%2Bgm%2BYEoCBkhw5%2F0co0tgQ1FcRARu3PwQF%2FKOw%2BJBT88b%2B2zs%3D\"}]}\r\ncf-ray: a12c51745ec40afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54506,"size_decoded":54433,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"99d0c346c20523cb8f6ee6fe76ab71a1","sha1":"62a9a24fea658813352acf298744cdd626b1371f","sha256":"06a459b7675e04e3c8a079532fdfeca81ff55d01410f043937dcc729391fbfcb","sha512":"5d0fd3b68ee118e4d5e5649b130dcf40a75bd78877c723e89c1832cd30d74d935cc05e71c5b85df245f85fb6b9342a7bdd7d4b7c0185c7ffd66dcb8f1b0278fa","ssdeep":"1536:hAjZwydMJnHvc0mJGJCtNsMoP0WcSJbwceEj:hny6TbCtN3Q0NEj","tlshash":"f533023c4f7a4327cb97633508dcae8ad7a4117f91e9a6d0e095be2539f42dc8c8b056","first_seen":"2026-02-19T04:44:57.767944Z","last_seen":"2026-06-28T15:35:09.715815Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/css/232.37b6ece5.chunk.css","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.729Z","timestamp":1782645784729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/css/232.37b6ece5.chunk.css HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Jun 2026 10:34:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611c-3be1\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cez8cTjvoUxzldvPEYlyMkR0xFZ8TJdIqMZcEeHbkDG17MOyNGNhD%2Fcr%2BdHoKE7%2BpuxZDQ%2FyaT9tGkit2omQzypgQcVrvj0WEwt4XAtPgeoE%2FjnfI0%2BPcYAfuxfjc9OXKCJFYNgOmn0%3D\"}]}\r\ncf-ray: a12c513a9bfa0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15329,"size_decoded":3618,"mime_type":"text/css","magic":"ASCII text, with very long lines (15279)","md5":"8dfd759709727b19530fd9fc6f8d1033","sha1":"76bfe022702dbe9f7fa5357a4da3a035f26bddbe","sha256":"2533f4f99c8517851e95c6f64d06a8c1e9f2a0ad496d7f01bfc5ac11359afe3c","sha512":"37a7dfb309eb394209d7b08bb5162e0fb988afd6cead553a608da2596d767c92325ac76b1816d60134bfd93c5d89cd0308d16a83bb128f1dd460d1f01957834e","ssdeep":"96:lJQRC8NcRue5Q5JmA91j9b7TlWAIrSfbjTe+6M/Kq/3B2536BV1k:bQ5NcRueAz1jZpWAfbjm9z","tlshash":"dc62c984a8505e7a3c637e6247dcdf0cc11b90d288eb2a9e3edf544e06c27d91bb6746","first_seen":"2026-02-19T04:44:57.803518Z","last_seen":"2026-06-28T13:11:03.94333Z","times_seen":21,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/css/benefits.e3124d61.chunk.css","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.817Z","timestamp":1782645784817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/css/benefits.e3124d61.chunk.css HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Jun 2026 10:34:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611c-19ca\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPIE42SzqpxBtBu54sFs%2F%2FjBq0t%2BAUhh6EBXckKyuah%2FX40FUV7DAWjrn%2B5ftMYTBR3LQeuhkCri8x%2BoCIpYz49bu0W0AdfsUDzBqU36iPLLAXWhIhcoc3CwfNO8ArzXzIp%2BLO1tJjM%3D\"}]}\r\ncf-ray: a12c513b2c020afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6602,"size_decoded":3660,"mime_type":"text/css","magic":"ASCII text, with very long lines (6547)","md5":"65a769fbcdd9468701a93f37352bcab3","sha1":"f09b4718020224af0adf867fe92ba1f31ec118dd","sha256":"b4b75c29748237f97cf95f7f31b5abde4caab1f38450ff1519d93722e06819ad","sha512":"953fc4d084b5469955c968b43fe21a003ae786a2a3e67861ea8d8f93e57616aafe567b36a977471fd16c04e58b654b968734b3c73705d1cff1d8eb0b873b0bc7","ssdeep":"96:fB5mSJ+MbpDAKneQYXIhJIZiS+KSme+je0CMWw89BfUOwImd4:nmUJbiKneohJI1+KSme+je0CpJD8z4","tlshash":"0cd1c730a3241c63a2234f384744f6f85ea450738ee38519e6456e3cdbfd8f4165e792","first_seen":"2026-02-19T04:44:57.807695Z","last_seen":"2026-06-28T15:35:09.695149Z","times_seen":23,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/images/benefits/andrej-lisakov-_GNNUBlPsjU-unsplash.jpg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.270Z","timestamp":1782645785270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /images/benefits/andrej-lisakov-_GNNUBlPsjU-unsplash.jpg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Jun 2026 10:33:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a610a-10fcb\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7Ix24yM3dEUN087pb9RPodiYVJqm45F%2B6%2Fp0zFrJdnzoE5QoVD644BavSsMQfD6NoxtCm6vcOw4TaSUlRq05LD2q4jaW8kI2fxxwWqRy89FPfg6SH%2BfjNJ4fDAsQDIBuKaokRlQbsk%3D\"}]}\r\ncf-ray: a12c513dfc1e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69579,"size_decoded":69766,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"c2b3ef8803a0e9a819bd2724853c2315","sha1":"9cd61e353cb968783f017073e565d79729fb7e81","sha256":"38e53651a9459d3875db81ea69fc968adb6ee2d2dae2d1928f9fbadde654dcb6","sha512":"16cef6e15a802dbcff48bbeb27bc1fd4de893d3f5d4353a820b375f7730eeef72f8cc961e3b784086de46683ef646d1826aee51f15add2f483939b3b8622e43e","ssdeep":"1536:h7d18xBhFjA5WmBhgY8AXlwmw/zHAKJPDPNR2LxK:h7XShF0wmnX8A1dAzHAU+Y","tlshash":"13630295aa544ee7c45499b128fa373dd7ec152cbbc8b813a9e0bfacc53140872dc687","first_seen":"2026-02-19T04:44:57.791238Z","last_seen":"2026-06-28T15:35:09.689028Z","times_seen":23,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/main.06a11e27.