{"report_id":"090d2076-44b6-401c-bdd6-f9ebaa2b598c","version":0,"status":"done","tags":[],"date":"2026-06-22T12:23:37Z","url":{"schema":"http","addr":"pagar.freeflow-pedagio.com","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"title":"Pedágio Digital","dom":{"size":24604,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24578), with no line terminators","md5":"5e7a6cea25d7df500e26198cb6f1d2f1","sha1":"387adac01ef5d863ef4c3106bb7cfa565171bde0","sha256":"8aca7ce7d2e4f6b375420c3da02e698b480b558733bf9be8ad4253adb52e3a91","sha512":"72611567e0fe5306d5f8c8c1f3fd12c8d8fa8efb713820b0145a85eeb17f27100a45b30da44110faf04e0eea5f6b84c73a15c302138f7e64aeb84393b6f3d39d","ssdeep":"384:xC9y5fQOx05nrGPKJgg8T4xksc64Jysq7v/YjIRRHwNw6YU4z:dJx0rGV4xksc64Jysq7v/YjIRRQS6Ylz","tlshash":"e0b2b690740c02391d3baa50eec4a72cc125f502de63887ab14d049be9d7ff539b6fa6","dom_hash":"domhash3d422a45fe3a811be21a766c1c81b557","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pagar.freeflow-pedagio.com","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T12:23:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2925,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagar.freeflow-pedagio.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-06-22T12:20:05.314981Z","last_seen":"2026-06-22T12:20:05.314981Z","alert_count":18,"request_count":18,"received_data":3027996,"sent_data":14123,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/triangle-alert-DYN4KxiU.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5def7b0cfdc9e76f1d51a80432ffda91","sha1":"7460e0004c5577ce68bb2bd974d59571343cc149","sha256":"570c571c6b24a24679bae3033d0ebd86f86e11017194ffb49d0e016c8b5b9745","sha512":"5b679c07b5463714f6e52f95a6b0be77dcd431cbc30bae50152666f9882ebf1fb611063b8cf5eb25bf4efc8059cbb649dc0de4ad26830490b86e488208c534af","ssdeep":"","tlshash":"2bd02b5a5d46435d091899480a8bf0124efe41bc33895e01f44e03369324043ccb7f04","size":267,"data":"","first_seen":"2026-06-22T12:20:09.35559Z","last_seen":"2026-06-22T12:59:48.949194Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/index-D_q54c4w.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff2c16e5c8ed35113a81a95a6749e257","sha1":"bb716098ea56146eca0258be4dbdd4b58ab55dbd","sha256":"2cd6642da911dcbd0c2be8fae7fa40086e4b111cf9284ea5bdffc98e1d0cd613","sha512":"90d1b8d4b1ab6035fda4fc45724530cfa8caa22b48882d77f753f8638c33d533d1558a2c05daa52ab97462fc83ed0a38d12ef739c71f5962996d7762cff66226","ssdeep":"192:o3P49ETXoM03XRy9I1fLwLkriwfcyTbmpEIQDGWw+WlndiM4e6VIlmFPI:o/49iXoNBTfEgrJcGsmJw+WlIM4e6Cl1","tlshash":"d5728718a051ffbdbe7708d8756ea018700f4fa8c76f8de2d1be68211aad54275237c9","size":16145,"data":"","first_seen":"2026-06-22T12:20:09.349883Z","last_seen":"2026-06-22T12:59:48.95188Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/dialog-DE0CSirZ.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1495eee56b760c3e79aaae904b8436e3","sha1":"4c2d302aa39f52d71e6b7f5fb78e640270e42e2b","sha256":"ed9d627d86217dfa55c28aa9f950718b36e2c3da1e732d0f96525f3c8cc5c0b4","sha512":"c37ea180bf55490355b2a081d44dae277f8061baad3cb63ea668e0a06698b836d3b66bb53c8f5f1ae29e740573e263e6a154692d460b5405722c197cedce9143","ssdeep":"768:b8sanZyANtUi+G18NYJmM47iP5aSIiYXqGxvwuQB6jtdi:vErfYaAHJ+","tlshash":"d3d209c8709171749ade05ea513fd12cfa3e2e04b44e8540e47e9c993e7aa85d233fad","size":29787,"data":"","first_seen":"2026-06-22T12:20:09.35414Z","last_seen":"2026-06-22T12:59:48.954881Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/~flock.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-22T18:54:03.403882Z","times_seen":11455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/__l5e/events.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","size":44148,"data":"","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-06-22T18:54:03.42715Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/chevron-up-Bic3oyf-.