{"report_id":"90b92f2f-263b-4749-9f45-4e7e97633196","version":0,"status":"done","tags":[],"date":"2026-09-13T19:11:38Z","url":{"schema":"http","addr":"kancelaria-online.info/","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"172.67.182.54","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kancelaria-online.info/","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"title":"Kancelaria Online","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kancelaria-online.info/","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"172.67.182.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T19:11:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":4,"received_data":212164,"sent_data":2398,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-06T23:58:30.75429Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":839,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":11693,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kancelaria-online.info","ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-13T18:51:40.237581Z","last_seen":"2026-09-13T18:51:40.237581Z","alert_count":125,"request_count":25,"received_data":530905,"sent_data":14540,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":2,"received_data":914133,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kancelaria-online.info/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T16:44:42.838647Z","times_seen":436784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/jquery.scrolly.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ed5a78bde1476875a40f6b9ff44fc14","sha1":"91ee4deda8189fde4432a8f58cfe3b5f2aed9dcf","sha256":"8b6571ea2c3631ff50bb4b96e7f9081c6e33ebaadef9cb2ca5955d5e0b625a02","sha512":"8c1deaca425bd86a93a05624f9e80e803a2ece4673e012dfaf3ca79aa5dada7eb04ce5944b86346c125394ed5acb31f6e3f8d937237c77a2f109af0b0ba9c929","ssdeep":"","tlshash":"f00156c87545f14680f6e730081fd60b7126f637440c6895746bc9882db45279dade18","size":831,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-09-19T03:01:05.468538Z","times_seen":1008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/main.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27a5e488b821e4924c43d6fefbb28260","sha1":"8fcb2eb5d7fbe2f5d5d0b468a7f30e7730931e06","sha256":"f20785465a7789711083b554ccb1ef2b364ddd858945511ae11f8eb18b21fc3a","sha512":"937910d2fffefca068a7284f5f79ad4b5be74238309fcebb6db24a9a34c7a5422164052385b166d52dd199a36bd433683b12481b3ebb4f2e50255cc638d913cf","ssdeep":"48:xaKni70icidCuX/Do5q5+67SUbOifEiBkTPUZRnFrF2N/iAJ/tWtZc+C+395kQ1O:NbidfX7bDbFDAz+C+3f3AwT82rPrzi","tlshash":"e4b144d2f1af194fcdbb331ad77fa2444a3ec03190852373f852546c4a819864366fae","size":5346,"data":"","first_seen":"2023-03-07T13:19:05Z","last_seen":"2026-09-19T03:01:05.470007Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5539HJ6T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc21b679262c7e0029540a4d8c02d7c","sha1":"bc93969a7a8bd50de5a82006d5d8c85bdcaa38b7","sha256":"6beac64912afce64965e9ecc95cd76361cf08756e95cc8b2f7c77ee335805acc","sha512":"2f995b5c5fcad0375c5a75a27230165599ab7160ee433360c849d6bd6881d4a954efb784f3a5c19b2d047404ffa9f1a9fd025e692aa15287e121ea36683c087d","ssdeep":"6144:Ydf1L6SbQWm6qy/vd80ucTPbNELR3/jHdQ8Z:YXaXyidV","tlshash":"4864f8ccb3d6b42283a3b574903f014bb23a7991b84cc854f286e9d42d7466a9277f7d","size":331904,"data":"","first_seen":"2026-09-13T19:11:43.381745Z","last_seen":"2026-09-13T19:11:43.381745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/jquery.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-20T16:40:15.551404Z","times_seen":504872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/browser.