{"report_id":"f6567d65-57d4-48de-9b0f-e86dd198cb72","version":0,"status":"done","tags":[],"date":"2026-07-21T04:28:01Z","url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":0,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"final":{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"title":"Buscar Pedido - GameX","dom":{"size":105028,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310)","md5":"77d585f5f15ffe126baf85d8e243bb2b","sha1":"76b848401da24b21b33355493ad8df3fd13302a3","sha256":"d32395ab79b3c3ff3a018c8921ffd225a440409be142616609e52ffa75dd7abc","sha512":"77dfbb7ee38638226cf807e0e33527ab81ae5364ca76aee5885d572ccd9e47ff63b2e435b94e6a60d109b92a8e4c26f1e416853f2e12f12d3d65f6372b78dbc4","ssdeep":"1536:rGM/OmV77MMMOMMM3ggwggsvuK2MMWKNEB:rGHmPLtpA","tlshash":"e9a3945e6af70119685794a87be7574a3720d003dc09c91c7fdd12988f8ae85bcb37e8","dom_hash":"domhash6fdc23fdebee5c0bcfe4c21a46d3179a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":0,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T04:28:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gamexbr.com","ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-21T04:28:01.778725Z","last_seen":"2026-07-21T04:28:01.778725Z","alert_count":18,"request_count":6,"received_data":644606,"sent_data":6618,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0bebfd75f8e6962cd5fe72b95aa3cf1","sha1":"a2f4c50cf122bfeca29e2982354ac3370c4409af","sha256":"3182557800c170979afa4fd4ea1965ec8cbd22d4222268b0ff013f97d2719f47","sha512":"a645a6d2b92ab40e70af2895446c97f1895573cd807c6959935b1cb0413cc2f2ce1e23822fef1498ce82cc49ce78da518bba2189301dd2e133853192aa33baca","ssdeep":"","tlshash":"52f0591ab6b30a74bab77876163f83682432102f5801d645752c4a648f61f5456a3ee8","size":586,"data":"","first_seen":"2026-07-21T04:28:06.084653Z","last_seen":"2026-07-21T04:28:06.084653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":true,"md5":"30f5f6e4cb467c4269e05ac6b8c0ec2e","sha1":"05b8074baa7c54b4e40038e43b622fc56931e15b","sha256":"86cdc8f3bbca4aaa39d259df08855093c0faae5aeb1e15cc54d9bf5471d4e993","sha512":"0b6af4876ce5c5ac283edcc492b1717fc4dcefb3971e56c5d661d4eddc72cab9b9a01482c76d84e4913d9a6f2f1de546d00163d053def204930988a733c2fb73","ssdeep":"","tlshash":"b141b05a35f25a300dfba0aa63cb9bc5742040076485d5463d6cc7992fd1ec2adb2bdc","size":1936,"data":"","first_seen":"2026-07-21T04:28:06.085921Z","last_seen":"2026-07-21T04:28:06.085921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5ba1078daaccac767d277caa441120f","sha1":"facebdf0e83dfc4abf4d9939d345e0af3800ce6a","sha256":"ffe43e136138b4805e3fb8de5148cc504a0363a329b7a5219fa43dcee29be305","sha512":"dcbfed8b4bea4767e234f2cac257235220530dc629acee0b628f8ca6937c1562eefe1181f8c26001ea4f92fb46a93993474dd56dff476e80d7d5e959d46969ea","ssdeep":"","tlshash":"8a61de9ec4b305214277a03a67ef7758383530275488cd447dace5142fb5e217aeb6a9","size":3214,"data":"","first_seen":"2026-07-21T04:28:06.087133Z","last_seen":"2026-07-21T04:28:06.087133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d58abae622a01af09f2d9db9f2d47a7","sha1":"e8f3906bc2ddf1e5d85d47e57927f0fc34aa18c5","sha256":"c41c974a4b725