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7c18cde3ceff4e861f74af2fd9c15f3","sha1":"548b01ecb5b9257dbf790449fae6a78d65a13164","sha256":"449fa265bca1b06a8939a316416897f48e52cd93690d3fa24f6a9fa57a773194","sha512":"4b4c8f716f31991f2d6b02f1943d14300fb7f91c1846e9d331acf7954e18ca1faa6ce8ec3db85f95e2672bc86d40686698ceddb9fd1fe859c52d58be2d47428e","ssdeep":"","tlshash":"abd0221f26b06032480d58cc0247709acab007ecb2d2cac8ea0e232ad3119c3a1cce11","size":210,"data":"","first_seen":"2026-06-22T12:20:09.358236Z","last_seen":"2026-06-22T12:59:48.958991Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/index-CbR_ypxd.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"79959941be48efef385459913312c1d9","sha1":"8f69c368e6a18b26ea947c1b35d9f9f4189c9d90","sha256":"976d437f7c78991070480b9db3aef19fb95de495f18ca1cb681178eff7e94842","sha512":"86ce14df9a0e3085d2e0f960472c872ffa61d357a6c568d29c94fdf378fce68b22e1be30f8b31a42cf90de1e5f2cf70cee984d1a34b89c6366a14a5f04a505f1","ssdeep":"12288:DpeYNzgQ11iU9jMb8QXOnYhJE99KURq4e5PSmLlVhd5LrbK4aoxczJu0riaTras2:gKgE9s8QXOngE99KUcSKK7oSJu0z29","tlshash":"f5e47dd432aa61220bd245e1907f0103f2386926740d8464f66cedef3ba9d49a67bf7d","size":718608,"data":"","first_seen":"2026-06-22T12:20:09.348645Z","last_seen":"2026-06-22T12:59:48.954261Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/__l5e/rrweb-record.js?__l5e_v=0.1.2-error-event-hardening","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"892f2816c4378bad37a080cbbd3c2076","sha1":"14a7287b925ba85660b8ce3b352fb751b0d0cb4e","sha256":"375ba01ecf45a3f91f37cd6017d757b39e97831d755397cdf6d24c5b3b51bfc4","sha512":"6e64a3ea45134611365f5ed904e8e9eaa50fa750423631bc1ba0c0ed8e2f8f2006e59e0819463f037695d83fe5cb9f98eecb1c78fd3cc8149b83a3f6641bf00d","ssdeep":"1536:TDSDuTxHJpDh8uBKgHVzJpER8u/re8V4KgfcfvLY2sq47sq8K7o+BvGtlrUj1NrL:T3ds4KgfcEVUgRNrL","tlshash":"e20429ea77a2a13383ea126850b90241f37a69ad104c642cf57cd5fb3db580251fbf79","size":182225,"data":"","first_seen":"2026-06-10T14:35:16.934059Z","last_seen":"2026-06-22T15:31:28.373746Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.330Z","timestamp":1782130994330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383721\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-22T18:38:59.188433Z","times_seen":216537,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":21,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.332Z","timestamp":1782130994332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383721\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-22T18:38:59.188433Z","times_seen":216537,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":24,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/favicon.ico","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.500Z","timestamp":1782130994500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb391baa2fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2831,"size_decoded":1614,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"d9caf2712bba402a64e27a76c401643a","sha1":"8628d3ef52b8291f32f2924547633f6ebb8a193f","sha256":"c87204932216192d0b6fcb49d000ffaced541f31a6ec018a0706780a723bee2a","sha512":"e1179a318d82f86035e69e5189878968f46f40fe90dd5e325ca5c8f0b4391e4c04dff81935a6a939205ee9266e42108a43eec77c1d98a9e5df5a048f40244d89","ssdeep":"","tlshash":"e651b3b31c144c1b5226a1b2d432f206c276930ad519da69faffd1dd1a99ed2c47ab30","first_seen":"2026-06-22T12:23:40.382735Z","last_seen":"2026-06-22T12:23:40.382735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/__l5e/trackevents","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.647Z","timestamp":1782130994647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nContent-Type: application/json\r\nContent-Length: 3584\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0fb391c8d31c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-06-22T18:54:03.386611Z","times_seen":1668,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/logo-motiva-TChTBvPc.svg","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.183Z","timestamp":1782130994183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/logo-motiva-TChTBvPc.svg HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb3919ab20c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5888,"size_decoded":3034,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e833aa2a85bfe768b0863e595df180","sha1":"2ac866084952828b4d10ec891791d9f89636d896","sha256":"cf604c82437f848129a745c786ea4b1f64b95d31976a91b2e4b960b04d3c4c87","sha512":"e5f82f8cc6889e43c7bf64cadce06ab97116a7512717d2d4882af6e8d7fe61da72288c25de112f943ef977cbf36f189d72e5272f7b00c09e3ff6c2b6fd334ce3","ssdeep":"96:4Ga2D1u9dydy2qLp0+UmeTuUv4CJdrZqZQpp6wIxN4zPhUoRlz+z1VKBumVb6bJ7:4GDojAaELVxqZQ5Ixizjli6AN","tlshash":"8ec1a8e123a8d1e4fe07eba2ed3b643a562f25f4afde80d8c550d45677a04e84c59cd0","first_seen":"2026-02-23T12:34:32.824239Z","last_seen":"2026-06-22T12:59:48.950483Z","times_seen":18,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/logo-eco-Cdd8S58B.png","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.185Z","timestamp":1782130994185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/logo-eco-Cdd8S58B.png HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 66604\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\nserver: cloudflare\r\ncf-ray: a0fb3919ab2dc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66604,"size_decoded":67056,"mime_type":"image/png","magic":"PNG image data, 862 x 211, 8-bit/color RGBA, non-interlaced","md5":"7a2a2b803287e86b96e0100ed44196a7","sha1":"a774d8509475da8626c87f74f941afa37f539dfe","sha256":"101839a93af4a8624ef9114102bf279425c55ff04c17e4d5f89142199ca4a47a","sha512":"5a53ae838b67241c55c30f5525e3f3a752f7359058bd8c46177943795b3821cf9dd5e1ed061d651e25ef2bf9e54c4b4ba91c1ec49463713051cf77ea3e1b4654","ssdeep":"768:fe9ZCB0MNJKn1XO2YNhhLpDXaLUo+j5n1R5plp4NAYvELZ2JIqVr0YmaSTD/dOqZ:2GBRF2YnFpDz51R5hmmZ2J7+/Hw+/EC","tlshash":"105301f789f27eeb82b04fc49299adfccedd06a303728546f875eb0017602d05124a9b","first_seen":"2026-02-13T22:45:25.339827Z","last_seen":"2026-06-22T12:59:48.953611Z","times_seen":86,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T12:23:13.086Z","timestamp":1782130993086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=pagar.freeflow-pedagio.com; Expires=Mon, 22 Jun 2026 12:53:13 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb3912fb86c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11502,"size_decoded":5255,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"91672e6310e1857948ea287f882be892","sha1":"344b84e8a2c8ed4c965c133cb184f3bd536c826d","sha256":"dd2362bf62c1a9cb89bbf5088f327b3a677c23657fb1f0aa5daa2ef144cba1d1","sha512":"7ffbe61ba72421d2e3a37700036e57bd149456422e733b05171de936d58b21b0aec3e02395cd54752a03c4901fd9ab78d3d4b8104c26f4d87a004113d603738b","ssdeep":"192:0gyQamNYe0nzYB1RRGwwwdY0AY4fsIS4h1a4yEoo:0gy5mYjkRRGwwwdYU4IG1a4yEoo","tlshash":"5932e97134408d3b467b49f5b0a0f30a9266d30cc59be96df2ed41ba37d6e92c43b961","first_seen":"2026-06-22T12:23:40.386151Z","last_seen":"2026-06-22T12:23:40.386151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":595,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/index-D_q54c4w.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.168Z","timestamp":1782130994168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/index-D_q54c4w.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39198ac4c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16146,"size_decoded":6325,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16107)","md5":"ff2c16e5c8ed35113a81a95a6749e257","sha1":"bb716098ea56146eca0258be4dbdd4b58ab55dbd","sha256":"2cd6642da911dcbd0c2be8fae7fa40086e4b111cf9284ea5bdffc98e1d0cd613","sha512":"90d1b8d4b1ab6035fda4fc45724530cfa8caa22b48882d77f753f8638c33d533d1558a2c05daa52ab97462fc83ed0a38d12ef739c71f5962996d7762cff66226","ssdeep":"192:o3P49ETXoM03XRy9I1fLwLkriwfcyTbmpEIQDGWw+WlndiM4e6VIlmFPI:o/49iXoNBTfEgrJcGsmJw+WlIM4e6Cl1","tlshash":"d5728718a051ffbdbe7708d8756ea018700f4fa8c76f8de2d1be68211aad54275237c9","first_seen":"2026-06-22T12:20:09.349883Z","last_seen":"2026-06-22T12:59:48.95188Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.336Z","timestamp":1782130994336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383721\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-22T18:38:59.188433Z","times_seen":216537,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":33,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.337Z","timestamp":1782130994337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383721\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-22T18:38:59.188433Z","times_seen":216537,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":35,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.340Z","timestamp":1782130994340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383721\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-22T18:38:59.188433Z","times_seen":216537,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":45,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/__l5e/rrweb-record.js?