{"report_id":"7eb69537-326f-4f24-9ca2-dd69ef566a72","version":0,"status":"done","tags":[],"date":"2026-10-17T00:17:42Z","url":{"schema":"http","addr":"forsanalgazerah.fjc2000.com/hola/index.php","fqdn":"forsanalgazerah.fjc2000.com","domain":"fjc2000.com","tld":"com"},"ip":{"addr":"216.222.197.185","port":0,"asn":40092,"as":"HostPapa","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"forsanalgazerah.fjc2000.com/hola/index.php","fqdn":"forsanalgazerah.fjc2000.com","domain":"fjc2000.com","tld":"com"},"title":"Banco CTT | Iniciar sessão","dom":{"size":19643,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8e6b7b0e769207dcfcf63a861fca9a2f","sha1":"97c598c530dcbd27fd666dfd6148e9cf22d8584c","sha256":"5072f88a351b8040b3abff36c1d0e2a1f3d2c3d2f2c88076c063f365f2c9bc62","sha512":"277f0d768b8843350d16165ade440d6ec8b61fc5c2c84d30b577d9246caf9a20fe9639f1a64137daf24abc6f4c490496f03a90db57b8b01a6957296dd9b9ed2a","ssdeep":"192:xc4AK2asWQ1n8w5Qb2+sz5+tBuq6BZfxeXaGv50KbDvAsiX7YUOgBjKn5T/nrZS:3AK2asVJ8KuB96ITTXMYxM","tlshash":"8692096276e5243a6273c1987b6b3b1674394043c90e8a10feac2265cfdaec759377dc","dom_hash":"domhash61a3ea7019050bd98494ca92b8270b66","first_seen":"2026-10-09T00:35:37.671114Z","last_seen":"2026-10-17T00:17:45.171623Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"forsanalgazerah.fjc2000.com/hola/index.php","fqdn":"forsanalgazerah.fjc2000.com","domain":"fjc2000.com","tld":"com"},"ip":{"addr":"216.222.197.185","port":0,"asn":40092,"as":"HostPapa","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-21T00:17:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"forsanalgazerah.fjc2000.com","ip":{"addr":"216.222.197.185","port":443,"asn":11989,"as":"WEBINT","country":"United States","country_code":"US"},"domain_registered":"2007-03-13","domain_rank":0,"first_seen":"2026-10-17T00:17:43.194562Z","last_seen":"2026-10-17T00:17:43.194562Z","alert_count":0,"request_count":1,"received_data":20318,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":24664,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"thebanks.eu","ip":{"addr":"104.26.1.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":825458,"first_seen":"2024-10-26T07:07:12.826875Z","last_seen":"2026-10-10T00:29:32.523443Z","alert_count":0,"request_count":1,"received_data":101893,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":3,"received_data":147396,"sent_data":1761,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.bancoctt.pt","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-03-07","domain_rank":1251610,"first_seen":"2017-03-13T08:15:29Z","last_seen":"2026-10-10T00:29:32.006026Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":540,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"forsanalgazerah.fjc2000.com/hola/index.php","fqdn":"forsanalgazerah.fjc2000.com","domain":"fjc2000.com","tld":"com"},"ip":{"addr":"216.222.197.185","port":443,"asn":11989,"as":"WEBINT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fdbc7642778f72250500b0af46f20e4","sha1":"e681d83c4e9ebcae8c4a995946cec1f89f839e2d","sha256":"c54157155e7c4453f1a30ea4904e08c3402d18ad1321c83537639398095ca832","sha512":"97ac1e80645fe27bdf8ab381ac447d6ac05436a14f847e7b61a27a0fc26f8deebd53124b3a45fa8a83caea3a4dee2eff0dfa1246378a8a70a8df581f0700bb49","ssdeep":"96:2gnkiA+yBIsugY+3vAsiI07hqUOHABjKAI5T/yUrZi0x1fB:1KbDvAsiX7YUOgBjKn5T/nrZb","tlshash":"80a1ed57bce3287259bbf5be6b5fa544f63604031808c4617cac99421f60f8646beed8","size":4902,"data":"","first_seen":"2026-10-09T00:35:37.676698Z","last_seen":"2026-10-17T00:17:45.179727Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://forsanalgazerah.fjc2000.com/hola/index.php","date":"2026-10-17T00:16:48.538Z","timestamp":1792196208538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://forsanalgazerah.fjc2000.