cf65dba9f816fae70dc2d95a9a1403c4b08ec318cf055367740","sha512":"4c808f61a4cc01312ea0745d8970bc7d0e835f8d89f2d010bf69603a9f72d108128a10b4b42d4a12e65291ef48b6991b5871eb6d279f00fb829e58a291b45098","ssdeep":"384:BuKkZFXdpMqarNamGbq49pW1DkvrXgT4ELa+6maj:BuK2MaLW5kvFES","tlshash":"9462207b35ab08301adba8bf67eb63c5391060073c82d5117d6c5a894fe8e4279767f8","size":15506,"data":"","first_seen":"2026-07-21T04:28:06.088423Z","last_seen":"2026-07-21T04:28:06.088423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8131bf056981afa0af7119644ecb54fd","sha1":"42a6da255101e1ac4fd8730a0293728c32263225","sha256":"6d92621fb38c13533ce3d59b804246554e421caf76af39b98a1ffff673c6f415","sha512":"6f1604466d5b316e628b15beae265e4cfd8249406cb452b2a4f511db6df0943dd54e720e47f03f29dd59a0da96a8ae057ecf63019b811ef85892a7fb33b9b82c","ssdeep":"192:lVeqCTJlwBqP08hkjNc5boJqoZSiVQoHEnTxeJxLxXguy0Cv2xgYRwPDO:lVugVQo1QQ6EcYRqK","tlshash":"1332241d26b22060053391ba67d76282b52095273848e9873a5f434b3f86d99d7b1ffe","size":11059,"data":"","first_seen":"2026-07-21T04:28:06.075957Z","last_seen":"2026-07-21T04:28:06.075957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🛒 Abandoned Cart Tracker iniciado","filename":"https://gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","line_number":12,"column_number":13},{"level":"log","text":"🔍 Novo campo monitorado:map[actor:server1.conn0.watcher17.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[id:map[configurable:true enumerable:true value:confirmEmailInput writable:true] name:map[configurable:true enumerable:true value: writable:true] placeholder:map[configurable:true enumerable:true value:outro@email.com writable:true] type:map[configurable:true enumerable:true value:email writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","line_number":223,"column_number":25},{"level":"log","text":"🔍 Novo campo monitorado:map[actor:server1.conn0.watcher17.process7//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[id:map[configurable:true enumerable:true value:proofEmail writable:true] name:map[configurable:true enumerable:true value:email writable:true] placeholder:map[configurable:true enumerable:true value:seu@email.com writable:true] type:map[configurable:true enumerable:true value:email writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","line_number":223,"column_number":25},{"level":"log","text":"✅ 2 novos campos adicionados ao monitoramento","filename":"https://gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","line_number":233,"column_number":21},{"level":"log","text":"👂 Monitorando 3 campos (DOMContentLoaded)","filename":"https://gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","line_number":243,"column_number":21},{"level":"log","text":"👂 Monitorando 3 campos (load)","filename":"https://gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","line_number":253,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"gamexbr.com/favicon.ico","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:34.403Z","timestamp":1784608054403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamexbr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:49:44 