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3368a3e74d51bcb77f4d673769b7ba6","sha1":"d994066dfe6e57063d3daf01a3692db8afbfc1d5","sha256":"c4217feebdd357e8a952e0ffbaa02791e5323482b8e3d80b3f714b84b1664103","sha512":"c8e4256e7941243f1acb7bc0899fdf4ea1ae084319e7347efab1fbc094627234632ff66fe78f557ed6f73f88f41bb6c661d4f5a450662951b39f8842d6a7fe19","ssdeep":"","tlshash":"5741559e3343f99589763d11650ba116fe3c6a5713ca12e22b800f9e3eb25277125ca5","size":2051,"data":"","first_seen":"2023-03-07T14:59:02Z","last_seen":"2026-09-13T19:11:43.342922Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/jquery.scrollex.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f89065e3d988006af9791b44561d7c90","sha1":"ede14d2a018d6df0ffd13514dc4662724ad8f9c9","sha256":"fc25b75fb3fc8b42756413be387e0d7a602813125283d2384551961d73ea784e","sha512":"785c6e01326f35e52bc71a12ff901e562e97e3063a21d23d900b516ee1b20f65d32e827f47db8171ef65b1fd94caf634b506255246ecd7057d8e138fc40342ce","ssdeep":"","tlshash":"2f41630d7446731943cf91d8a83f425cf135af17188474dab0a6dbe2be20a56e0bbb34","size":2257,"data":"","first_seen":"2023-03-07T13:19:05Z","last_seen":"2026-09-19T03:01:05.467913Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/breakpoints.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81a479eb099e3b187613943b085923b8","sha1":"bab199b97edb25ed1b07410c6188ff52ea95f5a2","sha256":"309febcd6d6e0cf092201532215f03a6a9f30b30f26203272a4861d704e7cd52","sha512":"52181cf048ff13059f4e98b10f36105480fed40eedb26d95e2c9e1d56210823ad211216c4415b5bf3b108ac9d4bc79475b26f2e9d955aaff9466da4062702fa8","ssdeep":"","tlshash":"b541bfaf6e4f6d5c14b1d6e7623f716e00b5f966b60a2ce240c2ea806b107c554bafc1","size":2439,"data":"","first_seen":"2023-03-07T13:19:05Z","last_seen":"2026-09-19T03:01:05.458534Z","times_seen":631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9687ccdcac9a3f47dfec82e95b3695c4","sha1":"1142f11a72c3705901c74f0eb1e977a379a761bd","sha256":"770cd3295d337fe3864601a510f1e89207cbf375b1748a620c8af88fbdfecb12","sha512":"8fd47990b6a8de0b2e41f089e40d00864657bd75747fa007cd707747e9c298ecc52c953d9201e61b2ebd68fe3fcddfdae274660218f69214a375eac62ad6306a","ssdeep":"","tlshash":"12d0a7951ca589345194018a1075d3e8296131546726a604c1cacc2baf50ed354a1558","size":217,"data":"","first_seen":"2026-09-13T19:11:43.413447Z","last_seen":"2026-09-13T19:11:43.413447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-35PD099H98","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2345bffe34d669dcd7d2be00dc8706a8","sha1":"33ac7cdecf37966e2029e008c8a2f7984440f27c","sha256":"9f162fc3ca6724bab1060cbbdc73e6604e2931ab7582ef31a030fbc134fae580","sha512":"be0185ba67861c20e861e3d833b9dbd61d14f2335131a4b8e5ef358abf8ba7654f70c7030b81e4dd69029d9e5f7d8f5589f3787b1114ade39645989a26c0af1a","ssdeep":"6144:tamf1L6SSxQhmgyyE3RdJl580ucTPbNELR3/jupWS3P+NJ3geZ:YY0yAy6PnpJP+Jv","tlshash":"3ac41ace73c674229796f078903f01cb697b29a2b49cc89af18adce02d3455a5167f78","size":580995,"data":"","first_seen":"2026-09-13T19:11:43.375256Z","last_seen":"2026-09-13T19:11:43.375256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d0b50c96f2c2cd327482388ab7a9978","sha1":"95c6612e8135ea7cc6b67c701dc10e1100170aae","sha256":"51586fdad501b39b86c7fa9ccfb016bb90a438e65ecc972f8a48fd9898771007","sha512":"f0149c0fec7dcd97d44a6119e3293798e7432cff3574fba3c0f1ecf43a7f245fdb40480e70a4020181b0b772107becf38a348c918cfd80c5556c854455b68d87","ssdeep":"384:695s9p4w5QIRRjV1q1v52dp/xK7NFJv7l7Mb1j9GLjmNH4KQ:695s9pL51xVus//xK5z+b1jna","tlshash":"5292719bb4e6f49c932a2075042734dea26ebd84205c1a58c510f5ffbdb63598237ecc","size":21243,"data":"","first_seen":"2026-09-13T19:08:00.927145Z","last_seen":"2026-09-13T19:11:43.401572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/util.