{"report_id":"e2b805c2-68ca-4f95-be2d-6f493dfe9c00","version":0,"status":"done","tags":[],"date":"2026-06-24T16:22:05Z","url":{"schema":"http","addr":"mercadopagobr.top","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"172.67.160.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mercadopagobr.top/","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"title":"mercadopago Brasil: Guia de Apostas, Cassino Online e Pix","dom":{"size":89304,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"8dfce4b3d5f61994c5a3005332f961fc","sha1":"361c9a1678b37d7c6e3dbb0b9fcc011819012630","sha256":"4e7bb20d2c530687bc28f99d2e14d06aa4a0e97d5c43c577d6f7e03b872f0bdc","sha512":"6b2c48ab8b6143fe7915f7ba2c72467cdf46531a3b2933860d870c497526b8f4e7277e1840f9fba0fc2d11ffe2e36d3c706591bd64e75b646f1cacd2265de4a8","ssdeep":"768:K48Zdyp6HqDnSjQs9kIIgUI0QJHik3iCNncvVd3JMBJiMMJXuVc9XN/FHOkzCdBi:KZyprLSjQ6kIIgU8C2NS5cJ+ksrOk2Bi","tlshash":"5f93f832e1f8143b3253d3cc93d1bb26a995a207ed0b96a4b5be07a81bc5de1847371d","dom_hash":"domhashee29b7a78de3d8aa9cbfc090ab0f88d8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mercadopagobr.top","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"172.67.160.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T16:22:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mercadopagobr.top","ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-06-24T16:17:03.474013Z","last_seen":"2026-06-24T16:17:03.474013Z","alert_count":11,"request_count":11,"received_data":1732605,"sent_data":6024,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mercadopagobr.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-28T08:16:44.764177Z","times_seen":380375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6abd18ad0f90c02006065682e9db0d9e","sha1":"1d4458018cf8836c3ebd12d43e03a8b0194c4d89","sha256":"de9d4b47e6fdade18738afd7ab164c6cfd0b0c803802fafc250de94facbbdc73","sha512":"de313623f915e3193edaee5b6b448ef3e2fb1244a1f826957dbfda291fe13dc57fe5c94a9e7165db64ec01b7420c1218bff6863f7d9a7b27c054ca0bc72b3217","ssdeep":"","tlshash":"28f0c019847a12731f7b14ba676600db2317400b99f6d475bbce41650fcb86001b0bf5","size":606,"data":"","first_seen":"2026-06-24T16:22:07.6901Z","last_seen":"2026-06-24T16:22:07.6901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/js/main.js?ver=1781337303","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab8aec71b76b2c3b869d50eacff78cdc","sha1":"e682b1f74189c385e7f328e89f9dbd32c89f8059","sha256":"0c842c6e1f3530066a59836ecb9bccec7649f078a490f05e6d981db988c68173","sha512":"9f47114f754c71df978b8b3f8ca6cee0230877462813165ffc006015ebe5860d5ae7e97370d76c1135a3459701352e7c554967b5a6b46cbac20415fc8f87472c","ssdeep":"96:pG8C8MYYAzCtEBt6WBn/GYGnTSrCD50vQst9TAtEBW0/8jZkKtaQA5r:pw//N6BwWB/uwC1aQstm6NmS6tAN","tlshash":"3102e73ea9a231727877ea6dd7cf5580b566300b7406c905796fba802fcc8112db59f8","size":8875,"data":"","first_seen":"2026-06-24T16:22:07.672682Z","last_seen":"2026-06-24T16:22:07.672682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mercadopagobr.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:40.766Z","timestamp":1782318100766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 26 Jun 2026 16:21:40 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8q%2BaM1XcCIO34Hba1JjK2fgEF0qt9zGUCNXMjUd%2FvRCxyH7pCV%2BA62Vr4OTBvo7DZXWxELBdPYuzv7nF9VOCIQyxf9dlD1ELRAvMFseu7lGG%2BzkQ0oq%2F9OkuVQVpD%2F77DRkXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 24 Jun 2026 16:21:40 GMT\r\nserver: cloudflare\r\ncf-ray: a10d1121cd1a56b1-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-28T08:16:44.764177Z","times_seen":380375,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/card-casino-roulette.webp?v=1778204430","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:41.365Z","timestamp":1782318101365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/card-casino-roulette.webp?v=1778204430 