{"report_id":"432851bb-7fd0-4737-9d2a-262fc52fe66f","version":6,"status":"done","tags":[],"date":"2025-09-16T05:45:42Z","url":{"schema":"http","addr":"chavezseguiracontigo.com/login.php?timeout=1","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":0,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"chavezseguiracontigo.com/login.php?timeout=1","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"title":"Sign In"},"submit":{"url":{"schema":"http","addr":"chavezseguiracontigo.com/login.php?timeout=1","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":0,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-21T05:45:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-16T05:45:16Z","timestamp":1758001516,"ip_dst":{"addr":"172.18.0.14","port":39442,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 17","source":"{\"timestamp\":\"2025-09-16T05:45:16.980484+0000\",\"flow_id\":1203767553616955,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"94.154.35.60\",\"src_port\":443,\"dest_ip\":\"172.18.0.14\",\"dest_port\":39442,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400016,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 17\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-16T05:45:16.912443+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"chavezseguiracontigo.com","ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-09-01","domain_rank":0,"first_seen":"2025-09-16T05:45:43.069245Z","last_seen":"2025-09-16T05:45:43.069245Z","alert_count":0,"request_count":8,"received_data":1935591,"sent_data":4265,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-10T15:11:19.040403Z","alert_count":0,"request_count":1,"received_data":38591,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-10T15:14:38.264059Z","alert_count":0,"request_count":1,"received_data":4594,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-16T05:45:16Z","timestamp":1758001516,"ip_dst":{"addr":"172.18.0.14","port":39442,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 17","source":"{\"timestamp\":\"2025-09-16T05:45:16.980484+0000\",\"flow_id\":1203767553616955,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"94.154.35.60\",\"src_port\":443,\"dest_ip\":\"172.18.0.14\",\"dest_port\":39442,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400016,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 17\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-16T05:45:16.912443+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/libs/bootstrap/js/bootstrap.bundle.min.js","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-13T20:03:37.610302Z","times_seen":30887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/login.php?timeout=1","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e431c7741b086a54a0587a0275fc788","sha1":"b8f5f5f584bfcdf0dc7762cb460d8356006d1cd7","sha256":"83c6d1c114bcde15a028cb98af08a8789a8c7ca2da57d5cc594029a1dcb0c711","sha512":"df25d6d46563c539031e0c7c650d60034c82151231b0e76dd0b9b1ba1e087b8efd8d2adee7e64edac7cefdfe1bca67b6f43e9f841c8c51767c93e639f254eb5d","ssdeep":"","tlshash":"6ac08c3847264a30006f81523b8ca300363e01ab114084043b3c03489f90f03a881ca0","size":168,"data":"","first_seen":"2025-09-16T05:45:47.603576Z","last_seen":"2025-11-09T11:45:39.310999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/js/authentication-main.js","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f6dfaead1dc890669b09de248b69450","sha1":"e653a6e95e9423a22c5e732567b575135e608a28","sha256":"3ec0973a10876f75d4e2716b48332626c12255e97539167694972980c35d256f","sha512":"c14f00961072079fcc18dc34b1801b11523a5904df0912f1847228fa31e41ab93ea9a7b925bb7927f996c5911466b87ca2aa452b2b81b88052105f979c71e208","ssdeep":"","tlshash":"f861aa2c02101236a57723effb90a6c5eeb5111ff021591b706e85413ff0e1d26a2eaf","size":3451,"data":"","first_seen":"2025-09-16T05:45:47.596112Z","last_seen":"2026-06-11T15:47:21.949014Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/libs/bootstrap/css/bootstrap.min.css","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /assets/libs/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Jun 2025 23:29:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684f5775-38d63\"\r\nexpires: Tue, 16 Sep 2025 