GMT","end":"Wed, 30 Sep 2026 18:49:43 GMT"},"fingerprint":{"sha1":"6C:5F:3D:50:3C:9B:85:4C:21:D9:18:5D:2A:61:30:6B:52:CA:F5:09","sha256":"AE:38:D1:1E:34:03:34:6F:2D:08:5C:D2:01:76:C2:C8:17:1D:61:E7:FA:55:F9:8E:EA:27:9E:32:CD:B1:9B:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gamexbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gamexbr.com/buscar-pedido\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxDTWwrdTVnUE93SHVsUjVoc2Jhd2c9PSIsInZhbHVlIjoiMEUyTUJ1QjB5cllzM3orYitCZTd3M1QzdlpMRy9KUDJtYXpURy81QzBveHNjd2FGanZzcHpKVkZvZ2RuUGpqUXF1NEh2emFScG9lTnp6d3doa3piSldPSUVnNThESEF5M09yV3p1Tk4zVDgxOHFzWGtaRGVRVmtQeFF4WWNBYnMiLCJtYWMiOiIyZTQyYWIyMTRlYjBlZWY3ZjFmNDkxZjg4ODAyMjlkMDVlNGU3ZjQ1MGI2MWQ3YzI1YWU2ZjdiZTNkNGMyOGJlIiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6Ik9VYzlYSlFSNHlZVG9XbWl3MU9Wd3c9PSIsInZhbHVlIjoiajZCVkJyMlNobUdNa0s0anZ0MVhzUnVRRTUvcWRoUGQ0WnRkMU81Ti9mWEY3ejRNOFZmRDFzQ2Z0VkMwYkdPck1nWXI4VGdVQjZubDhnM21oQStsTE1TRjdCeVBzYlcxWVExY1RxVkcwODYzUDVWNjNJUzdKMkdxM2R3TDhHWDEiLCJtYWMiOiIzNjkzOTA5ODExMDk5NDQ2NGU1OWI4YmFjMWY0YWJkMjM4Yjk5ZmNjMWZmYmQzZTk5YjhlYWQzMTAxNzdiMDBiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 04:27:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 270398\r\nlast-modified: Wed, 18 Mar 2026 01:39:24 GMT\r\nvary: Accept-Encoding\r\netag: \"69ba024c-4203e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270398,"size_decoded":270788,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256, 32 bits/pixel","md5":"55e46751ef610956c4bbc628bd6f2747","sha1":"cf369460df0f262e0a6401dd5931d585165ce406","sha256":"90dabef109b32e4ef82792cadd93bdf653d89e861a997e0e05d18ae4e1fd50c9","sha512":"96ec95109839ff46498b75ba6d12c5d69beab1d98671941b425ab767d7803a459dd8fe1e94c83637c5602cd6013def909f044f4ac33b28c21924d3c08e453974","ssdeep":"1536:MB0zF13y8qlYAIPPzAxxxWsxxpxxxvxxx2lxxxCMH0/jxReV3U3SItp8TsNAW9p3:ULbQYr1TSitN2AVb","tlshash":"7c44fd8976218f8fcc5a277498a5e53e41744f91ba23c9d1b9f8eea7f943b043c35098","first_seen":"2026-07-21T04:28:06.074319Z","last_seen":"2026-07-21T04:28:06.074319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/js/abandoned-cart-tracker.js?v=1781063090","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.804Z","timestamp":1784608053804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamexbr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:49:44 GMT","end":"Wed, 30 Sep 2026 18:49:43 GMT"},"fingerprint":{"sha1":"6C:5F:3D:50:3C:9B:85:4C:21:D9:18:5D:2A:61:30:6B:52:CA:F5:09","sha256":"AE:38:D1:1E:34:03:34:6F:2D:08:5C:D2:01:76:C2:C8:17:1D:61:E7:FA:55:F9:8E:EA:27:9E:32:CD:B1:9B:35"}}},"request":{"raw":"GET /js/abandoned-cart-tracker.js?v=1781063090 HTTP/1.1\r\nHost: gamexbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gamexbr.com/buscar-pedido\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxDTWwrdTVnUE93SHVsUjVoc2Jhd2c9PSIsInZhbHVlIjoiMEUyTUJ1QjB5cllzM3orYitCZTd3M1QzdlpMRy9KUDJtYXpURy81QzBveHNjd2FGanZzcHpKVkZvZ2RuUGpqUXF1NEh2emFScG9lTnp6d3doa3piSldPSUVnNThESEF5M09yV3p1Tk4zVDgxOHFzWGtaRGVRVmtQeFF4WWNBYnMiLCJtYWMiOiIyZTQyYWIyMTRlYjBlZWY3ZjFmNDkxZjg4ODAyMjlkMDVlNGU3ZjQ1MGI2MWQ3YzI1YWU2ZjdiZTNkNGMyOGJlIiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6Ik9VYzlYSlFSNHlZVG9XbWl3MU9Wd3c9PSIsInZhbHVlIjoiajZCVkJyMlNobUdNa0s0anZ0MVhzUnVRRTUvcWRoUGQ0WnRkMU81Ti9mWEY3ejRNOFZmRDFzQ2Z0VkMwYkdPck1nWXI4VGdVQjZubDhnM21oQStsTE1TRjdCeVBzYlcxWVExY1RxVkcwODYzUDVWNjNJUzdKMkdxM2R3TDhHWDEiLCJtYWMiOiIzNjkzOTA5ODExMDk5NDQ2NGU1OWI4YmFjMWY0YWJkMjM4Yjk5ZmNjMWZmYmQzZTk5YjhlYWQzMTAxNzdiMDBiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 04:27:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jun 2026 03:44:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a28ddb2-2b42\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11074,"size_decoded":3411,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8131bf056981afa0af7119644ecb54fd","sha1":"42a6da255101e1ac4fd8730a0293728c32263225","sha256":"6d92621fb38c13533ce3d59b804246554e421caf76af39b98a1ffff673c6f415","sha512":"6f1604466d5b316e628b15beae265e4cfd8249406cb452b2a4f511db6df0943dd54e720e47f03f29dd59a0da96a8ae057ecf63019b811ef85892a7fb33b9b82c","ssdeep":"192:lVeqCTJlwBqP08hkjNc5boJqoZSiVQoHEnTxeJxLxXguy0Cv2xgYRwPDO:lVugVQo1QQ6EcYRqK","tlshash":"1332241d26b22060053391ba67d76282b52095273848e9873a5f434b3f86d99d7b1ffe","first_seen":"2026-07-21T04:28:06.075957Z","last_seen":"2026-07-21T04:28:06.075957Z","times_seen":1,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/selos.png","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.813Z","timestamp":1784608053813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamexbr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:49:44 GMT","end":"Wed, 30 Sep 2026 18:49:43 GMT"},"fingerprint":{"sha1":"6C:5F:3D:50:3C:9B:85:4C:21:D9:18:5D:2A:61:30:6B:52:CA:F5:09","sha256":"AE:38:D1:1E:34:03:34:6F:2D:08:5C:D2:01:76:C2:C8:17:1D:61:E7:FA:55:F9:8E:EA:27:9E:32:CD:B1:9B:35"}}},"request":{"raw":"GET /selos.png HTTP/1.1\r\nHost: gamexbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gamexbr.com/buscar-pedido\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxDTWwrdTVnUE93SHVsUjVoc2Jhd2c9PSIsInZhbHVlIjoiMEUyTUJ1QjB5cllzM3orYitCZTd3M1QzdlpMRy9KUDJtYXpURy81QzBveHNjd2FGanZzcHpKVkZvZ2RuUGpqUXF1NEh2emFScG9lTnp6d3doa3piSldPSUVnNThESEF5M09yV3p1Tk4zVDgxOHFzWGtaRGVRVmtQeFF4WWNBYnMiLCJtYWMiOiIyZTQyYWIyMTRlYjBlZWY3ZjFmNDkxZjg4ODAyMjlkMDVlNGU3ZjQ1MGI2MWQ3YzI1YWU2ZjdiZTNkNGMyOGJlIiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6Ik9VYzlYSlFSNHlZVG9XbWl3MU9Wd3c9PSIsInZhbHVlIjoiajZCVkJyMlNobUdNa0s0anZ0MVhzUnVRRTUvcWRoUGQ0WnRkMU81Ti9mWEY3ejRNOFZmRDFzQ2Z0VkMwYkdPck1nWXI4VGdVQjZubDhnM21oQStsTE1TRjdCeVBzYlcxWVExY1RxVkcwODYzUDVWNjNJUzdKMkdxM2R3TDhHWDEiLCJtYWMiOiIzNjkzOTA5ODExMDk5NDQ2NGU1OWI4YmFjMWY0YWJkMjM4Yjk5ZmNjMWZmYmQzZTk5YjhlYWQzMTAxNzdiMDBiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 04:27:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Dec 2025 13:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695522d0-e523\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58659,"size_decoded":58422,"mime_type":"image/png","magic":"PNG image data, 995 x 170, 8-bit/color