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd2716a7b68ce7748c9676787b61db43","sha1":"e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954","sha256":"c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00","sha512":"5b3750e70a8dc0745def9105669b96ae70affbbcf89478c755a8078e3354dce1258968cd55fa9dc9f7ea5ee57c1aef97f7dc675f1c266b879f25f6786d85e129","ssdeep":"384:8uuVLI9hkwbZo57c1VAcggOy3kDA8XiVD8bD:8LVLI9hkwbm9CVADgOy3kDA8XiVD8bD","tlshash":"2d4273d6b39f58df4d36325ac27ba448b23fcaf2410a1352f8a1ddbc706090d46354ae","size":12433,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-09-19T03:01:05.426576Z","times_seen":1915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/browser.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.738Z","timestamp":1789326664738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/browser.min.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FqDFM9no64XikwuMccml5AgX8wzlX%2FwOCIysms03ATVMVd1QJl98nXU%2FK%2FZj6wF4BBQZj14r3Gi1VAXkim3pYwkbVNeCKvbRjYWFECqHNVhmvo%2FIRERN4RucS4FLgyJgtKP0n5OhfQR\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1207\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6a93add0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2051,"size_decoded":1656,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2001), with CRLF, LF line terminators","md5":"c3368a3e74d51bcb77f4d673769b7ba6","sha1":"d994066dfe6e57063d3daf01a3692db8afbfc1d5","sha256":"c4217feebdd357e8a952e0ffbaa02791e5323482b8e3d80b3f714b84b1664103","sha512":"c8e4256e7941243f1acb7bc0899fdf4ea1ae084319e7347efab1fbc094627234632ff66fe78f557ed6f73f88f41bb6c661d4f5a450662951b39f8842d6a7fe19","ssdeep":"","tlshash":"5741559e3343f99589763d11650ba116fe3c6a5713ca12e22b800f9e3eb25277125ca5","first_seen":"2023-03-07T14:59:02Z","last_seen":"2026-09-13T19:11:43.342922Z","times_seen":330,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/pomoc.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.766Z","timestamp":1789326664766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/pomoc.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:48 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GjMAd8cBKhqnJbly8aiQb3pw2ASnTw%2F9xKsnycrZFhPICv7vUBlm4BEyldDMQVqXfTMADsRR7g7zQizKufW7m6Q9XvOBpJCeiw93UUpd5ykTnZaBrlBcUuWmDXs1Von0xxTBF1N6%2BUM\"}]}\r\ncontent-type: image/webp\r\nage: 1205\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a6d947dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13764,"size_decoded":14479,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecad09e8259fa15d4fadc793014f0273","sha1":"4fbef635842ebb58eb270f5a3734fd6b29e753e8","sha256":"1c87fbd7f7a0c82e1ec77450c1889be7bbebc7d6eb9b6358fa1fca69d88130e1","sha512":"6ca8c4b5dedb1b6ba6e399437f6c303175e4df74983325021aac09d248db8818807dfc8d6270be417308dce8c4279e9377797ed26b473542c5cba97f54c9823b","ssdeep":"192:0cEJbh56l1ViUZmFmnIZvlRraqOHwjtKmpkiLrrknjEOC4i:cJbkmFAUl4wvk/njEOC4i","tlshash":"d0529d5cf2139e10c98d9d6834dde691a63ba3c0aa839004bcdd8492bff153d6e868c3","first_seen":"2026-07-14T07:01:45.766597Z","last_seen":"2026-09-13T19:11:43.344292Z","times_seen":9,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/overlay.png","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.031Z","timestamp":1789326665031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/overlay.png HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/assets/css/main.css\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:49:03 