{"report_id":"743698a4-895a-4944-adb6-366cbc7a8a91","version":0,"status":"done","tags":[],"date":"2026-09-05T01:20:38Z","url":{"schema":"https","addr":"portal344.com/","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":0,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"portal344.com/","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"title":"Portals Help","dom":{"size":2388,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1447)","md5":"6e9c5777a110a3a90e30a35a53ac71d3","sha1":"514363ca9f5f29108bcaf075cd6297580ad9fe1a","sha256":"0cd4bf29f5b4d64294d39bb8bd34360edaf0806797f0bfae7bc18b7821d1fc4d","sha512":"e76e9dbbd77f7c3b5d618f7d98789646b60af5aa3a11fdc30ad2107b33f6fe1fe716829d16b9d6d505e7b1af6342079e8ee385c2b2d893159274fb160e16938f","ssdeep":"","tlshash":"2041ebb04451b57b121b99cae5a16b8f38e7d22fde835500a6fd97ad0fc2cd4c822418","dom_hash":"domhash7b93308dbc525d277743e07f1ca2df58","first_seen":"2026-09-05T01:14:18.606034Z","last_seen":"2026-09-05T01:20:40.596399Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"portal344.com/","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":0,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T01:20:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"portal344.com","ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-09-05T01:14:12.762031Z","last_seen":"2026-09-05T01:14:12.762031Z","alert_count":0,"request_count":7,"received_data":1956118,"sent_data":3395,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-09-03T08:07:28.123462Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-05T04:22:12.634667Z","times_seen":1063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/assets/index-CwvAp1i8.js","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f8bfcd7680743a8db404c92ecf3195c","sha1":"c78290ce4fb90e1ce531a7cecdd33caa1ec310b2","sha256":"e16ea7d634bfe9fdb9393e9f08b4568c2603ad7a340aded4f452ef8f090c27c2","sha512":"3e28f2bdcc2aeade56fc19b3d21cddf7e886e50d3b1098750fa55a8e66e6ff50c92991a441f6945db20726ba31959c9cf6127f045303779f30b739538e69695a","ssdeep":"3072:EWoiPIdGyoX7YvyXw8BtH7itpFPFFkgPleFie+Vnqn3FQyaB0:E7iQRM7Pw8r7wPQgPleFie+Vnqn3Fn","tlshash":"c0345de871a9b5626fa357b2006f150b733918675c0d4870b220fd9e3af188552bbfed","size":251470,"data":"","first_seen":"2026-09-05T01:14:18.612194Z","last_seen":"2026-09-05T01:20:40.60965Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"warn","text":"[Telegram.WebApp] Header color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":769,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Background color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":825,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Changing swipes behavior is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":608,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"portal344.com/","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:20:08.007Z","timestamp":1788571208007,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nlast-modified: Sat, 04 Jul 2026 22:41:16 GMT\r\netag: W/\"48a41e6e5d3ed314bb3cad93265e6a69\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":689,"size_decoded":680,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b0836e844689fc6a150f863e8c9d19d2","sha1":"6c255888cfb79c12d0db22de68dbb3dd1c1cb27f","sha256":"3a736b76981d5a312616c671fe7b5724de480adda17324645e121f76eda4f77e","sha512":"7895340abe5e6bf2eb1c914334db232fc5cd6e8214f00272e0eeea0b6a4ff90a99bd629fb5f013bf3760a39cc01096578e9239b5fe4b8e4ed6aa2b6ad9718a18","ssdeep":"","tlshash":"cc01704359e088095320827959c1f40c4956f1879744a954b5da64bddf84fc1c9ab5b8","first_seen":"2026-09-05T01:14:18.610046Z","last_seen":"2026-09-05T01:20:40.604417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":23,"connect":32,"send":0,"wait":41,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.479Z","timestamp":1788571208479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sat, 05 Sep 2026 