{"report_id":"0c3c2f00-7c1e-48d7-aca9-55083e248e47","version":0,"status":"done","tags":["nordea","financial","phishing"],"date":"2026-06-19T00:51:34Z","url":{"schema":"http","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"title":"Nordea - Identification","dom":{"size":118819,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4209)","md5":"d591d38a4ffee0b52ba02209a66f5a60","sha1":"7c82ff8604f0ffcef251f961ef4f8ccc3d46d298","sha256":"92ca698e1454bcd3ae435d873a24f572120acc90491e4fcf801bfb18c8f70620","sha512":"47dc840b9087b1938a535450a28aa456273b2daf3834ea93c5cce3fb76354c4122d1b60bd69a4d4b015713559316cf1d33068e32f53f90b95cc315df044164fb","ssdeep":"768:e9qGguIm9FeIpbqoVRRIG5DLck9WH1nPfXsJpvCwlpYXs69WVGzDLcS9WH1nPfX2:e9rfe8bqKVw9cboc6wsw9cbocb7UydJ","tlshash":"e7c3295081e70633160a47dca7db2baabe8dd267d8074194767c0bec9f87cb1ad4f264","dom_hash":"domhashf9c55a714742eae18bf8b9b4b3bc1298","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-24T00:51:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"enfermeriacanaria.com","ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2005-01-21","domain_rank":0,"first_seen":"2026-06-18T17:06:47.634987Z","last_seen":"2026-06-18T17:06:47.634987Z","alert_count":6,"request_count":27,"received_data":528574,"sent_data":15086,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/jquery.js","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4e85ddc6e188c8490191794776f22e","sha1":"83b9249bbbcd563eef7546291d0407f0e70166ce","sha256":"8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a","sha512":"d8919c3b49d80e25163e29cd35f8a7f18dfd07880f72bbe3104c91e1fefd68d1d8a59708909ab57215fd2e334aa990084299c368ac57141421a6eca74e080edf","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:/u1zNwcv9qBy1HOg8SMpQ47GKF","tlshash":"7d83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87461,"data":"","first_seen":"2023-06-09T23:20:42Z","last_seen":"2026-07-14T16:34:05.538851Z","times_seen":4521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/main.js","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5862f75b53b9ed5bf79096b10266d2","sha1":"c052d666510449427eb7a4446e2f0489985a8ea9","sha256":"e86025bf226d3921ed13a8ed54a7b72051dfda0e05a73cdeb9c01779bfd5c653","sha512":"47b673359b4a3f59c5d6bd2e55b23402124ebceb3b8d04a8a9673df5cbb984032cee827b4a6b93ec19fd79cc83561b154c6117ea3e26df5334b902344faffd76","ssdeep":"","tlshash":"7c21ab18f2d21612d3bb70b84e8f8000b935544b840acd91bc3c3bd1dfada39d2e1a6d","size":1415,"data":"","first_seen":"2023-12-08T19:56:46Z","last_seen":"2026-06-20T13:17:53.021036Z","times_seen":2323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"800cc8dfcc4e0115f7893600e67983cb","sha1":"a761d98d2e81610d5f12aeab01fa751ce0b2eed0","sha256":"29aee7a8896f51d92c89d51afb10d49b6a9265d6025b67c1db4d16e7d9948630","sha512":"02fa9adaf7b12cbb41f2f420901e61d648307cbb1e64e89675f9d2412e9651f42d89bc6cef4bb289ad958114daca581bc9e4fb9e6cfc442122aa61bdfb41721b","ssdeep":"","tlshash":"b3d02245a28950a89900fb1aebbfc4642037713530036e20c38028cc0f2283ce30eacd","size":198,"data":"","first_seen":"2026-06-08T15:24:24.30949Z","last_seen":"2026-06-20T13:17:53.021913Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:27.764Z","timestamp":1781830287764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:27 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/jquery.js","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:11.052Z","timestamp":1781830271052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Folder/jquery.js HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 18 Jun 2026 17:06:38 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Fri, 19 Jun 2026 00:51:11 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87461,"size_decoded":38543,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"ed4e85ddc6e188c8490191794776f22e","sha1":"83b9249bbbcd563eef7546291d0407f0e70166ce","sha256":"8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a","sha512":"d8919c3b49d80e25163e29cd35f8a7f18dfd07880f72bbe3104c91e1fefd68d1d8a59708909ab57215fd2e334aa990084299c368ac57141421a6eca74e080edf","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:/u1zNwcv9qBy1HOg8SMpQ47GKF","tlshash":"7d83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-09T23:20:42Z","last_seen":"2026-07-14T16:34:05.538851Z","times_seen":4521,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:16.642Z","timestamp":1781830276642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:16 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:19.643Z","timestamp":1781830279643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:19 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:24.763Z","timestamp":1781830284763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:24 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:26.764Z","timestamp":1781830286764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:26 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:29.765Z","timestamp":1781830289765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:29 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:30.764Z","timestamp":1781830290764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:30 