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ks%2FxCsikQyfphsLdB1p%2FEOQDJIMmsNLKjahBwtOS5qtrRCqZcvKgMFfC9UXxBkCGldEUaUpuU9zl1xf6wpOsKWRf3q74%2FlOTqx62qfU4udyCh7a1mCWXYTrDPXhQ80R95d27dw%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:30 GMT\r\netag: \"69fd3f0e-34e14\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 216596\r\ncf-ray: a10d11258d5c56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216596,"size_decoded":217297,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bb00aafc58bc1704d57ef33368572a2","sha1":"97dbe46a5eeb661f7078ce61b3a32a045e2a3469","sha256":"c6c23b04839afe276e041d97e5348601c26f86b6fecea10b138612bc07fdda2f","sha512":"bc5657abf412dffbdd83ba92233744c8285e45e831dbcc1031c45a70975491fce446cdce46ad1cbdbdeef58c3dad5481a268a89b2066e588f29990d6c4bb626a","ssdeep":"6144:KTIY/KUQKXjrmpVWyUn4SbYhvA4YjqUEYcmuX:UH/djqpVWyUn4S8ZlY2UEYJuX","tlshash":"652412cfd6c4d6528ecf1bf2865de16679bcb3469502eb0e1f17e7d3866d030280a4a6","first_seen":"2026-06-24T16:22:07.669763Z","last_seen":"2026-06-24T16:22:07.669763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":635,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/card-casino-blackjack.webp?v=1778204428","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:41.366Z","timestamp":1782318101366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/card-casino-blackjack.webp?v=1778204428 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCxRhiLKzxxIKGajq1s4UQ2OouKfDb%2FnGFQmupeksX2aw1JNSWmiRCaFIXm0ddHmck%2BfsdA7D3BloWAba8CV6l%2FPgI66kAmZRnNWXxChi%2FlD92Sf0KLPD6mfxcXFSThU%2FUTKIw%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:28 GMT\r\netag: \"69fd3f0c-2496c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 149868\r\ncf-ray: a10d11258d5d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149868,"size_decoded":150573,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca1ca50f4781872be335450a06805845","sha1":"67ee97d6cf97bdd92483cf72c807be47aea6b175","sha256":"eaedcde28472f6b14491ae602d9e5be5fe7eb7946d778469f9c37d653e42139e","sha512":"8188d3315abbf64440e4fff2d90465f1af01a07a1b83060d2cc51d3184f7d41369293c084b119adae8a2a9aa66f43fedb517818199d4bf34b2c374f539d202b3","ssdeep":"3072:4CT6ksOSNpBWl08Gcz7S+49llob2kGbj0OZjmWkKeweIaQBFObvzpEZbf9uKi:4CT6vNjXRVawj0iZkwj4vzpEZRG","tlshash":"40e3233ac5e89395549b1f963ea2ec7c0c83318227cb5488cdf6732ae6d2508ff5546b","first_seen":"2026-06-24T16:22:07.670807Z","last_seen":"2026-06-24T16:22:07.670807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":541,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/hero-banner-worldcup-v2.webp?v=1778204429","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:46.037Z","timestamp":1782318106037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/hero-banner-worldcup-v2.webp?v=1778204429 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:46 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdDFx3MyGNPU00DvQO7N%2FpjK%2BPTSw4RhThCYZhflqHjhZQsHUS8fQeK%2FdXzyoZUTM0yd7RHNMbX5n1m7y4thNST%2FHBx59j%2Bd3Sl4eioVK5YQUn515tGHE3fKFvIOJPHgzYXi0A%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:29 GMT\r\netag: \"69fd3f0d-390ca\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 233674\r\ncf-ray: a10d1142bf1256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233674,"size_decoded":234379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dab1fcf18ab556c1f460fba8dcff99a7","sha1":"cabd2cefa801b29f0032fd46390a2518d3f6f7f3","sha256":"410918cd55bc4318b83742eab5affec74fb670e87865734c7ec38aa96288cf9d","sha512":"2809d5d1705c1b8cfc012777da4db4826914af499ffb6e584c83cdab7054cb1cb0dd89a029e695bf6ccdb899e393ba17ea14e91aa60cc90b1a776b684b239362","ssdeep":"6144:3CQP5J+FylldV/dq1sA4M/VDOw32tTqLkBnVEctsOTA7:XRJ+FM7/dq748VCwGtTqLkBJsd7","tlshash":"4c3422ddd6df7fc75cacb809bf38663062d87e8e4734451825189808b72597ad018aa3","first_seen":"2026-06-24T16:22:07.671742Z","last_seen":"2026-06-24T16:22:07.671742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":518,"receive":676,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/js/main.js?ver=1781337303","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:40.771Z","timestamp":1782318100771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/js/main.js?ver=1781337303 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 07:55:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d0cd7-22ab\"\r\nexpires: Thu, 25 Jun 2026 04:21:41 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IjgM8woMncZH%2BP8cGjv%2Fxk7%2BVEnWmcVN%2FgTipdHRxJUSNHocxuhREDowsQmg4MSNuit%2B1U0xZL5Wi9sLO8PW3joMiKxELTbh2CK34RJ8BB5qTlAg2ldnBVvuNaCOqKG20v3FEQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a10d1121dd1b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8875,"size_decoded":2895,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ab8aec71b76b2c3b869d50eacff78cdc","sha1":"e682b1f74189c385e7f328e89f9dbd32c89f8059","sha256":"0c842c6e1f3530066a59836ecb9bccec7649f078a490f05e6d981db988c68173","sha512":"9f47114f754c71df978b8b3f8ca6cee0230877462813165ffc006015ebe5860d5ae7e97370d76c1135a3459701352e7c554967b5a6b46cbac20415fc8f87472c","ssdeep":"96:pG8C8MYYAzCtEBt6WBn/GYGnTSrCD50vQst9TAtEBW0/8jZkKtaQA5r:pw//N6BwWB/uwC1aQstm6NmS6tAN","tlshash":"3102e73ea9a231727877ea6dd7cf5580b566300b7406c905796fba802fcc8112db59f8","first_seen":"2026-06-24T16:22:07.672682Z","last_seen":"2026-06-24T16:22:07.672682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/hero-banner-brazil-v2.webp?v=1778204430","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:41.361Z","timestamp":1782318101361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/hero-banner-brazil-v2.webp?v=1778204430 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c03mt9XqQg6CXNfHyO%2F4YeNh32mDl%2FmYcLBQnuAeJZ1I2JArgpTXMMY7GfOhNrloTimvGYIaXHTq9SgA6Qf7hba%2BRoK%2BCYrfb%2B%2FXObgBFukjYXK1UXohq2ofgIXD%2FTZoPo0Eyg%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:30 GMT\r\netag: \"69fd3f0e-41556\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 267606\r\ncf-ray: a10d11258d5956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267606,"size_decoded":268315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"429003d907c76445a72ecde3697b28d5","sha1":"725f06078eaabd8936d637b24f42518529b44de5","sha256":"d8a9678903dce10bea78dde04256d963f735c5ac57b665ef4d784e78cf46ecb3","sha512":"31606fc9f7268e22b22ca04fe8292a81e4a48e8f8558eb9c4761bdf7cd72fe42f861cd0b1809ba941a19c2a648b8c7744e262f7c13c851f9c358072488e1c628","ssdeep":"6144:MIyxcl5DkfLlEV/cDcGDtu2PlIQmH42ND0vrqG91Q/:LykuGV/RGJu2thmH4gD0vrqf/","tlshash":"134423e4d7b906f1883adf0b7915894578abf3558319fb4b1bf190bc50ca039ad908be","first_seen":"2026-06-24T16:22:07.673703Z","last_seen":"2026-06-24T16:22:07.673703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":571,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/card-casino-slots.webp?v=1778204427","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:41.363Z","timestamp":1782318101363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/card-casino-slots.webp?v=1778204427 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPhTuNVzJ1X%2BYMn9wuGG66N1PniR0MnMVZT9hP0TGT89menzdJM%2FANUtyvqVlZFQBNeEMUnr9BCVxOz6gRTBS3vg7v7ZiZnnTXZVdQ123fQRfenyMdxzkDIfQHW8XBNRNKhcbw%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:27 GMT\r\netag: \"69fd3f0b-4284e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 272462\r\ncf-ray: a10d11258d5a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272462,"size_decoded":273161,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"203f3f1596a5aa2d1e69f87134c15b2e","sha1":"5f1894eee97dd505f8f53bde8726b58a14b2ec21","sha256":"3d9d5823cee37500563d330008a32941ee33672c17cdcbff12e31f9215d23349","sha512":"7537293fb585c2b3c836b5610d5f78d6a8c0518183c7049ca59f99e7cceaa69901bff8bc0bf3dcd9b79dae0e0ec194d664ef98aeb60447ed6f13dae553df3a66","ssdeep":"6144:bffmoJeTVdLqBh5kTUBuwkeOh/SM8seCVFv3zq7tz4KGh:LmxJhq7qnDD/SUeCVFfz2Ih","tlshash":"294423fa684cf8cdb13dd1b0a1500346533b0eacb9d89a7998bba782563cd72cf554e4","first_seen":"2026-06-24T16:22:07.679959Z","last_seen":"2026-06-24T16:22:07.679959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":734,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/card-casino-live.webp?v=1778204429","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:41.364Z","timestamp":1782318101364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/card-casino-live.webp?v=1778204429 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzKAbKuMO%2BInUE32yDMrSs0cKCPb%2FNBKGKmPajP%2FBqFq7MIRQ%2FMz%2BTW%2BEOmWGQ2XC%2BG3qk6nnojiYdkx51LHvUXnAKcqdZyl%2FeLJq8g4jOf4803%2BtPylng6Eo9ea4wiudDna0w%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:29 GMT\r\netag: \"69fd3f0d-258d4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 153812\r\ncf-ray: a10d11258d5b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153812,"size_decoded":154525,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b94b896b95d72352a060a11da50e48d2","sha1":"8e7ac8a7cabb7eec815d0352e1cd3e213f1b0451","sha256":"8cc255daaf77a3ed5e0fd187eaaf647e7235b3bc38e8fb31e09cab9da5de5120","sha512":"4792e09609879f7d84633b85529e4896e7efa699fd5662c962133eac6802a06605386864ef43458ebe37758fefe9c48784fc19db97bed574aa806b16e089c110","ssdeep":"3072:Xxb1QNeZwOmxOpanbHrB2FklHKOx2d/CJ7YmkghYZmsXx8B:XxhxZwLXQkbk/CFYF9m","tlshash":"a2e313591dc32d130f706d316e834026af8e4dde7bfc744aaa5de3b662c160c79c48aa","first_seen":"2026-06-24T16:22:07.681031Z","last_seen":"2026-06-24T16:22:07.681031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":568,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T16:21:39.713Z","timestamp":1782318099713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding, Accept\r\nlink: \u003c/.well-known/api-catalog\u003e; rel=\"api-catalog\", \u003c/.well-known/mcp/server-card.json\u003e; rel=\"service-desc\"; type=\"application/json\", \u003c/.well-known/agent-skills/index.json\u003e; rel=\"service-desc\"; type=\"application/json\", \u003c/auth.md\u003e; rel=\"service-doc\"; type=\"text/markdown\", \u003chttps://mercadopagobr.top/wp-json/\u003e; rel=\"https://api.w.org/\"\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FFaC99Ldcn4qIKCFP%2B6ZbT0682pwc4TWkESXOZODqXoRXaMZc8vDMDFDiDYBepWUrlUMLyuWUwPiQ%2BZ%2B82S5WnRrSKPPvetEUbfXxOEqXtLjrnv%2BGyUw%2FpvNoVNuCeF9r8YpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a10d111b6cd256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":89496,"size_decoded":19641,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"ff5e4801a93386e01c94494613eb9b4f","sha1":"9d236549830c7da905362fb99cecf08fb7059f29","sha256":"7288cc29721918cb44011265dc51ea8e81bf105fac0aff9f2aeff5b3f3cadb51","sha512":"b3daa45d29d7fae03311e9a4931d45718058a28b138cea9b863df070b79fa1dfc46605f436c33b3c729cbc755e878ade989628b863423eb7bedeefaf7cf76349","ssdeep":"1536:RZypGLSjQ6kIIg1aCffbp3OWCG9833gYK:RUkLIaC7YHgP","tlshash":"80931932e1e8143b3253d3d893d1b72aa995b113fe0786a5b5be07a81bc5de2843371d","first_seen":"2026-06-24T16:22:07.681955Z","last_seen":"2026-06-24T16:22:07.681955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":5,"connect":24,"send":0,"wait":788,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/css/main.css?ver=1782274407","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:40.761Z","timestamp":1782318100761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/css/main.css?ver=1782274407 