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.453Z","timestamp":1782645784453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/main.06a11e27.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6124-98d28\"\r\nexpires: Sun, 28 Jun 2026 23:12:02 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXO5Y84o1awwvZ63r%2F80i2zz7Bb%2FEl%2BvRmHxFz29GAWF6hQyBS%2Bit1WaHCZf5HCDnASuevnABaIiVb1omW%2BQUvkhYm8U0DNIwL3Y5ts3xMyjcgHO8v1We4riQsR1%2BLXeGJETs70HNFc%3D\"}]}\r\ncf-ray: a12c5138dbe70afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":625960,"size_decoded":210631,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"97b877c0930d7b74136f0611aa066d7c","sha1":"0eef1383329aee2fcc5b9cc252a7c50e73ce6f9d","sha256":"8bfe3d0792dbf6a981208d9f15d2ab8c7b3e53b6edda998c09c05f3c9a893479","sha512":"42efef2db07bed0e31b47abaf30cdf357ca5b77564daa097580c001844c93d1649860b9921aca0361b2aae5e5a4fb04d40a662d5964a6355c6a07667e4f25c42","ssdeep":"6144:pvCwJW/fbVKc7Qxa3h+urk6fWGePa71AanY6/OImJnl2Lvh/SCLlu//wDkbH3nQ/:pv4Eva7MEO1l6gCLlu/4DkbH3nQ/","tlshash":"f7d46dc93292b06157f302e6907f0507b33d591a380cc864b569fcca65a998eb27bf7d","first_seen":"2026-06-28T11:23:35.231215Z","last_seen":"2026-06-28T11:23:35.231215Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/235.1a9a842d.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.815Z","timestamp":1782645784815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/235.1a9a842d.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611e-154f8\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx98AdQzY3mzkNK0SgZL8%2Bo0hZNFnKlm04kknsoMEjvDJvxuGaqizE8EclFkZfB1MhJDCGDEdxnuZqC%2FGOxKD4%2BkQ7SC3Y%2FS4bnABIm2P612YzeYuUiPd9T%2Fqr3ECmb3Gl%2F1XRMRHZA%3D\"}]}\r\ncf-ray: a12c513b1c010afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87288,"size_decoded":26774,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b321b34a3063f8912eb7705057e1c76","sha1":"1ad3bebfabd32558deaa33ab77e6822c40845fef","sha256":"9961ce1ace21bbca9efdc54a3641236385ebbade26227172ecf21eb4b5eeab38","sha512":"3426ad1cf2158bd329c680b9a07f853bdac0766b03c149f144b69efea010b9d0fccd12ccefdb5b0fb9b44cb1d0e8318517e267ab6bebef920825f668dd942a05","ssdeep":"1536:BzfGIoKMmSmVy4JQeD9BlxvHk7+NEosXiA6wPXNHAgdmpIW9kjZC:BHMuR0CSXmn","tlshash":"5d831989a130b57692e715cb83a5c111b3b24905b949c4e4b1bd8cbb987dd9803feefc","first_seen":"2026-02-19T04:44:57.762451Z","last_seen":"2026-06-28T13:11:03.960385Z","times_seen":21,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/benefits.516477f9.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.818Z","timestamp":1782645784818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/benefits.516477f9.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6124-21b4\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJsr3%2FJ8SXcERchFJz8igUgs%2FYcDnYJUcUoYM%2FcX%2FyeFHf4kMb%2FJJj6nj1DQrzEsAutIoy75y%2Fmh18%2F6Wy%2FRpq0IADEAGm8U%2BzSppj%2FsNQT1%2FTB%2FwmJzvXVu4IIUB2HlCwyYT2eaWEI%3D\"}]}\r\ncf-ray: a12c513b2c030afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8628,"size_decoded":4495,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8576)","md5":"57be1713044e2760c7fc8227c498415a","sha1":"18bd3cf0ff063439ef9a43d562721279e263be76","sha256":"a786822613dd5b9bcbee7239c77d0032ad0d0a25d40db4b865b69edbcfc83380","sha512":"c7d2e07493819787e04fbc971d4744d8efe9d85babd08b5740235bd5e00871a0bfa446d9736a5202dbc9fb3e8d755d8a1a6a886c67e49512ae71f6ae43bae4f9","ssdeep":"192:2ScP9sC36X2FRG6nAoaBl6R9BzOANu1cqi7B:2ScPyC36XsTM36R9BaANLvB","tlshash":"c802e64c82603abf7e2105416d4fe299d25d8e44fb8ac078bf7c340d16e52a66637be9","first_seen":"2026-06-28T11:23:35.234004Z","last_seen":"2026-06-28T11:23:35.234004Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/200.ae0003d6.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.825Z","timestamp":1782645784825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/200.ae0003d6.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611d-cc2\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zc3ocIhajqX9O6wPP0xElY2PY0kjH0ubpp%2BKln3%2B%2BwebfIOzjs5sp%2BckcZMzBJee7j6DMSGsKV4nE7wr1QQnf6zpfxba3yYSwzm3euSSU3nh1oQCpENkv%2FECoVCdsUUt4x%2FyQ1t%2BVFU%3D\"}]}\r\ncf-ray: a12c513b2c050afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3266,"size_decoded":2146,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3219)","md5":"1f42332d3321bd88eec9f9a8975bfa44","sha1":"9f48b0e25b0847a40ee5032ebcadf457f684edb8","sha256":"f99ccd22fb419326e25c69e331a310458cdcda2c6fc648596f39bc6bf6445a66","sha512":"f671299c8563021458b2b6ffb87d4181481f7bd0797f5b179207e4b3c98510dde37ce6ba8f08f27581e25f8bd0789b67b21a4627f104f53f3bde0c09f53d6e4e","ssdeep":"","tlshash":"8d616380b295b9b861c381e890bf7607f139351b307ef094d7a2c5f0b4b449a6536ebb","first_seen":"2026-02-19T04:44:57.809306Z","last_seen":"2026-06-28T13:11:03.960955Z","times_seen":21,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/getty-images-my1wo8txDPU-unsplash.webp","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.885Z","timestamp":1782645785885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /getty-images-my1wo8txDPU-unsplash.webp HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 10:34:20 GMT\r\npriority: u=5,i\r\netag: \"6a3a612c-be7dc\"\r\naccept-ranges: bytes\r\nage: 661\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq7ZN2BC8f8IJB2bPNP9SM9gey3ztkPMC1Yta03w85qhVyXZm5ukSt%2FjKy8E1FnShcccRH0qnokXywIvll43opzXeP5wSiH7lpjcelcGBtQX8raYT3hTUGm%2BxNu3SqQ0HEJibkV3Ds0%3D\"}]}\r\ncontent-length: 780252\r\ncf-ray: a12c5141cc2a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780252,"size_decoded":780961,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"658d249ee2daa75004975d9ddbf4114f","sha1":"113779a460e18b2fdfe236eb5f7a408118d41638","sha256":"cc1dd161d66727dcdf470924814949dcc12f529518e5b2c09a0859332bd4c74b","sha512":"a82d5940c389bcc920746e1e4be14b9db3f3c00bf5289f57c087495886c8e12a106fac22f7777fd88177c41683826e144a592fac9cda6baef53931cf41681012","ssdeep":"12288:Jmpbfq94pUf3kUNQCPywbYJufRiUxssm4fweqGqdwD9gcH0NDH+h476blQ+:y7C4pUfRNhTbYJukgssuxldwDWj+h4m5","tlshash":"56f4334e9ff81b18daffbbfef29a3ae8a123b356574824d5101142c634d9c505bd01ea","first_seen":"2026-02-19T04:44:57.758259Z","last_seen":"2026-06-28T15:35:09.693064Z","times_seen":23,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/cards/plane.png","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.829Z","timestamp":1782645785829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /cards/plane.png HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 10:33:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6104-231292\"\r\nexpires: Tue, 28 Jul 2026 11:12:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=osTBFB2Zz%2FFVNuTaUE5cUsoYVOGLX8URyM4EYvy63k8Ot%2FafLD4SkesGzjnMnOOc0XSbYnhax%2FHdN5h0%2B5fcTJ%2B0Ex%2BJsfzM8AJB4PtALfXBFLH6nDN%2Fvink0cFNbIhjQpWuIsn%2BdAQ%3D\"}]}\r\ncf-ray: a12c51417c290afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2298514,"size_decoded":2300001,"mime_type":"image/png","magic":"PNG image data, 1920 x 1128, 8-bit/color RGBA, non-interlaced","md5":"be099d7b621cf4733084006a8eec13e0","sha1":"a60eb3578b5024860bff7bbb5ac5bd0342251bc6","sha256":"93f5385f4a892364e83ea93c0e7bfd2600bea4f6762b2da77f00fcc0e6164d4b","sha512":"a499b35aa15df56869e6fa751994ef6cf578aa93b36fda8956bc4072b4ed32d0ed7b0b6cde3cd3f2c95e13c7291d9da2de83e89c43be74df5a2faa8a1c9ea1e3","ssdeep":"24576:xQLn2NEMzHaFZUE3RSf3kyaRWarPihiiByEO:Gyas6nd63kJHrPwi5","tlshash":"0825330450ca1d6310ecaecdcd83289e2d08353ed65aea15de15b2aa3fe36d15df0e99","first_seen":"2026-06-28T11:23:35.239099Z","last_seen":"2026-06-28T11:23:35.239099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/getty-images-cgCdRyNmz28-unsplash.webp","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.887Z","timestamp":1782645785887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /getty-images-cgCdRyNmz28-unsplash.webp HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 10:34:19 GMT\r\npriority: u=5,i\r\netag: \"6a3a612b-88f2e\"\r\naccept-ranges: bytes\r\nage: 661\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucCsTo%2BooUEHYwHkGp%2BIK6O0IqfgFbwaAyk7FL6BEAo2lM37ejB3CsJHdNBTB6n6wjV0B3gqH9xUKcpU67n2fheQNhkqiVIhDD1k%2FSG4kFvULEmBKN0HM1D5xXT%2B2JXnEgPqfSgACFY%3D\"}]}\r\ncontent-length: 560942\r\ncf-ray: a12c5141cc2b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560942,"size_decoded":561653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58a965cb26ac983e7751b75090d3943c","sha1":"e1f2d719ebc44b830141d210b52c3b0c30de622d","sha256":"abf15cb426904a449c4629b58ed6c86227ad1b91741cfabee41130b343e7e8bf","sha512":"c82c229161ad8f30e05e3e8ff89b30960d957cdb2e59fe73e4e544a53948710aafa987c80fc296410e23353d99127747fd0052ea2865a0ef4c99b592b4f95393","ssdeep":"12288:6G+bst+qQbMl0FFwxEqGP0IZgzVG5F09vxr6EHnh+yMqIn9K:6zI+pM0qEqG87MF09vYM01qI9K","tlshash":"94c423b7a7ef53ece8f12176391b775d609aa340c0a0de435dcdd607c57a0a8838c9a6","first_seen":"2026-02-19T04:44:57.77985Z","last_seen":"2026-06-28T15:35:09.711323Z","times_seen":23,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/images/benefits/getty-images-69jSANaMXlE-unsplash.jpg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:13.977Z","timestamp":1782645793977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /images/benefits/getty-images-69jSANaMXlE-unsplash.jpg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Jun 2026 10:33:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a610b-c2c7\"\r\nexpires: Tue, 28 Jul 2026 11:12:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 662\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vsnNO6JkG9y2ZM1LdLlSfKIyLcLMCRMugEXvliizivyHGEb3nKBpezyvqSUSI7U6oce5yRZcw%2BdnXY9uO7wN1%2BANal%2F%2FdBEBg678cc2Md80ggGpa8CDS1curUGMYkKH4E96LpWkVjw%3D\"}]}\r\ncf-ray: a12c51746ec50afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49863,"size_decoded":50038,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"263a3b7571861f2ae48bdf512c68e8c9","sha1":"6819e4a0199456ee275eeb3e5ba5d9248abf461e","sha256":"18f2428d31aa6d9234367881c4c700096f376dfd9ceac941d5d519bcb55e2f8e","sha512":"ed4f80eadfa5c41f878b1ab493541e58973a7f0e2591dc245394a3527452f00a080be8fe4f40cd93070cac160c6a542b2c0da2f31adf262a2d5d1c0814b8270c","ssdeep":"1536:h/YLlcPfM7emcmt6SbqT8kS/4KxR11M0XD3GrF7daek:h/YL8M7e4tM8kS/4OR11MLk","tlshash":"7923f1363b2df377da34cb3c5a06738cf17101aaeaba0ab950255b1405544f6a32e2fd","first_seen":"2026-02-19T04:44:57.816029Z","last_seen":"2026-06-28T15:35:09.712849Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/312.d9d76438.