RGBA, non-interlaced","md5":"947811ba8a1e56492820aba4ec7f16c1","sha1":"f6f8aaff56c5961300aaa820d81d1ff237720471","sha256":"08d1b06d903a63989ddbdacf12ed0bb0ab7444ddb637cbafba847e4cfb3562e2","sha512":"c2ad026a9d08ee2545a9a8471afcf51101de1fe956f3143fd88d90ed37edd2914ec4fc1a492247e66b883a4725ee5582587252e1b046ea688ad48ada7670a070","ssdeep":"1536:UzAaHo92wXsFypb1+zX0Y+M+d5tKNYfOhh:UX9w8Apb1+zJ+d/UY2h","tlshash":"794302e678cd10da9f6f443dfa244ff8473d2bd6af534198809c8c1e949ab107eb6224","first_seen":"2023-05-05T22:42:31Z","last_seen":"2026-07-21T04:28:06.077641Z","times_seen":3,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.938Z","timestamp":1784608053938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gamexbr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 441531\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-21T18:25:04.956598Z","times_seen":241481,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":20,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.942Z","timestamp":1784608053942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gamexbr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 441531\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-21T18:25:04.956598Z","times_seen":241481,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":24,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.984Z","timestamp":1784608053984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gamexbr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 441531\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-21T18:25:04.956598Z","times_seen":241481,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.988Z","timestamp":1784608053988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gamexbr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 441531\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-21T18:25:04.956598Z","times_seen":241481,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/buscar-pedido","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T04:27:32.170Z","timestamp":1784608052170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamexbr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:49:44 GMT","end":"Wed, 30 Sep 2026 18:49:43 GMT"},"fingerprint":{"sha1":"6C:5F:3D:50:3C:9B:85:4C:21:D9:18:5D:2A:61:30:6B:52:CA:F5:09","sha256":"AE:38:D1:1E:34:03:34:6F:2D:08:5C:D2:01:76:C2:C8:17:1D:61:E7:FA:55:F9:8E:EA:27:9E:32:CD:B1:9B:35"}}},"request":{"raw":"GET /buscar-pedido HTTP/1.1\r\nHost: gamexbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 04:27:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkxDTWwrdTVnUE93SHVsUjVoc2Jhd2c9PSIsInZhbHVlIjoiMEUyTUJ1QjB5cllzM3orYitCZTd3M1QzdlpMRy9KUDJtYXpURy81QzBveHNjd2FGanZzcHpKVkZvZ2RuUGpqUXF1NEh2emFScG9lTnp6d3doa3piSldPSUVnNThESEF5M09yV3p1Tk4zVDgxOHFzWGtaRGVRVmtQeFF4WWNBYnMiLCJtYWMiOiIyZTQyYWIyMTRlYjBlZWY3ZjFmNDkxZjg4ODAyMjlkMDVlNGU3ZjQ1MGI2MWQ3YzI1YWU2ZjdiZTNkNGMyOGJlIiwidGFnIjoiIn0%3D; expires=Tue, 21 Jul 2026 06:27:33 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel-session=eyJpdiI6Ik9VYzlYSlFSNHlZVG9XbWl3MU9Wd3c9PSIsInZhbHVlIjoiajZCVkJyMlNobUdNa0s0anZ0MVhzUnVRRTUvcWRoUGQ0WnRkMU81Ti9mWEY3ejRNOFZmRDFzQ2Z0VkMwYkdPck1nWXI4VGdVQjZubDhnM21oQStsTE1TRjdCeVBzYlcxWVExY1RxVkcwODYzUDVWNjNJUzdKMkdxM2R3TDhHWDEiLCJtYWMiOiIzNjkzOTA5ODExMDk5NDQ2NGU1OWI4YmFjMWY0YWJkMjM4Yjk5ZmNjMWZmYmQzZTk5YjhlYWQzMTAxNzdiMDBiIiwidGFnIjoiIn0%3D; expires=Tue, 