__l5e_v=0.1.2-error-event-hardening","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.364Z","timestamp":1782130994364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /__l5e/rrweb-record.js?__l5e_v=0.1.2-error-event-hardening HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb391acf16c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182225,"size_decoded":58411,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23545)","md5":"892f2816c4378bad37a080cbbd3c2076","sha1":"14a7287b925ba85660b8ce3b352fb751b0d0cb4e","sha256":"375ba01ecf45a3f91f37cd6017d757b39e97831d755397cdf6d24c5b3b51bfc4","sha512":"6e64a3ea45134611365f5ed904e8e9eaa50fa750423631bc1ba0c0ed8e2f8f2006e59e0819463f037695d83fe5cb9f98eecb1c78fd3cc8149b83a3f6641bf00d","ssdeep":"1536:TDSDuTxHJpDh8uBKgHVzJpER8u/re8V4KgfcfvLY2sq47sq8K7o+BvGtlrUj1NrL:T3ds4KgfcEVUgRNrL","tlshash":"e20429ea77a2a13383ea126850b90241f37a69ad104c642cf57cd5fb3db580251fbf79","first_seen":"2026-06-10T14:35:16.934059Z","last_seen":"2026-06-22T15:31:28.373746Z","times_seen":96,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/dialog-DE0CSirZ.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.169Z","timestamp":1782130994169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/dialog-DE0CSirZ.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39199ac9c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29787,"size_decoded":11123,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14173)","md5":"1495eee56b760c3e79aaae904b8436e3","sha1":"4c2d302aa39f52d71e6b7f5fb78e640270e42e2b","sha256":"ed9d627d86217dfa55c28aa9f950718b36e2c3da1e732d0f96525f3c8cc5c0b4","sha512":"c37ea180bf55490355b2a081d44dae277f8061baad3cb63ea668e0a06698b836d3b66bb53c8f5f1ae29e740573e263e6a154692d460b5405722c197cedce9143","ssdeep":"768:b8sanZyANtUi+G18NYJmM47iP5aSIiYXqGxvwuQB6jtdi:vErfYaAHJ+","tlshash":"d3d209c8709171749ade05ea513fd12cfa3e2e04b44e8540e47e9c993e7aa85d233fad","first_seen":"2026-06-22T12:20:09.35414Z","last_seen":"2026-06-22T12:59:48.954881Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/chevron-up-Bic3oyf-.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.173Z","timestamp":1782130994173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/chevron-up-Bic3oyf-.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39199ae6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210,"size_decoded":651,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"e7c18cde3ceff4e861f74af2fd9c15f3","sha1":"548b01ecb5b9257dbf790449fae6a78d65a13164","sha256":"449fa265bca1b06a8939a316416897f48e52cd93690d3fa24f6a9fa57a773194","sha512":"4b4c8f716f31991f2d6b02f1943d14300fb7f91c1846e9d331acf7954e18ca1faa6ce8ec3db85f95e2672bc86d40686698ceddb9fd1fe859c52d58be2d47428e","ssdeep":"","tlshash":"abd0221f26b06032480d58cc0247709acab007ecb2d2cac8ea0e232ad3119c3a1cce11","first_seen":"2026-06-22T12:20:09.358236Z","last_seen":"2026-06-22T12:59:48.958991Z","times_seen":3,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/~flock.