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/style.css","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:11.050Z","timestamp":1781830271050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Folder/style.css HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 18 Jun 2026 17:06:38 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 19 Jun 2026 00:51:11 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":229261,"size_decoded":148031,"mime_type":"text/css","magic":"ASCII text, with very long lines (41599)","md5":"d826171b27abe66f440095ba49b45fe6","sha1":"519cba7463ed06858f7643cdf63b10601c9eddb4","sha256":"85dfc983df9e0c375dd8ead00da7445115cb94adf69dc1e6a44001380e85b758","sha512":"2715a983eaea934448236792fa25bb589e9a4ef53a726a6d9a5245a11d75f9460771777036d7fad0ee4cb966931040d461e3ad1ce3b03e0cb220568bc215a94c","ssdeep":"6144:Ly5yOz4kBABv8bLhADFbChsOfQsQdZZWIr/hwum:M9zK+bfQsQF51wr","tlshash":"0524c0b61a631808541f851c17ef6a14bf3c90a3550bdcf9bbcf1289cf87b58c692b5a","first_seen":"2024-01-25T02:45:49Z","last_seen":"2026-06-20T13:17:53.01126Z","times_seen":2314,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:14.544Z","timestamp":1781830274544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:14 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:22.763Z","timestamp":1781830282763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:22 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:31.765Z","timestamp":1781830291765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:31 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T00:51:10.284Z","timestamp":1781830270284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Sign_in.php HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:10 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128897,"size_decoded":38083,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3852), with CRLF line terminators","md5":"22864dd1ac46212b336de29acf956139","sha1":"01a29f2a4b449cdfb47cf69ab68a88674b2247b1","sha256":"db761bf188ca97c84d95fe027cce46da034aa0ecc9d6428a25417d7c43e44345","sha512":"3f99b43388a950bc233ec83615e095dd994fa8cbb963ef3564b1304d84ef2e5209f75e051f9b8e9796f400bf15081696454b2c549979d7f729a5a6bdccfb6203","ssdeep":"768:ams0ueI29FeIcbqZeR8/rUem9US1JJ8h/XsdfN5JtzCXscRFtrxem98S1JJ8h/Xw:amdHefbqYYoocvwccTGoocvwcyLRJ3I","tlshash":"c4c3091081c71633063747cc979b2ba9fd8dd257d903419876bc2bdb9fb6c22ad4b268","first_seen":"2025-07-24T03:42:54.31667Z","last_seen":"2026-06-20T13:17:53.002409Z","times_seen":2228,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":3,"connect":153,"send":0,"wait":219,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:15.544Z","timestamp":1781830275544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:15 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:20.643Z","timestamp":1781830280643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:20 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/main.js","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:11.054Z","timestamp":1781830271054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Folder/main.js HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 18 Jun 2026 17:06:38 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 603\r\ncontent-type: text/javascript\r\ndate: Fri, 19 Jun 2026 00:51:11 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1415,"size_decoded":858,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"af5862f75b53b9ed5bf79096b10266d2","sha1":"c052d666510449427eb7a4446e2f0489985a8ea9","sha256":"e86025bf226d3921ed13a8ed54a7b72051dfda0e05a73cdeb9c01779bfd5c653","sha512":"47b673359b4a3f59c5d6bd2e55b23402124ebceb3b8d04a8a9673df5cbb984032cee827b4a6b93ec19fd79cc83561b154c6117ea3e26df5334b902344faffd76","ssdeep":"","tlshash":"7c21ab18f2d21612d3bb70b84e8f8000b935544b840acd91bc3c3bd1dfada39d2e1a6d","first_seen":"2023-12-08T19:56:46Z","last_seen":"2026-06-20T13:17:53.021036Z","times_seen":2323,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:17.642Z","timestamp":1781830277642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:17 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:28.771Z","timestamp":1781830288771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:28 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:11.571Z","timestamp":1781830271571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Folder/a85818c8c2c809dedd4b-5dbb8bc48bceea15838b7a4f36dffdd1.jpg HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Folder/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 18 Jun 2026 17:06:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68574\r\ncontent-type: image/jpeg\r\ndate: Fri, 19 Jun 2026 00:51:11 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":68574,"size_decoded":68779,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x300, components 