21 Jul 2026 06:27:33 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ncontent-encoding: br\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106026,"size_decoded":16649,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310)","md5":"128f0e5394778cdc3094d96de50a91df","sha1":"c44b1d82f81d5760871d80c2bd7569fbddd8126d","sha256":"bfe183dcacc42eea1a1ee66c67f45f611b33a1e62577ea1b31769b85cba755da","sha512":"2ae6d5ff359ac6c75f5cd60b0402ced04ce6885890d3db1b4668a24d0e2b569e956e7de4b22e9725c208f084cea51f137e4a1cbf3afc50ac30bbeb88f5b5c81b","ssdeep":"1536:jGM/OmV77MMMOMMMsYzFgsvuK2MMWKNEd:jGHm8mp0","tlshash":"2ea3945e6af70519685794b87be7574a3320d003dc09c9187fed12988f8ae85bcb37e8","first_seen":"2026-07-21T04:28:06.079877Z","last_seen":"2026-07-21T04:28:06.079877Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":63,"connect":216,"send":0,"wait":431,"receive":0,"ssl":454},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.799Z","timestamp":1784608053799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Jul 2026 04:27:33 GMT\r\ndate: Tue, 21 Jul 2026 04:27:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-07-21T17:12:39.777679Z","times_seen":5373,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/logo.png","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.811Z","timestamp":1784608053811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamexbr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:49:44 GMT","end":"Wed, 30 Sep 2026 18:49:43 GMT"},"fingerprint":{"sha1":"6C:5F:3D:50:3C:9B:85:4C:21:D9:18:5D:2A:61:30:6B:52:CA:F5:09","sha256":"AE:38:D1:1E:34:03:34:6F:2D:08:5C:D2:01:76:C2:C8:17:1D:61:E7:FA:55:F9:8E:EA:27:9E:32:CD:B1:9B:35"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: gamexbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gamexbr.com/buscar-pedido\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxDTWwrdTVnUE93SHVsUjVoc2Jhd2c9PSIsInZhbHVlIjoiMEUyTUJ1QjB5cllzM3orYitCZTd3M1QzdlpMRy9KUDJtYXpURy81QzBveHNjd2FGanZzcHpKVkZvZ2RuUGpqUXF1NEh2emFScG9lTnp6d3doa3piSldPSUVnNThESEF5M09yV3p1Tk4zVDgxOHFzWGtaRGVRVmtQeFF4WWNBYnMiLCJtYWMiOiIyZTQyYWIyMTRlYjBlZWY3ZjFmNDkxZjg4ODAyMjlkMDVlNGU3ZjQ1MGI2MWQ3YzI1YWU2ZjdiZTNkNGMyOGJlIiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6Ik9VYzlYSlFSNHlZVG9XbWl3MU9Wd3c9PSIsInZhbHVlIjoiajZCVkJyMlNobUdNa0s0anZ0MVhzUnVRRTUvcWRoUGQ0WnRkMU81Ti9mWEY3ejRNOFZmRDFzQ2Z0VkMwYkdPck1nWXI4VGdVQjZubDhnM21oQStsTE1TRjdCeVBzYlcxWVExY1RxVkcwODYzUDVWNjNJUzdKMkdxM2R3TDhHWDEiLCJtYWMiOiIzNjkzOTA5ODExMDk5NDQ2NGU1OWI4YmFjMWY0YWJkMjM4Yjk5ZmNjMWZmYmQzZTk5YjhlYWQzMTAxNzdiMDBiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 04:27:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Mar 2026 