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.174Z","timestamp":1782130994174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39199aecc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-22T18:54:03.403882Z","times_seen":11455,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/~api/analytics","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.664Z","timestamp":1782130994664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nContent-Type: application/json\r\nContent-Length: 347\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3; session-id=e8bade93-fcba-42c6-a260-ba9208bf78f8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0fb391cad89c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":333,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-22T18:54:03.395807Z","times_seen":11475,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/__l5e/replay","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:16.532Z","timestamp":1782130996532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"POST /__l5e/replay HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\ncontent-type: application/json\r\nContent-Length: 250533\r\nOrigin: https://pagar.freeflow-pedagio.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3; session-id=e8bade93-fcba-42c6-a260-ba9208bf78f8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Mon, 22 Jun 2026 12:23:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0fb392858ddc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-06-22T18:54:03.386611Z","times_seen":1668,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":7,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/hero-background-Bk6SzIH0.jpg","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.312Z","timestamp":1782130994312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/hero-background-Bk6SzIH0.jpg HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1834830\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\nserver: cloudflare\r\ncf-ray: a0fb391a7ddbc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1834830,"size_decoded":1835285,"mime_type":"image/jpeg","magic":"PNG image data, 1440 x 900, 8-bit/color RGBA, non-interlaced","md5":"068f58001483231c3ba3c22c0cab5a3d","sha1":"32e30d715b5907fa65f59971fe633cfdc1cd0eba","sha256":"b59a24981b92e9ad8d6be398d70959057b3f4557e74e7bc937b89288fe318b96","sha512":"a3499f88ba19472f8b30d0dec26ef33880e46399fed115bdaaab1cfac29f097831ae541751d93a7a28b90bcdf0a84810058f4e67f412d779c46d9905f4e7c115","ssdeep":"24576:YAAGOH4WlwdPygeV3LBKP0qSZWSuVWuGzUH/sChxDbgV9zKk:Yvj3SdQV3LBBTTuDF/lxDErzKk","tlshash":"172523a2c7c0d7f2ca779301c5957e3da25b6eead3560f6da1f3e76ca084ea05401b21","first_seen":"2026-02-13T22:45:25.342485Z","last_seen":"2026-06-22T12:59:48.956177Z","times_seen":11,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/styles-DkQqUaQM.css","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.161Z","timestamp":1782130994161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/styles-DkQqUaQM.css HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39198aaac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78631,"size_decoded":13563,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c4ab037088bc4c4e1ec1c04679556e6d","sha1":"0a9e362b837a56ead941857a65e4dd4cae1daa39","sha256":"16f6469d5891268a97cddb411fca499446b32b5705df39919f1cf4b7cab98618","sha512":"22b8bffc4448fe5473dcf00eba4d820b389c57d2612db19c25dbd85ee7c722b7d2c77ced039241c6b1a0bf4480d2116b9ca868226f42122c91fad12ad2365ccf","ssdeep":"1536:/2+7IBh+7uADy4XAurQS6tgLC7JaZSsMq+WDhXH7ILPe4EML+lLC988R988q:e+7IBh+7tDyHurQS6tgLcmMq+WDhiPNA","tlshash":"7973a564b22dd47f7c3364f9938cb89c8109b0c0dd7a46e8fa56623216c77f29da7618","first_seen":"2026-06-22T12:20:09.345026Z","last_seen":"2026-06-22T12:59:48.957774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.163Z","timestamp":1782130994163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Jun 2026 12:23:14 GMT\r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-06-22T18:57:24.6756Z","times_seen":2785,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/index-CbR_ypxd.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.166Z","timestamp":1782130994166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/index-CbR_ypxd.