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.715Z","timestamp":1782645784715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/312.d9d76438.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6120-78d5\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5x4DvWwRp3MBPes3TfdXKqzWsDU%2BX76qOd3W7r3H3elLVFQEIYXtT538WsjP6nGLFen1BRycMVSEqjGfScq8pvWTVQSo3OiiunRj89lNvvs6grfZa1J1pAnaCrvdEHfTc3sF6aocsoI%3D\"}]}\r\ncf-ray: a12c513a7bf70afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30933,"size_decoded":9109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30886)","md5":"fdbc23698264ac2026b9e798cbe2a1db","sha1":"dafbd36b7f2069eebacd4f6eea3e207418e96291","sha256":"d2b9f704630d073abdd92de816c5165a4cfbedc7af102db81138f8938ac80701","sha512":"f7c299e0bcdeb3df4eacfbeac5fb50cab6c9bf42e1a10ac94e6fcc8f7ad8b6940ff7c8a97fb66b2f2b77bbcfde09ffbaa133ee9b65a54b99cc66fa69bc520274","ssdeep":"768:DisymQM6/uqNXjMTfF7OchDvYnY9xFlpUAmfh:MLhuFlpAh","tlshash":"afd2005b872e5faeb41ffcc6da5f8b0ce26d2b05ba99d874ecdc59510090082b67235c","first_seen":"2026-06-28T11:23:35.244731Z","last_seen":"2026-06-28T11:23:35.244731Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/995.9478b956.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.726Z","timestamp":1782645784726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/995.9478b956.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6123-87b4\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FLWocvsWQ7DrIpNvwiZfSpL7bHh0WuGrNWyuTMNYaUYoDsCSbQ7Z4YHPStS5J3lmyr59gFbedipV9qLLO3REis42OST2DWbHEA9Caf36yoHlsm91RHNdU1K6HuQEN7xyP0MvJe2uvo%3D\"}]}\r\ncf-ray: a12c513a9bf90afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34740,"size_decoded":11353,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34693)","md5":"cfb733d4e8aa985c220818a93a35507a","sha1":"889463e23e63935f945a94f64c6b01fe380a2b7e","sha256":"862bceeb0d92cd0b34dc14c434914ea3a6f2a99071a5f6768efcdf8ea34aa132","sha512":"7ff0ba6de0e56d23a73ca5402e6e464357ac5aaf6271f16d9c8cbbd6345e934591111f7e4523ab71d0236f6df015028740b1a18cb96446d60c828660d3dc0fc3","ssdeep":"384:7OkCTQzbeex9qVuxxxY/oPxC8XI1IxJxxVxbxtYxxEfAV43Uyyf0x4xmXox/KOx/:7eQXlx9wuq/v8Y+fd3BjC3z","tlshash":"5ef2f980f5106e792da37d5643de9b0de12e51c258ef084d7eef844d2681bc91fb2b1a","first_seen":"2026-02-19T04:44:57.80194Z","last_seen":"2026-06-28T13:11:03.9631Z","times_seen":21,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/232.1d466fdf.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.735Z","timestamp":1782645784735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/232.1d466fdf.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611e-13de\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fg0qTBif1SQqTUECAQuI%2BioS1IMnf%2BXH8Ty7BzJmvnmrUS2HmE1yWlt3DKniSQNoE6u8p18MQAdji8plUTN1uscCa3JNty7ri4rgMp53iyyD7PaDmfpOKFLynWn%2BGcRVSJVLJzdeiGQ%3D\"}]}\r\ncf-ray: a12c513a9bfb0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5086,"size_decoded":2849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5039)","md5":"617b4d4a3c30ec0278093d0a17a3dce5","sha1":"3080a692ee80027d20068812b44a363df30cc558","sha256":"245bd371bce511b12dcca376a33c869a0e7d7b6318f0fb9de639122f14607acc","sha512":"6a2f2bff394d218ad8ee031be105ffb04949bd2dacaa9e3720d9d27b5b6449325eaab44d426f178dbcdb38f4ba57baffc73139515c4b635a15079ddf2edef53c","ssdeep":"96:O+A4ShTAZLPBdzFVjkP88Ov0oF7vALP1h4/oi7xDiV:O+bQcdPzgpY7vgP1ti7xa","tlshash":"9fa1b957a091267ce2f780872c5e002eb6356a10fb0a8862f6bcbc1835543c5a672fde","first_seen":"2026-06-28T11:23:35.247274Z","last_seen":"2026-06-28T11:23:35.247274Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/184.c44e07e8.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.814Z","timestamp":1782645784814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/184.c44e07e8.