3","md5":"5dbb8bc48bceea15838b7a4f36dffdd1","sha1":"a6c66aed2ca319d837ad73d92f8e429baa86e3d8","sha256":"b0ca988c2a45c3ce7d0c8b7f384fff8297fca1513f4a5b9df54a9e4e36390bed","sha512":"5b12e7ec760acea7419ac6049669d2ef97e13bacb821af9c897868653f527541943f06b85e640c3c725e1a6dcc5a8f0eb9655ce8cff6cfce0eab0d658637591a","ssdeep":"1536:d92WXm21p1aj7/JN7YJv5thtznHYZ6ehr:djXl+rJtQTDznHYZnhr","tlshash":"3a630209c951fd72e5cc84666bc8430036160d5554cb363e7093fd31f294e9aafee6ea","first_seen":"2023-05-02T11:36:11Z","last_seen":"2026-06-20T13:17:53.006628Z","times_seen":2496,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svg","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:11.576Z","timestamp":1781830271576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Folder/aa78d594083d0ccfefcf-d2c5355e1fcc507cd7b7389e87e6c9de.svg HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Folder/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 18 Jun 2026 17:06:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3919\r\ncontent-type: image/svg+xml\r\ndate: Fri, 19 Jun 2026 00:51:11 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3919,"size_decoded":4126,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2c5355e1fcc507cd7b7389e87e6c9de","sha1":"950e8594a7f7eeaf1ab24c2146c3fca3f6e03b29","sha256":"9f447470aba212c3bf9d926893df1219f82f5ea14fb495658af56d6ab22c9697","sha512":"42ece6a453f8443e6f1f99be85ee7266e54d4f93ab8efbf9baa470c4945715427a23c896b2d8156b765f375006123337cc22b4e88d7e0f3381e17f2668122e94","ssdeep":"","tlshash":"a98167d94bd8a7fcbe8bd7b0a40928147a5939fbf754e60cd0468965bc36cc8801d4e2","first_seen":"2023-05-09T14:35:15Z","last_seen":"2026-06-20T13:17:53.020088Z","times_seen":2284,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:12.544Z","timestamp":1781830272544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:12 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nset-cookie: PHPSESSID=f6c502db6247e534dc2cdec509149839; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":350,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:18.646Z","timestamp":1781830278646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:18 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:25.764Z","timestamp":1781830285764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:25 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Folder/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svg","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:11.574Z","timestamp":1781830271574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Folder/3defb92f3d1f7309bb86-28abb007069a4e48b1a0830fb5d4a822.svg HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Folder/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 18 Jun 2026 17:06:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1724\r\ncontent-type: image/svg+xml\r\ndate: Fri, 19 Jun 2026 00:51:11 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1724,"size_decoded":1931,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28abb007069a4e48b1a0830fb5d4a822","sha1":"0076bce33117d255676fa9d36dbb96b5a6d911c3","sha256":"f0dd565f9257ed5f2b92bcdf9fffeb6b057829269c5a5c60033f89402b372b1a","sha512":"fbee5c1e3da5096fa7e116eb30cd1f5ededf9d791b75282f759577730dde3a1c802c7fa9e957f9b1b5120748bd33da8a5d1cbb482247922688d005e15449b01f","ssdeep":"","tlshash":"e43148dac35cb7f46acde324e5b4f2a2251b3436b124c614cf60d8593418ac44c149dd","first_seen":"2023-05-09T14:35:15Z","last_seen":"2026-06-20T13:17:53.003987Z","times_seen":2258,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Nordea","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Nordea phishing","tags":["nordea","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:13.544Z","timestamp":1781830273544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:13 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:21.763Z","timestamp":1781830281763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:21 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enfermeriacanaria.com/112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login","fqdn":"enfermeriacanaria.com","domain":"enfermeriacanaria.com","tld":"com"},"ip":{"addr":"162.144.12.241","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php","date":"2026-06-19T00:51:23.763Z","timestamp":1781830283763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.enfermeriacanaria.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 May 2026 08:34:38 GMT","end":"Wed, 12 Aug 2026 08:34:37 GMT"},"fingerprint":{"sha1":"63:7C:DC:CB:85:3A:A9:3A:25:48:12:E7:D9:49:BF:C3:4A:C1:69:A2","sha256":"6D:D3:F1:98:53:5F:D0:15:CD:2A:11:26:E3:CE:16:AD:63:69:0F:B1:12:D0:9E:D9:DD:DE:87:EE:B8:54:57:8E"}}},"request":{"raw":"GET /112/NRD/1b1fd37/Account/request/Time_Online.php?Online=Login HTTP/1.1\r\nHost: enfermeriacanaria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://enfermeriacanaria.com/112/NRD/1b1fd37/Sign_in.php\r\nCookie: PHPSESSID=f6c502db6247e534dc2cdec509149839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:51:23 GMT\r\nserver: nginx/1.27.2\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.27.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":286,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T08:18:40.230709Z","times_seen":17260031,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