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Oct 2026 19:54:43 GMT\r\nexpires: Sat, 16 Oct 2027 19:54:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 15725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-17T03:22:31.34365Z","times_seen":359161,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":28,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://forsanalgazerah.fjc2000.com/hola/index.php","date":"2026-10-17T00:16:48.541Z","timestamp":1792196208541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://forsanalgazerah.fjc2000.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Oct 2026 19:54:43 GMT\r\nexpires: Sat, 16 Oct 2027 19:54:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 15725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-17T03:22:31.34365Z","times_seen":359161,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":21,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bancoctt.pt/application/themes/images/icons/favicon-32x32.png","fqdn":"www.bancoctt.pt","domain":"bancoctt.pt","tld":"pt"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forsanalgazerah.fjc2000.com/hola/index.php","date":"2026-10-17T00:16:48.666Z","timestamp":1792196208666,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /application/themes/images/icons/favicon-32x32.png HTTP/1.1\r\nHost: www.bancoctt.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T03:26:26.432815Z","times_seen":19157029,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forsanalgazerah.fjc2000.com/hola/index.php","fqdn":"forsanalgazerah.fjc2000.com","domain":"fjc2000.com","tld":"com"},"ip":{"addr":"216.222.197.185","port":443,"asn":11989,"as":"WEBINT","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T00:16:46.705Z","timestamp":1792196206705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.forsanalgazerah.fjc2000.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 04:26:35 GMT","end":"Tue, 01 Dec 2026 04:26:34 GMT"},"fingerprint":{"sha1":"6F:81:9B:84:EB:C0:37:08:76:68:6F:6F:B6:5B:C0:03:6F:62:BF:A7","sha256":"42:79:97:00:C1:EB:53:07:AB:CE:B9:19:DD:DC:48:81:AB:93:C6:32:C7:5D:9E:F5:1B:AD:9A:5F:78:D4:4E:D4"}}},"request":{"raw":"GET /hola/index.php HTTP/1.1\r\nHost: forsanalgazerah.fjc2000.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 17 Oct 2026 00:16:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.34\r\ncontent-security-policy: upgrade-insecure-requests;\r\npermissions-policy: geolocation=(); midi=();notifications=();push=();sync-xhr=();accelerometer=(); gyroscope=(); magnetometer=(); payment=(); camera=(); microphone=();usb=(); xr=();speaker=(self);vibrate=();fullscreen=(self);\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nexpect-ct: max-age=7776000, enforce\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":19562,"size_decoded":5933,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"03ff8b6691842163328c5f57adacaf0a","sha1":"b0974ecb6c46aa8c1255fad9ce3f7572e4980a98","sha256":"c5c51d9c7b7f2666b9726cc5e1e2892b75003bc2f3e4c3e3325e28338c1a60cf","sha512":"2f9bc757e6d61d51884250ecccab239c984cd9da282c463ede67fb419ac945bb8465487d105e364712710ee7f718bb5845568fd3eba3908eeeb2b4d5797b5c80","ssdeep":"192:ec4AU2asWQ1n8w5Qb2+sz5+to2vLBCfxroaGz25KbDvAsiX7YUOgBjKn5T/nrZ6:yAU2asVJ8Kuo8LPTNXMYxM","tlshash":"9a92096276e5143a6273c094bb6b3b1274394043c90e8a10feac6265cfdaec75a377dc","first_seen":"2026-10-09T00:35:37.672496Z","last_seen":"2026-10-17T00:17:45.17423Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1150,"timings":{"blocked":-1,"dns":69,"connect":172,"send":0,"wait":390,"receive":0,"ssl":518},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://forsanalgazerah.fjc2000.com/hola/index.php","date":"2026-10-17T00:16:48.371Z","timestamp":1792196208371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:12 GMT","end":"Mon, 21 Dec 2026 18:40:11 