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2F8bMGTlKXIHRfgdsoSBKfSylo2LrdKOkHJgO11eAzuwqY5D9OcAmKGAS5MP2Gy%2Bpj6hk%2B%2Foe39pxC%2BJRAnoX4hNoGIBkdBonaksRP%2FsOCALDTFfxFoUwjVOD1iH4y256h0FsRNz%2BXZZ\"}]}\r\ncf-ray: a3a974a889d3dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2807,"size_decoded":3486,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 2-bit colormap, non-interlaced","md5":"aff0992faef6ad79b50ec21e2225a881","sha1":"e978d81201508e6fcbe0fe95485dae1a4b983a8d","sha256":"e7e5bbf97ef6edb13b603fb88bd2d33ae8db022a0eb72e78c235a39791284784","sha512":"2865242abd5d1400d523e0616b2dcb2126b9bbae3bdb4678365b2005a4101c7d1e77b5778cf81d15ad101286d50519f1310042eb385b5c010751702781ed1a42","ssdeep":"","tlshash":"c351b3cf2b100bc8ec4a82bd8d1cc96c341c633085139ac7bd427216afed5367a9d81a","first_seen":"2023-10-16T23:19:19Z","last_seen":"2026-09-19T03:01:05.465493Z","times_seen":67,"resource_available":false,"data":null}},"time_used":5205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/jquery.scrolly.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.736Z","timestamp":1789326664736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/jquery.scrolly.min.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9OCNGcYod13SvfsaaLQNKGV65x1JVwaXgTsE4PuQxT1cRdfuaqxRkviXaQlX8VMQhBR8MhA0By%2BSm0%2B3pWXedti4qvLz77mNSUWlg8WJfIw0jEbKpFVbqqe51%2BeulWyQh3omtmnZ0tX\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6a939dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":831,"size_decoded":1253,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (770), with CRLF line terminators","md5":"1ed5a78bde1476875a40f6b9ff44fc14","sha1":"91ee4deda8189fde4432a8f58cfe3b5f2aed9dcf","sha256":"8b6571ea2c3631ff50bb4b96e7f9081c6e33ebaadef9cb2ca5955d5e0b625a02","sha512":"8c1deaca425bd86a93a05624f9e80e803a2ece4673e012dfaf3ca79aa5dada7eb04ce5944b86346c125394ed5acb31f6e3f8d937237c77a2f109af0b0ba9c929","ssdeep":"","tlshash":"f00156c87545f14680f6e730081fd60b7126f637440c6895746bc9882db45279dade18","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-09-19T03:01:05.468538Z","times_seen":1008,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/asystent.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.761Z","timestamp":1789326664761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/asystent.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:47 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ae0pXOT1gRC34qiJlgPltu%2BCsq4T1DXtEBgWmNXgP%2FiT6YjWw9gXQb9FlOKQCsOGM3gPl8sc0OcuH36a8RCbwNl6R%2BOcQdUMAnPf2FrVudOoEdkS8l3W6xexAwC0Ej4rsNWIzgWeOs6y\"}]}\r\ncontent-type: image/webp\r\nage: 1206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a6c942dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15082\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15082,"size_decoded":15799,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5996de17256153bc765eea8e24a1c78e","sha1":"9211c469f91ca5e3eba32618afafd50b288d33e0","sha256":"0fd7f8fdb21667b57d856b53a3e011cdab5fad02e5356206f72bc33fd1b27d1a","sha512":"3d487230abc0a399df2781998ce73bfb53a83e8b4cfc9a6cff5d3ea190424f83f9f8c7de38d993ae2ed3e08690329cc97d97611f49c6accd6dcc6fc7b7aa5bec","ssdeep":"384:j5DOWXyEi4gNdoxVGINUjp+dUNlUnoEl84i:j5DOXEvodozGHp+2NGy","tlshash":"cc629e2cf5314e009ddd967920eed1a3a67b07c4e7939086788dd9137f722e04e89fa5","first_seen":"2026-07-14T07:01:45.760346Z","last_seen":"2026-09-13T19:11:43.350447Z","times_seen":9,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/dokumenty.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.762Z","timestamp":1789326664762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/dokumenty.