01:39:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ba024c-22c9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142492,"size_decoded":139095,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"a27d1d6d4e2d7c8b124b3bd80e1bebfd","sha1":"943b066991ecc3262c76e94fa8f720d23cb8e623","sha256":"7c9b1825adf3cbfb6681ab80904701f775a6a7c21afa1ec98b2c4642907cd042","sha512":"8d6219b5ade965bbbc9d363bc752cedee4cdd8bf619c1309bbd660a678ece141a27fb54d323b9ae805e65d6a8e0a1da8dcebd57ad16ef586f0fe254feb6d9c25","ssdeep":"3072:oRvdyhURC9VIPVwuU99WciWNUJWgCAJZD8NkDPc:ofe9V+VwZQVWgCeDS0U","tlshash":"0dd31204e88890afeec599b110a24b7b22f9aaccf16d2f30ff499576fc615035086f57","first_seen":"2026-07-21T04:28:06.081949Z","last_seen":"2026-07-21T04:28:06.081949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamexbr.com/reclame.webp","fqdn":"gamexbr.com","domain":"gamexbr.com","tld":"com"},"ip":{"addr":"158.173.2.68","port":443,"asn":0,"as":"","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamexbr.com/buscar-pedido","date":"2026-07-21T04:27:33.816Z","timestamp":1784608053816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamexbr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:49:44 GMT","end":"Wed, 30 Sep 2026 18:49:43 GMT"},"fingerprint":{"sha1":"6C:5F:3D:50:3C:9B:85:4C:21:D9:18:5D:2A:61:30:6B:52:CA:F5:09","sha256":"AE:38:D1:1E:34:03:34:6F:2D:08:5C:D2:01:76:C2:C8:17:1D:61:E7:FA:55:F9:8E:EA:27:9E:32:CD:B1:9B:35"}}},"request":{"raw":"GET /reclame.webp HTTP/1.1\r\nHost: gamexbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gamexbr.com/buscar-pedido\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkxDTWwrdTVnUE93SHVsUjVoc2Jhd2c9PSIsInZhbHVlIjoiMEUyTUJ1QjB5cllzM3orYitCZTd3M1QzdlpMRy9KUDJtYXpURy81QzBveHNjd2FGanZzcHpKVkZvZ2RuUGpqUXF1NEh2emFScG9lTnp6d3doa3piSldPSUVnNThESEF5M09yV3p1Tk4zVDgxOHFzWGtaRGVRVmtQeFF4WWNBYnMiLCJtYWMiOiIyZTQyYWIyMTRlYjBlZWY3ZjFmNDkxZjg4ODAyMjlkMDVlNGU3ZjQ1MGI2MWQ3YzI1YWU2ZjdiZTNkNGMyOGJlIiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6Ik9VYzlYSlFSNHlZVG9XbWl3MU9Wd3c9PSIsInZhbHVlIjoiajZCVkJyMlNobUdNa0s0anZ0MVhzUnVRRTUvcWRoUGQ0WnRkMU81Ti9mWEY3ejRNOFZmRDFzQ2Z0VkMwYkdPck1nWXI4VGdVQjZubDhnM21oQStsTE1TRjdCeVBzYlcxWVExY1RxVkcwODYzUDVWNjNJUzdKMkdxM2R3TDhHWDEiLCJtYWMiOiIzNjkzOTA5ODExMDk5NDQ2NGU1OWI4YmFjMWY0YWJkMjM4Yjk5ZmNjMWZmYmQzZTk5YjhlYWQzMTAxNzdiMDBiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 04:27:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52764\r\nlast-modified: Wed, 31 Dec 2025 13:19:12 GMT\r\nvary: Accept-Encoding\r\netag: \"695522d0-ce1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52764,"size_decoded":53150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3cf765085d17feebf2c527e35fc7fb62","sha1":"8f4a9e2b485d728b198bcec826e3948234dcf170","sha256":"69a6b06090e69bc64fc2b54fae6f5020078d9784432c14ec9003bf8b692737cd","sha512":"4c6c6fcfc154b8b9538bbe79a4680a9cdfb6d65e9178da456e3b3578874ce55b3a8daa136b1ab7f37c874214577f12382c0fbb761aa5f1e730bad9c329a1c2c6","ssdeep":"768:i1hhaEAFZOZIj+VCD1adWhXt9QoV08JxOK5DZcTFEv0QLhO1iM9GykgPnc5g:0rAF8I4Cq8Xt9QoVqK5QFaXLhO1JLog","tlshash":"e333017858b5424fe89734747d6f852a2950bc2fa7ce186a570b8e0e2453c7d2bb4fb0","first_seen":"2026-06-12T02:52:53.716151Z","last_seen":"2026-07-21T04:28:06.083257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"gamexbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}