GMT"},"fingerprint":{"sha1":"AE:BD:84:85:8E:C5:11:85:74:3D:03:31:4C:F1:48:FC:FD:34:A4:40","sha256":"52:31:09:0A:7D:15:EA:28:1B:57:B2:D1:58:31:0C:CE:F0:5C:97:E1:7C:EB:CA:D4:75:1E:24:D4:DB:76:14:32"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Oct 2026 00:16:48 GMT\r\ndate: Sat, 17 Oct 2026 00:16:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23980,"size_decoded":2517,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1566)","md5":"814f551ae494b6c629d07e7e37f4500c","sha1":"f894ec418332abd4f7214336198945bc579b4c43","sha256":"e26068894e04e39bdadb9c0f63d0ebf8a109cae7a831acfc8fd138ea663cfa63","sha512":"bbda9dafcbe2b0c21254122a2bd3ba9789e4b89f28ec79278920a2c444ebc6ef9bf419e36c9dd8e36c15165bb71ebdc04c6fdf2dd081584ce1b78b89a2694c63","ssdeep":"192:aCKKf2Xdr+Jn8qGIwQjoz0JCMMV2Nnr+Dn8qGIwQpWzySC77u2mIr+Un8qGIwQy5:Jvyqh+hQqhVCVqhJLGqh2","tlshash":"0bb21b9000171850aa475de633ce7e34ee0f92617044d0ba6bfd8b9bdedad6963b431d","first_seen":"2026-10-07T04:19:22.641146Z","last_seen":"2026-10-17T00:17:45.174856Z","times_seen":39,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":37,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thebanks.eu/img/logos/Banco_CTT.png","fqdn":"thebanks.eu","domain":"thebanks.eu","tld":"eu"},"ip":{"addr":"104.26.1.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forsanalgazerah.fjc2000.com/hola/index.php","date":"2026-10-17T00:16:48.378Z","timestamp":1792196208378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thebanks.eu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 13:17:16 GMT","end":"Mon, 14 Dec 2026 14:17:04 GMT"},"fingerprint":{"sha1":"F9:22:08:39:35:49:A6:14:E9:54:08:E4:E6:A9:AB:B7:2B:4B:1C:E4","sha256":"FA:21:9F:6B:09:7B:58:5B:E4:50:11:03:E5:60:81:93:53:47:B3:F3:7C:84:A4:B9:CD:CA:41:80:27:17:E0:C9"}}},"request":{"raw":"GET /img/logos/Banco_CTT.png HTTP/1.1\r\nHost: thebanks.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 00:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 101254\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 18:26:45 GMT\r\netag: \"18b86-612d9de2da340\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeWfx8Fom3eQ%2BMvruWmyuWvK2veTPebu8bzKeWRtglQSPKmmqhi64guzuR7eeg7sa296EoN0t8AThBQiHzpNIvLB2YxgrDqLnqPg9JnR7bB4op04dXTXPRskSXNY\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a4bb1ddf1e920daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101254,"size_decoded":101893,"mime_type":"image/png","magic":"PNG image data, 1278 x 428, 8-bit/color RGB, non-interlaced","md5":"6680caccc233908e7eae2d3d3f111cfc","sha1":"7f25c7b9f594beb6d4c6d4c6c1e6b18b0199e98e","sha256":"a9086fd8a96832463285fc30d13cd23ae492bd73a2323789340be16d4be5de99","sha512":"c66f9af657ff7871dcd812f74e55a29b495746dfaac71c0900e7db3ccbd53d661dea2241dc66882ca4e3ae673581856eb0154868b5a80b01f94fb2bd5f757aac","ssdeep":"1536:G/djr7oEs4+CiRHSwiLu32QaKiydNEZm38MNT68tOYor21IYEnui5x:4V1s4KdiLu3VdNEs3HBbtO7rHf3x","tlshash":"00a3e19744e23693af23996e6d110f88bf166e3942e15f7ceb2dd03e940b0b08ec7159","first_seen":"2026-10-06T21:01:00.531928Z","last_seen":"2026-10-17T00:17:45.175493Z","times_seen":5,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":97,"dns":0,"connect":2,"send":0,"wait":90,"receive":4,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://forsanalgazerah.fjc2000.com/hola/index.php","date":"2026-10-17T00:16:48.537Z","timestamp":1792196208537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://forsanalgazerah.fjc2000.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Oct 2026 19:54:43 GMT\r\nexpires: Sat, 16 Oct 2027 19:54:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 15725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-17T03:22:31.34365Z","times_seen":359161,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":5,"connect":32,"send":0,"wait":19,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}