17:45:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-13T19:58:37.491314Z","times_seen":26365,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/css/styles.css","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Sep 2025 14:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b84a1d-e30e6\"\r\nexpires: Tue, 16 Sep 2025 17:45:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930022,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4eb4b9d969979fa2c95e76f8219b95bd","sha1":"e552f9222cfe4c8bf54fdc7aa53a75be46c008a7","sha256":"f65a9a180aaa50359177c495ed18bc6b27c21da4f9c63b4f9892862cd8c09112","sha512":"0be3fa94dcb985bcc155ddfabb9b082c0b70eae92df7d2443a8eb8b8cb58779b1e17c64dd612e88f19506f5480b0cb9462171d2ebc2fc55eeab9a1fde50ccabc","ssdeep":"1536:s/n/4UakcPAINmz4OYfPRI8IP8IalXRPVXJfTbl/NLlHdoQnYmd/v1blvrYViqpP:s/n/EOYrLXZXXrFo2fs1DUb1RcRqo","tlshash":"da157545f7ec0822217b9a18a699f7ac37ad35005f48dd3877e742a81ec939eb1d35c8","first_seen":"2025-09-16T05:45:47.588975Z","last_seen":"2026-06-11T15:47:21.948294Z","times_seen":4,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/js/authentication-main.js","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /assets/js/authentication-main.js HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Jun 2025 23:29:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684f5775-d7b\"\r\nexpires: Tue, 16 Sep 2025 17:45:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3451,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5f6dfaead1dc890669b09de248b69450","sha1":"e653a6e95e9423a22c5e732567b575135e608a28","sha256":"3ec0973a10876f75d4e2716b48332626c12255e97539167694972980c35d256f","sha512":"c14f00961072079fcc18dc34b1801b11523a5904df0912f1847228fa31e41ab93ea9a7b925bb7927f996c5911466b87ca2aa452b2b81b88052105f979c71e208","ssdeep":"","tlshash":"f861aa2c02101236a57723effb90a6c5eeb5111ff021591b706e85413ff0e1d26a2eaf","first_seen":"2025-09-16T05:45:47.596112Z","last_seen":"2026-06-11T15:47:21.949014Z","times_seen":4,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/chavez.png","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /chavez.png HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 20:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bf425c-8982\"\r\nexpires: Thu, 16 Oct 2025 05:45:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 100, 8-bit/color RGBA, non-interlaced","md5":"498d3141bdebbbeba2d3507315dda470","sha1":"782d251b00588ae604b8843c31fd76f6006d4a30","sha256":"c26226b046edb51fbecb6eec5ac46c5a0cc9e7a39b9b2353aa86b9571f33014f","sha512":"b3fa8826d79d515bdec7b98233c3574a94843e1242bdd30475924b73037bd734d81270ac28017caa5352bf3fbd759e0922c70d5129243b2613a3a3e6b701d5ed","ssdeep":"768:wvjrwgBSXl943EgpzAknY90igPondcV8yg3iT7O5ZTaBs:eHwrl9cEGzAkY904/yg3iHy8S","tlshash":"53f2f1b4741bcaf42f0d50c577ad0e497c2fb53d69e00fa0c9da1a5656562fb40f8163","first_seen":"2025-09-16T05:45:47.59723Z","last_seen":"2026-06-11T15:47:21.955187Z","times_seen":4,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:18.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://chavezseguiracontigo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Sep 2025 00:31:31 GMT\r\nexpires: Sat, 12 Sep 2026 00:31:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 364427\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-13T19:52:03.457071Z","times_seen":549076,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":70,"dns":0,"connect":15,"send":0,"wait":17,"receive":18,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/login.php?timeout=1","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-16T05:45:16.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /login.php?timeout=1 HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=6bc20212236a612a88f11144e14070fa; expires=Tue, 16 Sep 2025 13:45:17 