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:48 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtJmhrXSnUN9IKuO0EsD92ZRGV4B9F4brfMreJ%2FEhhouXx3MtNvdEQ1hT9QbG%2BpqzkxfANgnSo%2BI6vOv38gyPr9f6t9v5d7XocjmGcNSyqzdv524EZatj3%2FI2ymAbsNvGj05iJdN84cX\"}]}\r\ncontent-type: image/webp\r\nage: 1205\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a6c944dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14726,"size_decoded":15445,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b14237fab7b8c9341658a9569996802","sha1":"f49120be50aa0aaa1e4ab3e0be9593386a68915a","sha256":"424fe429c67fa5638b3e2b9478543287290d1df4d0f54d766ca81d0e86695cb2","sha512":"9c6d4d14f36a4dff682f4020d54896825b62ddc1e418a85b1d43ac72f8f26776459db2afd3969f2b222eb876d27edc0a41cbe21cbdffb9e7ac93b5300694aea1","ssdeep":"384:Y1sehI5efflPC3pgrAauKYd6myanbEII4i:wsed9AaC0Da4","tlshash":"58628d3cb8929e30dadd6579299ad311753246c493a7408a7cce5ca77f700e8de268c2","first_seen":"2026-07-14T07:01:45.734124Z","last_seen":"2026-09-13T19:11:43.351299Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/publikacje.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.764Z","timestamp":1789326664764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/publikacje.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:49 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIuO%2BRKTTL6dYEuS1rYFUPKwSvXwvZCgxSxBhexO3lgTaaYjMd1OCPQTFVz%2FcEKNRHazFHDl45PdvjnZoxIFmsZKfur82xPOu22ZjOqr6PUgGukn%2FpaeuXt6LKdU00hxFc10DwfUl6kd\"}]}\r\ncontent-type: image/webp\r\nage: 1204\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a6d945dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14560,"size_decoded":15277,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07a1e49b846d3dd1bf8bd7120648ba91","sha1":"870cc50f82c8823fc5fd8bcd9bf5897199dc59df","sha256":"7a767323a2ce8a5a8e3fe355ea502c30c3ba22bd20ee92be176af6d0191a990a","sha512":"6dceb0fff06735cdabaf86517437026509e81f0bf8f2fdfba9155219eea8c47e7aaa93b94256e140f9f73f770f5bf1a669295f4d59b803af9852a4586d5fe700","ssdeep":"384:/Uw3yyTIPQDJOvKjLbbQYcVTFds7n5nEEwv4i:RyyJDLbbQYcVRds7n5m","tlshash":"e1629e2872166e10e6e9ad78b6b4e3736d73178cd5c764557ccc9803bfc01f98c6a690","first_seen":"2026-07-14T07:01:45.747204Z","last_seen":"2026-09-13T19:11:43.352029Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.051Z","timestamp":1789326665051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Sun, 13 Sep 2026 19:11:05 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a974a899d9dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/jquery.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.734Z","timestamp":1789326664734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRN5DWmRLbiqwn01DZ1JwM850xbwThFw1v65TVMx8JWZVOTH1abkjDpd2DvemYvJS1LgMDODVIdkQ4jJr7%2BBb7OhWanurHx45R9QrHCx8q61gv5ye65Jw07Dpi1P99TTcTVQ5IWkWtTU\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1188\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6a935dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":33541,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-20T16:40:15.551404Z","times_seen":504872,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/jquery.scrollex.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.735Z","timestamp":1789326664735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/jquery.scrollex.min.