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 04:13:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3b5967-8762\"\r\nexpires: Thu, 25 Jun 2026 04:21:41 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87V7FrT1s0FqwY0%2FE1iyK2IQQ3VVenimvtI%2FPAA8eWfZ3z8KKzvEoOfYBEVXUZK7PL8yn2XE%2BGQVv4Wg7N8TOnVv6eYZEq0Zc03%2FoOa2KZUATMETcD28EreNNNgWkrynspzwXA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a10d1121cd1856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34658,"size_decoded":7760,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (437)","md5":"04a31c20c7764f1c52752302e17ac2fe","sha1":"f6f7f54227a3f371cb4ac0d775f895283b0c2032","sha256":"6b8b4ad4614aeb95091b68e020f2b8aca794acaf35e7cd639c2e550a3c0ea281","sha512":"7b59e5c20818b0a13c1ba47e85529ff289cc7882114eddd96cd7c6b5d953dc429f47094a46a420bccae1ba038798d149ae146bd5c0ee5e25809b5a0acbe55875","ssdeep":"384:Lha86Ev4BTwiLHJQbmdKpcwyFAZ1nTe+CIP:9a86EvmQbmdKpcwyFAZ1nTXC6","tlshash":"19f283b0e102a03ab617d57ea7c4e58d7024b503f91747adbb8671558bcf6eb02b0a7c","first_seen":"2026-06-24T16:22:07.682853Z","last_seen":"2026-06-24T16:22:07.682853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercadopagobr.top/wp-content/themes/brand-hub/assets/images/hero-banner-casino-v2.webp?v=1778204433","fqdn":"mercadopagobr.top","domain":"mercadopagobr.top","tld":"top"},"ip":{"addr":"104.21.34.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mercadopagobr.top/","date":"2026-06-24T16:21:40.764Z","timestamp":1782318100764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercadopagobr.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 03:31:32 GMT","end":"Fri, 11 Sep 2026 04:28:45 GMT"},"fingerprint":{"sha1":"CD:A8:CB:B3:25:3E:EA:83:D4:4E:11:3C:D1:0D:EE:E2:6A:96:21:AD","sha256":"24:84:06:32:94:1E:1D:87:85:C5:BC:E8:72:6A:74:CE:D5:EF:10:5F:BE:1A:29:17:BB:31:F9:7F:A8:91:35:86"}}},"request":{"raw":"GET /wp-content/themes/brand-hub/assets/images/hero-banner-casino-v2.webp?v=1778204433 HTTP/1.1\r\nHost: mercadopagobr.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercadopagobr.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:21:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOkuCde%2BF3AA%2FfF1iZ8rOZP5%2BDVuCCvn%2FLEDbrcmo57jkDeqT5PX4LeokI1lVKP8OBKOuuZquUGU7e9UoHW9vYgFH6q8BrKo%2FU0%2FXY6yJDGTuHqXTYXe%2F%2BmDq9WJRhmJHTNwNg%3D%3D\"}]}\r\nlast-modified: Fri, 08 May 2026 01:40:33 GMT\r\netag: \"69fd3f11-48544\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncontent-length: 296260\r\ncf-ray: a10d1121cd1956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296260,"size_decoded":296971,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1672x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35282134c61215252cff67c4aa371d67","sha1":"04230b388df6e57bd9d988437413d1fd5799c3cb","sha256":"c3d97d8376fb915575dcc30593677d8c621b61d0e346dab0e3a447cbb36d2def","sha512":"4ad8ea3f5c1cccdca67d88e75138fa6ef0601b90e75fc6225eaeb09ec1300a8f7f3e48b17a40987a11bf3bd9794f4c5b345f7927e977b706ed17ff4d8438f491","ssdeep":"6144:wy7VeeHU5pvogNQMQxWtSGIlg/+AnXRtVwu:1MxreF8tzE8xbVb","tlshash":"0b542361617c0fb0b9874aac63f1a679ea8def16b2b54b21dd088603dff11a51dc4362","first_seen":"2026-06-24T16:22:07.68911Z","last_seen":"2026-06-24T16:22:07.68911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":729,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mercadopagobr.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}