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611d-2b96\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdJkpHrdj%2BU0zkJ0ofeGRSMr6hPJR45b1mzU%2Fv4LFsvKUwfP%2BXcby9vaZdv3JbdIV%2FZtUcMQgM1T8VpzX3sdQLUaqg46iUtQYSxAmubihr30QeKRoIT4K8iOu%2B8e88TCuEeC69PBrVA%3D\"}]}\r\ncf-ray: a12c513b1c000afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11158,"size_decoded":5323,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11111)","md5":"604778751cb87910193fcc91087e3c07","sha1":"737a0e225ad27402de0d0066e153282bc687d102","sha256":"197fb311315661138129461077eb1d266e289663f992b7030fb39ad408e347ce","sha512":"fc4bcf27a2be7e1edff3caf0507b12a8f9fcbda286b47bf71bf1f859fd17c6e9660c9469bf583b38d507bdee430e76af0d7ec3b38625799d03e3dbaba247c0da","ssdeep":"192:XGMG+HJg15hlpur+m9Tnx8E00U9IcHZSN2mGqRZAOpLFC5g5i3QzKclqim:XGX+HJg15/pI7rSE2H5SN22RpPiylqim","tlshash":"e732e895f31473bc59c203b0c6762141b65f259e31da91b8a2f1c9e0b2875dce1bb8ab","first_seen":"2026-02-19T04:44:57.794714Z","last_seen":"2026-06-28T13:11:03.954313Z","times_seen":21,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/logosing.png","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.229Z","timestamp":1782645785229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /logosing.png HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 10:34:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a612d-a09e\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COtIuAGVT4krwpdWUOpJHPHbpzWIkrRw%2Bg0LH46AQZ8tW%2BVC8ad1HHfFgriWmY9FhvutmMcl3TP%2Fac6Cr3vcZNmZNRHIcnu9G0LIvXgKewkvenUJ%2Ba5gJJNf7NK8HMQ5ul4mBZ8AnMM%3D\"}]}\r\ncf-ray: a12c513dbc1b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41118,"size_decoded":41819,"mime_type":"image/png","magic":"PNG image data, 383 x 460, 8-bit/color RGBA, non-interlaced","md5":"36ec5df5ee043bbe290d3724fa285593","sha1":"4fd7d82a0543e6a2c69ffd9f08ddfeb7f90ba34c","sha256":"8c228d085607b43bfbff4d3e2a753a1ce6ee43cf326dbf6cd47ae9293daf584b","sha512":"6c38033a0214e1adb32dc961c0a3b5cd4b765b001aeb8b0284b1df7040493cd9e3bf5dea2baab4407f5a5de86e37ca2249a96370583c5c6de28b7946b120a150","ssdeep":"768:tUWGpDuoQQ2+kT5degQ1ovVUFq4qIoNyC+m5Ci0ujyhQzHc:tCJunqFWIbK0yw","tlshash":"8703f11afff9c16293ccb4a937324a305b74f41dceea531591621830a439966d9c7bd8","first_seen":"2026-06-28T11:23:35.249489Z","last_seen":"2026-06-28T11:23:35.249489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:23:04.075Z","timestamp":1782645784075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 23 Jun 2026 10:34:20 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTng2OY81nG1yAqhXsrc6XfNSCXgA6hETR3cB42%2BMz3Sngs68j1o%2FUuyZHkapP0H1WQvo5CQAPw4vKbnD6IbCLtQbkTlwi6oH23pPagDUxvq7gs3m7IrX4prq6L2wHyxqA6Jce2Wj24%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c5136abda0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1622,"size_decoded":1422,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1602), with no line terminators","md5":"ea873c162a4f8c6da772caec204d1269","sha1":"ee10232204ed24ee64e882375ac8c8d4e293e2d2","sha256":"e54f7411e95f1392d82e5c3f0209182fb9e29df52c38207a70710ef6aea1652a","sha512":"f96826ce07910649c01a8c5f004c5c098f63d69373a10504f4ad76ec043f54e54b908aaaae68bfd4d5f8fd89ef4915cec16d03c2c67d850878dd51cc4db77b34","ssdeep":"","tlshash":"b531c0634c315c0d63b2127aaf82f0088c65ed05d274ac84b9ed115b56c4e85ce7be12","first_seen":"2026-06-28T11:23:35.250579Z","last_seen":"2026-06-28T11:23:35.250579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":9,"connect":19,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/media/good.2d3d80805a94acef66b0.woff2","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.513Z","timestamp":1782645784513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/media/good.2d3d80805a94acef66b0.woff2 HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/static/css/main.ad73eda7.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 10:34:14 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3a6126-a870\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0kMtJCFJRQQA3anpU%2FVvwQUnBYcu4RcgOS8MDdjLPtOEDeINFiv5JBaVkKNGMLT24WmD1cGAkJ8O49qesWbT7NgRUaJF44ZRyVomFM%2BDlVkFtC5ge%2B%2FlotqXjjXycgaurZ8KOoX5zs%3D\"}]}\r\ncontent-length: 43120\r\ncf-ray: a12c51393beb0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43120,"size_decoded":43823,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43120, version 1.0","md5":"5032e93bbe3d120bece5d4d3309d3b8b","sha1":"15853fbdbf4948541a3356d9f874628d127f805c","sha256":"10f1a0ef3f3497901c1c3e9987d0cb97d092a6ce1ff45669a1aed503cf67e6ef","sha512":"daed69c64a41bacb33d23615156b57f994791b007d5b2e2a7a61abc1bf9f24b12e07c96fe82ceb9ebb680436c68b37e59883bbcb4ce3205362c134af590d9c6a","ssdeep":"768:83gClYq8YvIm/HUlL2QIwph9odr06lstg3u7uWqrGcL4MnOdV/F:O5b7MlL209od4qsm3uqWXcadVd","tlshash":"d513f259d60ca8c9f380fdaccd0717935e1ff5c3c9361122db59586c2b6932079ae9c9","first_seen":"2025-06-01T09:45:38.770498Z","last_seen":"2026-06-30T00:15:45.796729Z","times_seen":2360,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/video-preview.691f190c.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.809Z","timestamp":1782645784809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/video-preview.691f190c.