{"report_id":"36ead3e4-55a0-4f97-bf51-28d7e4970a5b","version":6,"status":"done","tags":[],"date":"2025-11-11T18:32:20Z","url":{"schema":"http","addr":"cliente-base-kiosco.pages.dev","fqdn":"cliente-base-kiosco.pages.dev","domain":"cliente-base-kiosco.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cliente-base-kiosco.pages.dev/","fqdn":"cliente-base-kiosco.pages.dev","domain":"cliente-base-kiosco.pages.dev","tld":"pages.dev"},"title":"Portal de Acceso","dom":{"size":1125,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f75d07275faf79c2e2091c2ad0fe56d9","sha1":"f01c349cb0169aeb14acadc8c6c49c20343a5a4e","sha256":"7462832c1773c439588989a37f5a7201b69b084ebca5400c9ec8c758c129f0e8","sha512":"1f90899a4475db082a6d49ac9b0b8faaa6d15d45885fbbb3c1b6b3c621cd7439bb2fc146d218a49df73174cf3c387cc8ba956938b8a466af757fbf9ca3a79730","ssdeep":"","tlshash":"262163a399a095c11b6242ea98b2f41de48c825f87a8d8c1badcd2004f44adf9c4395c","dom_hash":"domhash03af222cd65d971a18a026439ff9e690","first_seen":"2025-11-11T18:32:23.077201Z","last_seen":"2025-11-11T18:32:23.077201Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cliente-base-kiosco.pages.dev","fqdn":"cliente-base-kiosco.pages.dev","domain":"cliente-base-kiosco.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-16T18:32:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T18:31:59Z","timestamp":1762885919,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":49684,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-11-11T18:31:59.428435+0000\",\"flow_id\":1557533401507553,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49684,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"cliente-base-kiosco.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":931,\"bytes_toclient\":3570,\"start\":\"2025-11-11T18:31:59.419553+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"cliente-base-kiosco.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cliente-base-kiosco.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-11-11T18:32:21.025198Z","last_seen":"2025-11-11T18:32:21.025198Z","alert_count":3,"request_count":3,"received_data":4479,"sent_data":1406,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-11-09T22:21:00.231743Z","alert_count":0,"request_count":2,"received_data":164049,"sent_data":985,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2025-11-10T16:19:26.222149Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T18:31:59Z","timestamp":1762885919,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":49684,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-11-11T18:31:59.428435+0000\",\"flow_id\":1557533401507553,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49684,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"cliente-base-kiosco.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":931,\"bytes_toclient\":3570,\"start\":\"2025-11-11T18:31:59.419553+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/leaflet@1.9.4/dist/leaflet.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b48eb991f383702f153452506e07b2","sha1":"5a640ff863e7902a8cac2ce6ba37c87b30677761","sha256":"db49d009c841f5ca34a888c96511ae936fd9f5533e90d8b2c4d57596f4e5641a","sha512":"0701dfaebe1cf6499190bc3a89715dcdc75657f3c69158222322162cb953497cd6433c6e4a0e03890502a5abb3fc45a3824e53610a97fe4be7f691b536961faa","ssdeep":"1536:sdeV/7u3i297NP5yaKuLylR+xCa8Mc5ScLsG7JBVc3bk/+bB7naxDk9ILvZs+rTr:Z/7uNNyaKST0LbYQDDkOr","tlshash":"cee3c68ab3d17a2742c36264003f210bb6326595a40a416cb97cd9efee7ca497137f7d","size":147552,"data":"","first_seen":"2023-06-27T11:10:33Z","last_seen":"2026-08-06T03:36:04.989325Z","times_seen":7350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cliente-base-kiosco.pages.dev/","fqdn":"cliente-base-kiosco.pages.dev","domain":"cliente-base-kiosco.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T18:31:59.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cliente-base-kiosco.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:00:57 GMT","end":"Mon, 09 Feb 2026 08:59:21 GMT"},"fingerprint":{"sha1":"1D:CA:AE:56:67:6F:33:F4:B4:A6:30:3C:E7:04:F7:50:26:AA:4D:A5","sha256":"8F:93:CD:DF:E5:9A:38:47:08:40:EA:FB:66:71:99:2D:E9:2C:19:40:F9:DE:61:91:88:55:9E:7C:66:86:68:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cliente-base-kiosco.