GMT; Max-Age=28800; path=/; secure; HttpOnly; SameSite=Strict\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":4842,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"c6d5e8fd123114a7b1b6b364f5c8bfea","sha1":"1939bbadcb036fa6e42da4653293c97b559ca435","sha256":"5b978bf77d33bee15b1f01d14a635cff38adc6bb1d70cdbceafba0c820226d29","sha512":"649165215c96a0f2cf43fb56e2e892f13c29651d2bb7c828a297df76e293026fd837b07985f310874de3fa61d11d55f42d601207259826141743274669d66227","ssdeep":"96:Hg6jrWhPFz+5UwRvmdUZmKH1jVA4J8eimVsO3:Hg6jriFC3RvmdUZmKH1/JfVp","tlshash":"9ba1952089f10997704350a57ab6b62ebed5c603cb46ac18737f17e96fa1fcec013568","first_seen":"2025-09-16T05:45:47.598921Z","last_seen":"2025-11-09T11:45:39.290658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":188,"dns":42,"connect":68,"send":0,"wait":70,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/css/icons.css","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /assets/css/icons.css HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Jun 2025 23:29:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684f5772-9d074\"\r\nexpires: Tue, 16 Sep 2025 17:45:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a2d9cda765de1bcea86261283a7b3af4","sha1":"6835815dd68410251dc72c21b44f9d3a73140df4","sha256":"b248d3011a736d49c01837a5c39eb428b5e8731e933648a5bfed4023292e4aac","sha512":"59fce8d06ef1b24d51fa70bb9d1bf97703479d253a6dd6428fb65f3451b09f337814ab0a9b1e83a516b020f595c998342ab760c1bbeea9f87335a3a62fe77afe","ssdeep":"3072:6AnoIkIKDH2FrjFoRDC1cLQJFM56sVac0mnE9LFCSn5RMOEIc:FKDH2FrqbLQ7M4sgcDnE9LFCHOEIc","tlshash":"cad423e8e1be08e05301e4d537522661fb1da67d9d4b3c6ad3a378cdb9c2a10c6927dc","first_seen":"2025-09-16T05:45:47.60008Z","last_seen":"2026-08-02T23:38:53.5219Z","times_seen":11,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/libs/bootstrap/js/bootstrap.bundle.min.js","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /assets/libs/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Jun 2025 23:29:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684f5775-13b51\"\r\nexpires: Tue, 16 Sep 2025 17:45:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-13T20:03:37.610302Z","times_seen":30887,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:17.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 16 Sep 2025 05:45:17 GMT\r\ndate: Tue, 16 Sep 2025 05:45:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"935871d1a732f1e46db8fac63abf0dcd","sha1":"1c67935ab647d6cb5bfa911856397443ab4a64ed","sha256":"b8eec3c6430ec7af2ae527219f944b1f3fde1695eb73efc2a56b3cabb23e2481","sha512":"2a9cb9036467308726cc6b979cab5e2c7159ec088436136f4aefc70cf43b6e90c7ebd277697beca525b052f2a8f8dc5909d9b9e5e4b09afc930e290a7195a571","ssdeep":"","tlshash":"2481c0910517a504da471cc523cf7e26de0e66767494d5797ffe2ca8bdeac220324b2c","first_seen":"2025-09-05T02:18:57.460387Z","last_seen":"2026-08-13T18:44:27.581532Z","times_seen":88327,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":92,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chavezseguiracontigo.com/assets/images/brand-logos/favicon.ico","fqdn":"chavezseguiracontigo.com","domain":"chavezseguiracontigo.com","tld":"com"},"ip":{"addr":"94.154.35.60","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chavezseguiracontigo.com/login.php?timeout=1","date":"2025-09-16T05:45:18.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chavezseguiracontigo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 16:49:40 GMT","end":"Sat, 06 Dec 2025 16:49:39 GMT"},"fingerprint":{"sha1":"AC:7B:14:22:D6:D9:E0:B6:CE:A8:71:BE:09:3E:67:93:08:34:BD:73","sha256":"42:6F:CC:54:93:9B:69:A1:F2:83:C3:46:13:FD:88:32:2C:47:7C:AF:CF:6A:86:8E:E3:37:A6:00:35:F3:29:2B"}}},"request":{"raw":"GET /assets/images/brand-logos/favicon.ico HTTP/1.1\r\nHost: chavezseguiracontigo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chavezseguiracontigo.com/login.php?timeout=1\r\nCookie: PHPSESSID=6bc20212236a612a88f11144e14070fa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 16 Sep 2025 05:45:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Sun, 15 Jun 2025 23:29:54 GMT\r\netag: \"684f5772-47e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"be3222d8f234703852744754471a28ce","sha1":"49493ba686fdb1424d6f3730c1169ff71dc5d562","sha256":"5f62ea9f2fa87f9b4e1af5a039ad483b15a8cc41903c4b045708a38028859302","sha512":"e860db845f30ff10bf8f08887f93a0030a67b31661601f135b7d1021dd257abe3061e65fdb1f27c92b3f5ec65044d2c7fd888ee050bfd7cafd37a3e12db3f1ac","ssdeep":"","tlshash":"0821e19ef040f531ea8dbbf3842a2f1022d8b0e95a83634464a4ac51e0e113ba817ae1","first_seen":"2025-09-16T05:45:47.602471Z","last_seen":"2026-06-11T15:47:21.956875Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}