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6126-16ce\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s14r6ZrRtvjSzjuvHoQ7iO1Vcr2D8g6gpvuqrQXSsTfKZ6TQuO4c35MI050r2on8PvmM6C%2Bq5Q5OHi1T5i5oeYXRs81%2BQcHCsSmFsI%2FlckV9Pd7SgUJEyl8Bkg84Jl%2F41elIDA%2BxT%2Bc%3D\"}]}\r\ncf-ray: a12c513b1bfe0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5838,"size_decoded":2954,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5781)","md5":"be7138fd4c8f9de0bd8a1c30fb3b3855","sha1":"01e29dec6438929cf5e7f754c01a139f1a414921","sha256":"6d38e43d63c0a46b5caa39ddce2795f2a2298732415b101224a650ac25447548","sha512":"fd5e00db33c676b4894552f145d8bb152ec5a139d1291bd332cc30ee968c91f242999589de058e122c1c04445341bf2d451b5bcb613564908e29f162c940afe1","ssdeep":"96:v/E0ei9A28hJlcZpFG92uIRyGLHoRrFyy/cR9ukaMDxAeOa0ULjY9/NTV:nVeiq2yvczF7yGLHoRRyykRjn0ac1P","tlshash":"77c175cdd2933c2e995b0ac5296bc20a103d49d4fd778c88b3bd2c0a41021597d9fbed","first_seen":"2026-06-28T11:23:35.252307Z","last_seen":"2026-06-28T11:23:35.252307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/popup.67878afb.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.812Z","timestamp":1782645784812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/popup.67878afb.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3a6125-2f4\"\r\nlast-modified: Tue, 23 Jun 2026 10:34:13 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FPvH3h3jLZDceN9oe5tvfLUcbqQM%2FyyzNxc3o8XLStJUCm5grNj2OG1g6d2XAWZSZBdxRyRHWmlaJFwsCBOKFUph5M5dz6UhCYpY%2BF0E20FMrhLETp82MNgoiGTGxknlUeRXoouHaM%3D\"}]}\r\nage: 661\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12c513b1bff0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":1217,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (707)","md5":"2982f7266a0683b19566bd514adeb9c3","sha1":"70773c4e470596d6ca60925d6263754b163cd246","sha256":"82bd337db34f30ef8998804aeec3873f48af98fc7ef420374611f197e2a343fa","sha512":"72de6e1353190aa360547772027fabe89e3e3a1b910ac63a3a60fc384b20c0d359f53c66cc4b1c3373bef5d0ca71148dd5af45d772c228cda4f02ae6445b3b59","ssdeep":"","tlshash":"bd01fd48a1a0bde8a03f098ac2aed54d633ebec49a248cb4b56c78010b414bc5b07ba4","first_seen":"2026-02-19T04:44:57.795886Z","last_seen":"2026-06-28T13:11:03.955523Z","times_seen":21,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/faq.ad5c0967.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.826Z","timestamp":1782645784826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/faq.ad5c0967.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6124-135d\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HE2Y4qFnrG2eaxRA%2B5BY1ciS57YJod5tcN%2FVzimh4CjrFMQOIJoxamsHv3U7MEeJlcbv5EHvoHDCK4Aprl0yNnRTVdmNKB5lW1X9XpBK9z7VPBJGqhvlUUFnokFzSH9u4Qk53Q3ofME%3D\"}]}\r\ncf-ray: a12c513b2c060afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4957,"size_decoded":3103,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4910)","md5":"2fc0be944d69f2ddeb4825ae953a24ca","sha1":"a96b43d16f865af2b0ee507bc8a963ff590af37b","sha256":"3ddb3cae250df209d888d3d2ab5c0401e278ed67abfd0e4443c7388e042b9381","sha512":"f610432dd8265e4fa7088246e48899d7f4d31095b4a8cc6766dc7a9a5b81d38cef12b789f2a3e2c96c39428e81e47e5983ee6ef9172bd420ed17dc5a62072ed9","ssdeep":"96:bFSW5BJq8lBs1Yhl4u/U6OScr34EzTJAjzQg3DFLO9Q7xpdvLV:UW5BVlBOYfzOScrFzdA3dJ/Zh","tlshash":"c6a1f84ee4d12fb8382343896e8f550d792d6f18d71f0ce076a9108902656fe3623bcd","first_seen":"2026-06-28T11:23:35.254353Z","last_seen":"2026-06-28T11:23:35.254353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/logosingwhite2.png","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.829Z","timestamp":1782645784829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /logosingwhite2.png HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 10:34:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a612d-15d50\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMvEsb7FVSeSXjCWWMy9TQQqqYnxub8Bt0gG%2BQuHDJA68RegbWEv9dnZu0nn5l5wlau1mlTsBWO%2BDIHFAb8SfTX%2BL4PknyOCu2fEUwk2cEsH6Nr1g0TITCzQPyDP2b%2BTu8QMgU4BePs%3D\"}]}\r\ncf-ray: a12c513b3c070afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89424,"size_decoded":89270,"mime_type":"image/png","magic":"PNG image data, 921 x 638, 8-bit/color RGBA, non-interlaced","md5":"7896fde7c33fa399b5f832abc571f27a","sha1":"1f339df23d04bac4c6573c29a75a73aa2fe23909","sha256":"b15d03f1af0398a7a169162f7d8e98dd7d7e1efd2ad09d4644fe59f489d40c16","sha512":"001c5fb641eee5a5fb275db3f0b8676981b7e426b2561591d16f472ae1caf6cc113cef136faf65cab9bd26c8c1a95b72aa9ebe86a4752683afde43177e20705f","ssdeep":"1536:KxgM1xpA24mTPG1BMb4/3QHrfzSkQmAGUiQ+xpsDCA1hIHhKeoUBQfPBc4:KxgM1xp1R+7MM/+bmNAUYsiHhK5fJX","tlshash":"0e930255a57d4e5e80938b6c1a9a3ffc47c8d68a505b4e2e24ac40ed37b43d42cfec86","first_seen":"2026-06-28T11:23:35.256061Z","last_seen":"2026-06-28T11:23:35.256061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/css/main.ad73eda7.css","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.456Z","timestamp":1782645784456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/css/main.ad73eda7.css HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Jun 2026 10:34:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a611c-d314\"\r\nexpires: Sun, 28 Jun 2026 23:12:02 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7csjmAeIaCfeikeG2Y9ovI%2FqFkc8yb6%2BryaVBasKOPWzrzXT084EPHfKUsxeDlEdA%2B7soHQ6kfiwtz7f%2BFjNjq%2BTlW1jHNfMYUgOszeQoOj9onQm8p%2FfvRM8B778eL6WnwmuSRzbrxM%3D\"}]}\r\ncf-ray: a12c5138dbe80afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54036,"size_decoded":10782,"mime_type":"text/css","magic":"ASCII text, with very long lines (53927)","md5":"d3b74f4c1b299a0c568119450b0b0a4c","sha1":"ec0bdaa306acee01e21a6e2323c935cbde4d29d6","sha256":"02d231ebd5112b846b1d3bad16f9bcd25544b9d766f0b6655047e119ec082b5b","sha512":"504f956d11cebb19deb2c09301165025e4957ddce2b2ead49edad69dbc588c4574fdeb86c418729f603aebbb8e82012ef4a8e11d2d4c862ed42c0504fe02ed87","ssdeep":"768:aFruVM+z8jlW6tEMVsiXE8wNN01Mwhw7u7w:aFruV5z85W6tEMVsi5Gu7w","tlshash":"0033636d97a5243bbc13e0f5e298b96de11ab5d8ef3a16d7bc821204a7e13f74c53900","first_seen":"2026-06-28T11:23:35.257156Z","last_seen":"2026-06-28T11:23:35.257156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/favicon.jpg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.661Z","timestamp":1782645784661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /favicon.jpg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Jun 2026 10:34:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a612a-a09e\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSm262ljgcrPF6LQC3R4HdfuIxshtOMo2UmseC1gtWdyZYCUJLRmBLOrRcTNca403tOCvRtF21WiH42gqCEmBhQg%2FKmxKVYy0eFQvrgCMEHxX8CPD3aSq%2BrGVF695xelqDmVkKKZtLM%3D\"}]}\r\ncf-ray: a12c513a2bf40afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41118,"size_decoded":41819,"mime_type":"image/jpeg","magic":"PNG image data, 383 x 460, 8-bit/color RGBA, non-interlaced","md5":"36ec5df5ee043bbe290d3724fa285593","sha1":"4fd7d82a0543e6a2c69ffd9f08ddfeb7f90ba34c","sha256":"8c228d085607b43bfbff4d3e2a753a1ce6ee43cf326dbf6cd47ae9293daf584b","sha512":"6c38033a0214e1adb32dc961c0a3b5cd4b765b001aeb8b0284b1df7040493cd9e3bf5dea2baab4407f5a5de86e37ca2249a96370583c5c6de28b7946b120a150","ssdeep":"768:tUWGpDuoQQ2+kT5degQ1ovVUFq4qIoNyC+m5Ci0ujyhQzHc:tCJunqFWIbK0yw","tlshash":"8703f11afff9c16293ccb4a937324a305b74f41dceea531591621830a439966d9c7bd8","first_seen":"2026-06-28T11:23:35.249489Z","last_seen":"2026-06-28T11:23:35.249489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/testimonials.60070de3.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.823Z","timestamp":1782645784823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/testimonials.60070de3.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6125-c31\"\r\nexpires: Sun, 28 Jun 2026 23:12:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPuQlTiEI69KJYOgG0T7c09euQZMM7h9KItUjw9fBHRDGQWD4wFB7PJS8fIWAoSxRXS9Ymj9YCcovFdWY%2B7Ogupll2ZnR8Hg9hMjhR1R2tRXY54brC2r%2BGefShC713eDACTIr%2Fm8tns%3D\"}]}\r\ncf-ray: a12c513b2c040afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3121,"size_decoded":2316,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3065)","md5":"c1ba7b06dd1cedd118d18fc188932e07","sha1":"e9ffde6406bf2e236f4feb9ce8b30eaaf1380bb7","sha256":"e534a0b183f84c23eca5e2c59691ad4ae7b54a313fd67bd0a21f4a447f97d777","sha512":"e352aca4d04ab292f83726ae121ab9cf6c8c026eb1e96c9d22f73695d80f52755b7a4157dfd9d836e6eac2ebc3f1612500a56aa08e8796bb66080939996316f4","ssdeep":"","tlshash":"e651c783c1b03ffcb16716605e0f819de21a1f10d50e8ca4b5f838582659cbc2a667f8","first_seen":"2026-06-28T11:23:35.258156Z","last_seen":"2026-06-28T11:23:35.258156Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/cards/bg.png","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:04.842Z","timestamp":1782645784842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /cards/bg.png HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 10:33:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6101-20d808\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIOWoUnKUJv9h%2BfXzOEFDQyEE%2B3vRENhEHV4H6gE7NMktwxrWhH6p%2BEV9%2BydvRr%2BScTduMokh8Nw9g2dVIxOCyi7hC8N6cnXxMyTenJCNptKG7AkBrumHI62MKQCOo62jixQZH4LD1c%3D\"}]}\r\ncf-ray: a12c513b4c090afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2152456,"size_decoded":2153892,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0ccf6dca9af1bda246f7e4bdbafb8612","sha1":"845bad74ded3b1867ccb8993823da77c5431b008","sha256":"19960c409ab25a7b60b264728faf655c3ad934e25e2f5fec8f240cdb10d3d65c","sha512":"2cead0ff2182954c1775dd3d20b9f836d47afed887cba4065473da1129d1e923273ea185335bbd3938eba9ac34f0a63e6915aa0da0f07bf6ea4ec3867b5e20fe","ssdeep":"24576:w6J/eZDiLcEMrZN5Yd9fe44MKoj3CLh2gZ0VlsiKF8jfn:rFeyfM9DYd9fR4MR3CIy3F0n","tlshash":"0b253333458d976d29dc0fc30a27d78d6a4f953d1b5e2898e630206af6f58b1306e7e2","first_seen":"2026-06-28T11:23:35.25923Z","last_seen":"2026-06-28T11:23:35.25923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/images/benefits/getty-images-3JsSaNIP55Y-unsplash.jpg","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.268Z","timestamp":1782645785268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /images/benefits/getty-images-3JsSaNIP55Y-unsplash.jpg HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Jun 2026 10:33:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a610b-12fe6\"\r\nexpires: Tue, 28 Jul 2026 11:12:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSJ4%2B0hZwyHFLxfGd2Z%2F4%2Flfk1GvsooQUH1Md6HcvbZzyYcQKUAhPaq0lNwBeoWiO1tIkbXzihXxDVBoH30oMr9HPTf2ZXNg8pJioLCamnqFDqeLDHoi04gwPoj69F0zp8JgywJqmvs%3D\"}]}\r\ncf-ray: a12c513dec1d0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77798,"size_decoded":77953,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x506, components 3","md5":"3c3398d6c68f61d3ed9ffd54ee3f3dfc","sha1":"1fbc54423f80e52da7f49047ef0834b757b680f7","sha256":"f6dfa02687a6b77898bd9db0d2e66e37d87c8f0c1f9013b46ebd634d06ea1c55","sha512":"e09417cb0a084143a0bf1077349a9278fe18859ea4d18b292f749d2850520f272e9d2aa6fd0cd6424dd90c6dc46ebe3e82b3b66764679977b576e2aca076dd28","ssdeep":"1536:hpjhvgcaOUlEagYpGYRH3Ts1x5OaY6LVYT6nbmt1Fhydu1HTZ:hpjhbaxngYpGYVTcWiVYU6thydu1HTZ","tlshash":"af73022671a3a1f8d3f640317eb06b94796c48f0519a934725fdb0eb95d8ffca6a8024","first_seen":"2026-02-19T04:44:57.776857Z","last_seen":"2026-06-28T15:35:09.69161Z","times_seen":23,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/getty-images-hlHqM4hsInI-unsplash.webp","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:05.889Z","timestamp":1782645785889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /getty-images-hlHqM4hsInI-unsplash.webp HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:05 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 10:34:19 GMT\r\npriority: u=5,i\r\netag: \"6a3a612b-4ce3e\"\r\naccept-ranges: bytes\r\nage: 661\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRJqWr8UuPzrGR4YIp11blufcuhC%2FH6ujAJlAvfXGbfVNwk1wQpcM%2ByjlQcPQ4ZIdkNdTFrZcLPuO7aBlgcZ3%2FayXC9BNNA%2BajYuOIuQvQPzI51MD6unydswu7oBUHfeV%2Bo4YJ8HdaA%3D\"}]}\r\ncontent-length: 314942\r\ncf-ray: a12c5141dc2c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314942,"size_decoded":315655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93c54c0daffe57dc8caa592ebcb327a7","sha1":"2c01889912c626014053f8a3e8655cae4f0721d9","sha256":"727a6ffefa46b153c4b933ed8d613a9f87024ace0a49104abb4c7b43e458223a","sha512":"f7170f9e73a2ec4f03a3820d15085c5f57299e5c92bf16d76e6d67d218e2ed875781dcd22ccd8aa93f5ca84be984da851760271b83a3375a51752b51f445fc93","ssdeep":"6144:TFCO13fLItJNGMAMD3m4XU0lTeFcPw98trSg6+MCKbIZEBJvocr:QQvZMAw2QZeKw989o+tiJo8","tlshash":"2864235ffab46101c9e2a97b31429c5e4591aa7df910c4722ff81837907728d1ba8fe3","first_seen":"2026-02-19T04:44:57.814828Z","last_seen":"2026-06-28T15:35:09.711938Z","times_seen":23,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flybrazilbenefits.com/static/js/328.185f3bdb.chunk.js","fqdn":"flybrazilbenefits.com","domain":"flybrazilbenefits.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flybrazilbenefits.com/","date":"2026-06-28T11:23:13.861Z","timestamp":1782645793861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flybrazilbenefits.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 09:33:56 GMT","end":"Mon, 21 Sep 2026 10:32:28 GMT"},"fingerprint":{"sha1":"0A:64:92:5F:A5:04:ED:2D:BF:A6:1F:E3:B7:6F:37:DD:AA:F1:6E:DF","sha256":"BB:C0:85:3E:83:69:08:0F:11:FC:C7:F2:F7:32:2E:D4:91:5F:02:8B:EC:6E:E1:A4:EA:05:38:BC:5A:68:0A:5B"}}},"request":{"raw":"GET /static/js/328.185f3bdb.chunk.js HTTP/1.1\r\nHost: flybrazilbenefits.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flybrazilbenefits.com/br\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 10:34:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6120-37e6\"\r\nexpires: Sun, 28 Jun 2026 23:12:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 662\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tsa2BziDJyTJg2SL9iDApM6UA5WdLNTXwQ01hvQ6UiBtQ5vdANR5%2FRzC31D8kIK3HWyl%2FQRXVgEj6VYOieFUe4vkJGZy6bvfmHGL2dCkQn9yOSKxs5Sf4yq00b72ZJ10wx2t5kTUfrY%3D\"}]}\r\ncf-ray: a12c5173aec10afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14310,"size_decoded":6779,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14263)","md5":"298514c306784aec20dcdde8f988ab77","sha1":"497eb8d8ba5097bcc3e2306abce9fd43787589bf","sha256":"cc72c170fc5f72c6ffd1b355ed0d53f0d81085943f7edfff0b8de14963263feb","sha512":"5bdde9b34c6a1b904a2ce60ecfac3559a2da9f093e74147f101d59fbcbacdeb38b8cb157491b0073b965b44cf79d796cf144853b9d80d3707f1f9e3ee7b6c5e1","ssdeep":"384:8KxcEDINI8SWUwcjU7um00dqQX27udEXPccK0nGJ5nCaZbAX9bW:vNsNI8SWUwcI7um00d9X27udQUcK0nkD","tlshash":"c2520a443193f899ab570ce1987f810db1346a48b64fc870b36c6c872a3965bb597f3d","first_seen":"2026-06-28T11:23:35.262918Z","last_seen":"2026-06-28T11:23:35.262918Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"flybrazilbenefits.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"flybrazilbenefits.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}