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 18:31:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BE4YSuoQAatZY%2F41b2sdmMhVEr1XCidzL1v3ZfgckfiIAbgdgZjQDDlmvJ%2FUqlPaPSAYsnoqfA8bIoHnGL7z7HWBX8zD8FRjY0GoXvNVqEroyab9c0yB7IDGvw%3D%3D\"}]}\r\netag: W/\"a3eed68050ae7d2ae60661410ea37f0a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 99cfdea47b60b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":1074,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"eb2884a3adfddb2a6767a9b4da72a204","sha1":"dbe9b02a9002c5056ad21b9c90265b9fb83c1614","sha256":"95de495cafcc26d7e628d6977ddebd812dd7aabdaf1c7c6f779258ba6bff7f0a","sha512":"17a52a673bcdea5b81c67d24cc1b0a305672368398e5743243a631874624f295c988c95d8cd8821f09b5a7424354a27c9f91332bd20bc335fc7b9b005d7119f7","ssdeep":"","tlshash":"9711429799a086810b51419d9cb2f01ee48d829f86a8d9c175ddd1144f80adf9d4795c","first_seen":"2025-11-11T18:32:23.078448Z","last_seen":"2025-11-11T18:32:23.078448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":36,"dns":15,"connect":1,"send":0,"wait":98,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"cliente-base-kiosco.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/leaflet@1.9.4/dist/leaflet.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cliente-base-kiosco.pages.dev/","date":"2025-11-11T18:31:59.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /leaflet@1.9.4/dist/leaflet.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cliente-base-kiosco.pages.dev/\r\nOrigin: https://cliente-base-kiosco.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 18:31:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 99cfdea6aea30b31-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3933432\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 11 Nov 2026 18:31:59 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:24:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:p4NxAoJBhIIN+hmNHrzRCf9tD/miZyoHS5obTRR9BMY=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01JZMJ65N88QK198R3XV7Y1GNB-ord\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14806,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c02c12fe5e21d2493070649584ca38b7","sha1":"ec929f1100c6642ccc5c4272cf4cca12251a9a5d","sha256":"a7837102824184820dfa198d1ebcd109ff6d0ff9a2672a074b9a1b4d147d04c6","sha512":"65c9fa6e347ff1165b2c4a4b21e3b036dcd11010099d42844b171eb3ad0ca688feda8928a5201c4942143ac79d7439b47319c6433c4847bbc982c2d96dd2c4df","ssdeep":"192:6zzoiQjynh9SVxflSqrC04i11mXsaQtc5EAY0x4m8yT2OMhnVh1SMdg1pEcBLDLN:CUNah9SVQ8dtciAVnTShnVhcymLDLr+g","tlshash":"6862f013b33a3368e2257219f7b08a73bd26946191a7c7fdb9cce714839885c2c531e8","first_seen":"2023-07-15T11:50:21Z","last_seen":"2026-08-06T03:36:04.988335Z","times_seen":7576,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":60,"dns":35,"connect":1,"send":0,"wait":53,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/leaflet@1.9.4/dist/leaflet.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cliente-base-kiosco.pages.dev/","date":"2025-11-11T18:31:59.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /leaflet@1.9.4/dist/leaflet.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cliente-base-kiosco.pages.dev/\r\nOrigin: https://cliente-base-kiosco.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 18:31:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 99cfdea69e980b31-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 333636\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 11 Nov 2026 18:31:59 GMT\r\nlast-modified: Sun, 02 Nov 2025 22:13:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:20nQCchB9co0qIjJZRGuk2/Z9VM+kNiyxNV1lvTlZBo=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01K93A462YSEKT6E9M06CBAM4F-fra\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147552,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65383)","md5":"35b48eb991f383702f153452506e07b2","sha1":"5a640ff863e7902a8cac2ce6ba37c87b30677761","sha256":"db49d009c841f5ca34a888c96511ae936fd9f5533e90d8b2c4d57596f4e5641a","sha512":"0701dfaebe1cf6499190bc3a89715dcdc75657f3c69158222322162cb953497cd6433c6e4a0e03890502a5abb3fc45a3824e53610a97fe4be7f691b536961faa","ssdeep":"1536:sdeV/7u3i297NP5yaKuLylR+xCa8Mc5ScLsG7JBVc3bk/+bB7naxDk9ILvZs+rTr:Z/7uNNyaKST0LbYQDDkOr","tlshash":"cee3c68ab3d17a2742c36264003f210bb6326595a40a416cb97cd9efee7ca497137f7d","first_seen":"2023-06-27T11:10:33Z","last_seen":"2026-08-06T03:36:04.989325Z","times_seen":7350,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":53,"dns":34,"connect":1,"send":0,"wait":57,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cliente-base-kiosco.pages.dev/","date":"2025-11-11T18:31:59.