01:20:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Wed, 09 Sep 2026 01:20:08 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-05T04:22:12.634667Z","times_seen":1063,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":24,"connect":22,"send":0,"wait":44,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/assets/index-CwvAp1i8.js","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.481Z","timestamp":1788571208481,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET /assets/index-CwvAp1i8.js HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 251470\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Jul 2026 22:41:16 GMT\r\netag: \"acb06de707b8e9dbfe0d99d78a42a9ad\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":251470,"size_decoded":251753,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43357)","md5":"4f8bfcd7680743a8db404c92ecf3195c","sha1":"c78290ce4fb90e1ce531a7cecdd33caa1ec310b2","sha256":"e16ea7d634bfe9fdb9393e9f08b4568c2603ad7a340aded4f452ef8f090c27c2","sha512":"3e28f2bdcc2aeade56fc19b3d21cddf7e886e50d3b1098750fa55a8e66e6ff50c92991a441f6945db20726ba31959c9cf6127f045303779f30b739538e69695a","ssdeep":"3072:EWoiPIdGyoX7YvyXw8BtH7itpFPFFkgPleFie+Vnqn3FQyaB0:E7iQRM7Pw8r7wPQgPleFie+Vnqn3Fn","tlshash":"c0345de871a9b5626fa357b2006f150b733918675c0d4870b220fd9e3af188552bbfed","first_seen":"2026-09-05T01:14:18.612194Z","last_seen":"2026-09-05T01:20:40.60965Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/assets/index-C-1TNGow.css","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.482Z","timestamp":1788571208482,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET /assets/index-C-1TNGow.css HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 12231\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Jul 2026 22:41:16 GMT\r\netag: \"35c88b3263f5d970a3392e13edf190e2\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12231,"size_decoded":12514,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12230)","md5":"d0ea8ae3841f2a78578f322f35feafc0","sha1":"f33d1a88cf5eecb9d1d1d5ee802453f4634fe2a5","sha256":"216676b626ede504c4221ab1a468a62f4ecae7984a0b92495422cecac879413e","sha512":"8daa131214aa71a2f23508de4582e9936bba1ce505bcc2091c898eb6bb27605c2a03ba6da841d177212756a43b6268fcad484b46f2f7a96d5fea2242c1a41de7","ssdeep":"192:kfNVBWVETQqmq7+Dm8LqFqbvUTrLBrT9gy8Yt9Uuv8REhdF66Hk2wk41Bi:kFVBWVI7TQbvUTn9k3cEkCBi","tlshash":"8e429761a340e22cf827d4b19ad8a7deb014d51bd663abeed994e235c4cb7e3077064c","first_seen":"2026-09-05T01:14:18.61355Z","last_seen":"2026-09-05T01:20:40.612617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":64,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/startback.png","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.706Z","timestamp":1788571208706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET /startback.png HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 1534539\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Jul 2026 22:41:15 GMT\r\netag: \"9384945b7f8de66e4ee2c98fcba65e9b\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1534539,"size_decoded":1534810,"mime_type":"image/png","magic":"PNG image data, 1079 x 1457, 8-bit/color RGB, non-interlaced","md5":"04aefbc656d1634c474d7199259ce0fb","sha1":"944b0e6db4d4872f8191ec0088ac18cc189191df","sha256":"e9c5acddf77c926c6d5ebf4018ba81f8f252ce66db482374d4d7362e25d8fd49","sha512":"3fe761e4c47dc48e3506bfccd8f3b382c88fea5ab5d4e4a14dad118c8a0365751cf6219e836d07f33e3d3b51ba28cd86487dee7ce780f2d1fbe99754cced9b0a","ssdeep":"24576:j65hfYlaJQDLBh3/5JAMJw/XuZvD6a1qWNleHU/3Rk4INJNrH:GffYWQ3D/5mMa/I6a1xNsaBmzNrH","tlshash":"1a2533febf0a5fc7f9668534843609e04ca975b309b19504623eed45c88df946ab2e33","first_seen":"2026-09-05T01:14:18.614966Z","last_seen":"2026-09-05T01:20:40.614409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/logo.jpeg","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.707Z","timestamp":1788571208707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET /logo.jpeg HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25678\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Jul 2026 22:41:15 GMT\r\netag: \"adf8888b859b20d6f88349a1cd46db33\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":25678,"size_decoded":25948,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"a0b3b2823e67586a294fc7e6d31eced1","sha1":"3babf425ddda30a8e6c990a3322d2492a67724cc","sha256":"e3c0c7fa277270d15e283332e57c919c45f933923d4928dd5d0124409fb53d72","sha512":"2bb306397e90b39bbb73c93e55bc269763d3ee5f3d1e7d1a459cc913d0e0cdcd6b6f350808bc743e0a6aba0d1c95a499c5a85839292caceba2f176f4fbdd8d9c","ssdeep":"384:83Wkn9p3KSPGm0P9DpcXdnLpUra8w4/VvcMJgKWc0Z9y/zR:83WAYqmPxKXdnLV74/RxTWfId","tlshash":"d0b2f17177a58c33dcde313aea660ac2c7624de231b3d9dd32427c0159494af24ae66d","first_seen":"2026-09-05T01:14:18.616385Z","last_seen":"2026-09-05T01:20:40.616072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/banner12.webp","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.708Z","timestamp":1788571208708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET /banner12.webp HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 120032\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Jul 2026 22:41:15 GMT\r\netag: \"492a98353fefa0a6cccd0b692985533c\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120032,"size_decoded":120317,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image","md5":"6c73b4fa3dc0ac774ea36f7416961fa7","sha1":"74679808b54ff2a6eafc242b9f568d4484c25df0","sha256":"b4a917414cb9bd31987bd44b7db54f6d99946174d9f080b8016d4ab091291c18","sha512":"ddde230f080c6245ef8ce51a22693d748d43851740f0e7f11f7f6008d8d7c8d5307c7f913298a0b263ec78274b4f4e64ac95ce2abd2149668b45ca39dfe42125","ssdeep":"1536:4JJIIM+FFArvb5WVkmy6GKhvdOkPAJrFqitOtdpztFYEwpxXCffgPWW+Vwc/7F:4JJxM+F8YVO6fvPAJzkRzzUigeNVwc/p","tlshash":"18c30267ee55230bfcfd6838394191ea0f210d09fb50b95c2ee82a81dd964df8784b5a","first_seen":"2026-09-05T01:14:18.607669Z","last_seen":"2026-09-05T01:20:40.617241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":67,"receive":65,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal344.com/favicon.svg","fqdn":"portal344.com","domain":"portal344.com","tld":"com"},"ip":{"addr":"85.137.253.78","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal344.com/","date":"2026-09-05T01:20:08.912Z","timestamp":1788571208912,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal344.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 02:26:29 GMT","end":"Mon, 30 Nov 2026 02:26:28 GMT"},"fingerprint":{"sha1":"F9:66:19:4A:DE:EB:02:2D:C4:1C:28:09:FF:D0:57:59:6C:78:A6:C7","sha256":"9A:13:56:D8:5C:8A:8D:29:0D:52:AD:BB:65:4B:1D:22:06:B4:95:9B:0E:D5:1F:EA:B7:9E:D7:76:B8:34:73:0B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: portal344.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://portal344.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:20:08 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9522\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nlast-modified: Sat, 04 Jul 2026 22:41:15 GMT\r\netag: \"3a699caf6290a7150944535c36b3703c\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9522,"size_decoded":9794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e840862161341271697daa99a40d76b","sha1":"3f5bb8f3a6a05b7ca68a62581d2dd5bc88812caf","sha256":"61bc9a161de58248288e6905425d7180f0624c2865007b97d763fdac12043a66","sha512":"695cf2d7a2ad9fd7618cfac28e4d356f000eaa9069484ad34a68afa456e12c6943f3e66a0ab35902b5221d912c45b79e179e371f7a4097c2e149b7a5fffeed9b","ssdeep":"96:8Ep9/pIZ6gzAZp9fD6ZQEIOKMXGQSQzsw+JignGFGxQGySLISTSoSWSSESiSeSEs:qII+6DImQnMStOcbloxW1","tlshash":"901253a2e6f9b46d62150174fbd394d7102f90c9ca11078fb4be3231512baa3f9bd5b8","first_seen":"2026-03-15T03:33:01.165262Z","last_seen":"2026-09-05T01:44:58.963078Z","times_seen":8999,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}