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39198abfc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718608,"size_decoded":211080,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42618)","md5":"79959941be48efef385459913312c1d9","sha1":"8f69c368e6a18b26ea947c1b35d9f9f4189c9d90","sha256":"976d437f7c78991070480b9db3aef19fb95de495f18ca1cb681178eff7e94842","sha512":"86ce14df9a0e3085d2e0f960472c872ffa61d357a6c568d29c94fdf378fce68b22e1be30f8b31a42cf90de1e5f2cf70cee984d1a34b89c6366a14a5f04a505f1","ssdeep":"12288:DpeYNzgQ11iU9jMb8QXOnYhJE99KURq4e5PSmLlVhd5LrbK4aoxczJu0riaTras2:gKgE9s8QXOngE99KUcSKK7oSJu0z29","tlshash":"f5e47dd432aa61220bd245e1907f0103f2386926740d8464f66cedef3ba9d49a67bf7d","first_seen":"2026-06-22T12:20:09.348645Z","last_seen":"2026-06-22T12:59:48.954261Z","times_seen":3,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/triangle-alert-DYN4KxiU.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.171Z","timestamp":1782130994171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/triangle-alert-DYN4KxiU.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39199ad8c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267,"size_decoded":690,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"5def7b0cfdc9e76f1d51a80432ffda91","sha1":"7460e0004c5577ce68bb2bd974d59571343cc149","sha256":"570c571c6b24a24679bae3033d0ebd86f86e11017194ffb49d0e016c8b5b9745","sha512":"5b679c07b5463714f6e52f95a6b0be77dcd431cbc30bae50152666f9882ebf1fb611063b8cf5eb25bf4efc8059cbb649dc0de4ad26830490b86e488208c534af","ssdeep":"","tlshash":"2bd02b5a5d46435d091899480a8bf0124efe41bc33895e01f44e03369324043ccb7f04","first_seen":"2026-06-22T12:20:09.35559Z","last_seen":"2026-06-22T12:59:48.949194Z","times_seen":3,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/__l5e/events.js","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.176Z","timestamp":1782130994176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /__l5e/events.js HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0fb39199af4c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44148,"size_decoded":9969,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356)","md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-06-22T18:54:03.42715Z","times_seen":605,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagar.freeflow-pedagio.com/assets/logo-CWdoJbug.png","fqdn":"pagar.freeflow-pedagio.com","domain":"freeflow-pedagio.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pagar.freeflow-pedagio.com/","date":"2026-06-22T12:23:14.181Z","timestamp":1782130994181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagar.freeflow-pedagio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 15:37:16 GMT","end":"Sat, 19 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"01:CA:07:8F:A5:DF:0C:AC:B6:A0:A9:95:F5:61:0F:56:84:3C:FD:B8","sha256":"D3:FF:30:85:F5:38:0E:E6:72:CA:92:E0:D8:70:BE:3E:87:00:64:B2:8F:D8:B8:E5:9D:A8:1F:D0:B7:01:86:C7"}}},"request":{"raw":"GET /assets/logo-CWdoJbug.png HTTP/1.1\r\nHost: pagar.freeflow-pedagio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pagar.freeflow-pedagio.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75; __cf_bm=lOHLHGqcWj2nk.zW_OWR9DaRnCRKZEz4y3bKUEnZhPo-1782130993.1139488-1.0.1.1-gCviREivuqS2NKtML8cyRDVHmbOF8EQjqH3fhC5SQu4_zmzcbCzbR9ObIro6JDulwAolVOHip9XIdpbVMlRX7deyll4y1phIiCX.R3CROpRAQ888iS6ZDwLjlMn0shJ3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 12:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6971\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9217798d6c566a144edb5820e9aae90c494e95307487c4731fe52406e47e9a75\r\nserver: cloudflare\r\ncf-ray: a0fb3919ab1bc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6971,"size_decoded":7422,"mime_type":"image/png","magic":"PNG image data, 247 x 74, 8-bit/color RGBA, non-interlaced","md5":"0f062c71f0bb729b504f88f6a428cbed","sha1":"1e16377c8a46941e01b7faade8460cc2d8ea2313","sha256":"d21d21bb7f84a4b4556ca0a012b2a3d0528a6694b471230c4c5a4ba8ccba6b1b","sha512":"96dc8e6a80aa61330fa1be7129931df3337ec4785fc2970ceaa342b6476de7e4c75af6ae11b1af139883eb692aeeffdec923b338d782ed7e5a6901b6725bf500","ssdeep":"192:MXTuulTKCGKf0wbowZCjQfc8L316OH6pr:M6kBGHwbowZmQftLl63pr","tlshash":"6ae1ae9c51ba3ab3e5cb7af1b3792ada44e6c236227fa1c164e3c355184491b8033e08","first_seen":"2026-02-10T06:57:54.570916Z","last_seen":"2026-06-22T12:59:48.955608Z","times_seen":110,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"pagar.freeflow-pedagio.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}