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cliente-base-kiosco.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 11 Nov 2025 18:32:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Sat, 15 Nov 2025 18:32:00 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"resource_available":true,"data":null}},"time_used":2129,"timings":{"blocked":1052,"dns":0,"connect":18,"send":0,"wait":18,"receive":0,"ssl":1037},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cliente-base-kiosco.pages.dev/src/index.tsx","fqdn":"cliente-base-kiosco.pages.dev","domain":"cliente-base-kiosco.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cliente-base-kiosco.pages.dev/","date":"2025-11-11T18:31:59.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cliente-base-kiosco.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:00:57 GMT","end":"Mon, 09 Feb 2026 08:59:21 GMT"},"fingerprint":{"sha1":"1D:CA:AE:56:67:6F:33:F4:B4:A6:30:3C:E7:04:F7:50:26:AA:4D:A5","sha256":"8F:93:CD:DF:E5:9A:38:47:08:40:EA:FB:66:71:99:2D:E9:2C:19:40:F9:DE:61:91:88:55:9E:7C:66:86:68:32"}}},"request":{"raw":"GET /src/index.tsx HTTP/1.1\r\nHost: cliente-base-kiosco.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cliente-base-kiosco.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 11 Nov 2025 18:31:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 376\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"784b9c49d6ff2eafb2996ab1c894fa5d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hc3ebxOiCgEX8xNqdMWFReKGMAk3TM7KmaUnB6zcm0EJgWoLvowlQHzUhIYC3ejYVs0R0yEJa7sc73swaBpSkb0uoQxxzNLXck00GDsZv8V68KGdaDYEVGG5E2v5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 99cfdea638e823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"cliente-base-kiosco.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cliente-base-kiosco.pages.dev/favicon.ico","fqdn":"cliente-base-kiosco.pages.dev","domain":"cliente-base-kiosco.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cliente-base-kiosco.pages.dev/","date":"2025-11-11T18:32:00.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cliente-base-kiosco.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:00:57 GMT","end":"Mon, 09 Feb 2026 08:59:21 GMT"},"fingerprint":{"sha1":"1D:CA:AE:56:67:6F:33:F4:B4:A6:30:3C:E7:04:F7:50:26:AA:4D:A5","sha256":"8F:93:CD:DF:E5:9A:38:47:08:40:EA:FB:66:71:99:2D:E9:2C:19:40:F9:DE:61:91:88:55:9E:7C:66:86:68:32"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cliente-base-kiosco.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cliente-base-kiosco.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 11 Nov 2025 18:32:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYiCIMlUf8C1nE1o6msV6zANclFMNg5MFmJh%2FQrJTUdCb7MapXv%2FwV9DhRKr4%2FCARfo9C35pTUWpABXyTmaf2f9ugbmB68Vf2wVHcqZ6HE4gwjra1RlwVQxCdQDG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a3eed68050ae7d2ae60661410ea37f0a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 99cfdead7f0223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1074,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"eb2884a3adfddb2a6767a9b4da72a204","sha1":"dbe9b02a9002c5056ad21b9c90265b9fb83c1614","sha256":"95de495cafcc26d7e628d6977ddebd812dd7aabdaf1c7c6f779258ba6bff7f0a","sha512":"17a52a673bcdea5b81c67d24cc1b0a305672368398e5743243a631874624f295c988c95d8cd8821f09b5a7424354a27c9f91332bd20bc335fc7b9b005d7119f7","ssdeep":"","tlshash":"9711429799a086810b51419d9cb2f01ee48d829f86a8d9c175ddd1144f80adf9d4795c","first_seen":"2025-11-11T18:32:23.078448Z","last_seen":"2025-11-11T18:32:23.078448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"cliente-base-kiosco.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}