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QY7%2FvuycL6n7D7D1oNWmmOTTDqztW2ttEzEmQQO8KjJTBRYDsqKZrDny96ATl%2BwbIYJZ%2FasCXl9yRVByWpnrmZWdHEznzgGCRVwH2uFedOro%2Bcba9VxIT28vLyNMna98dhJiD5gtI77i\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6a937dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2257,"size_decoded":1651,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2164), with CRLF line terminators","md5":"f89065e3d988006af9791b44561d7c90","sha1":"ede14d2a018d6df0ffd13514dc4662724ad8f9c9","sha256":"fc25b75fb3fc8b42756413be387e0d7a602813125283d2384551961d73ea784e","sha512":"785c6e01326f35e52bc71a12ff901e562e97e3063a21d23d900b516ee1b20f65d32e827f47db8171ef65b1fd94caf634b506255246ecd7057d8e138fc40342ce","ssdeep":"","tlshash":"2f41630d7446731943cf91d8a83f425cf135af17188474dab0a6dbe2be20a56e0bbb34","first_seen":"2023-03-07T13:19:05Z","last_seen":"2026-09-19T03:01:05.467913Z","times_seen":418,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/main.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.750Z","timestamp":1789326664750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFzhYMNMZmgqHvHDB4GAFR8XyKg27w8mNGYzcaNsPFnAmUTwWoBV2zTQoLHZKxyTOop0W6cg21N%2B3K%2FvwfQgGfnxdUuKxAy0McJIfIZ%2BokUR2ZIBtvIzGVydTMdTtO%2FjaLUMn0B6sp5Y\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1207\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6b93edd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5346,"size_decoded":2665,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"27a5e488b821e4924c43d6fefbb28260","sha1":"8fcb2eb5d7fbe2f5d5d0b468a7f30e7730931e06","sha256":"f20785465a7789711083b554ccb1ef2b364ddd858945511ae11f8eb18b21fc3a","sha512":"937910d2fffefca068a7284f5f79ad4b5be74238309fcebb6db24a9a34c7a5422164052385b166d52dd199a36bd433683b12481b3ebb4f2e50255cc638d913cf","ssdeep":"48:xaKni70icidCuX/Do5q5+67SUbOifEiBkTPUZRnFrF2N/iAJ/tWtZc+C+395kQ1O:NbidfX7bDbFDAz+C+3f3AwT82rPrzi","tlshash":"e4b144d2f1af194fcdbb331ad77fa2444a3ec03190852373f852546c4a819864366fae","first_seen":"2023-03-07T13:19:05Z","last_seen":"2026-09-19T03:01:05.470007Z","times_seen":45,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.7066494774140805:1789322711:gHtgw87wPKWm8U_dc0O7a_6h9heGoE1pbIj71945Anc/a3a974956d542af8","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.296Z","timestamp":1789326665296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.7066494774140805:1789322711:gHtgw87wPKWm8U_dc0O7a_6h9heGoE1pbIj71945Anc/a3a974956d542af8 HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13830\r\nOrigin: https://kancelaria-online.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e; _ga_35PD099H98=GS2.1.s1789326665$o1$g0$t1789326665$j60$l0$h0; _ga=GA1.1.1474672132.1789326665\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13830,"data":"pPqJxvby8$CTE90BSpPh1Cq48itrZeEOrTcmfP1pscaBsj4Wf3SWxTsuc$2nhZHnv1PnE7RdwckQ0c1S0HopiAt4C$NaALcmhb653VY$VjWG5NMyvKzGqqB24PFN$DPPhL8wHkODwKN9YBVUBp6WpPqDLrEJNMcO1s1+euh5tYwhdN9O49kGr0406kbUx+UXqxQ0m3EKYWeccBwtYcxKaXe7YcAwPm$T1OF4UIb8$+2Zea5T$J+tN5qJQYjTp9AsZs-wGFgSPIMtF-Jo3sdwh8dqdvSOFWVdaNa9Mm2HQ6pATYYNsiLUnI9OFK2aV8zXGUzEhwdpyP66joFripRyyVKEOO3UJ1dFfRKYqRTrnu-W8qLIC1xYOOc2jDbBPt2MC4uvcfF8ZgfzNLohDtKXILpnt0z1V+VskYxF0V2Ui5O27AaYDxP133yzuiPg9CxD4+U$Q+u+G9M37JRZwwuSEBG2$K7Z6nxL1x3dWkMRVZ$PMAbS3d+fHmZVY5e65pjarmZ4jDuOgGG4BmntWBHiQce-eo2E3G8++ZZWkYaHe$EyVaFKh2BITA5s$gwsJPJ8I7VVkWKSF24v-CVGW1GubYf2dFMp-fyKeNkccjT9uzWv+83KU3vI7BFnL5OaWdA+F+P375dohMBPqhaeBxAJ8oc76+O4d+Q-7t5nJ+thI7KfAiEPcJrc0X+94OVT2Sj9AZOwfBKtnvU8ZfqWj$OjZq6hvoywfvxgvWuk12s0Wgjbx5KGnG8yZCdRqZoAj$TAAsyveKIJetagFCOyropu5rCT93PSBJuCCQK4C6-hyj3CDkZZeOwqvB5ywx+19VeW5Mtg-0hEFs3rdXr3mocMMMO+knONmaNn3H8WIho+aZ$bH2gSiyraN6Km8kNXZcP7BQPLUM0ULUo2JxVzAzBpn8YSX$jkNFI1SvZAGzumALIkwhCXrRZ2ext1j4sEiRrL1x9zTz3AKmOJnfXAd3hYvA+oF6y$tiRNp$5id$zmOguabXLhr-Lq9vYrP8NuGqYFDgu$4O6+2zcqX-4TToW+QPZK5MJuya5h$pdXvJ8MSIJOSgSSk0iJJUTEizVOO6BfF5ZUurEMsoKFcDMzCwAiUBww24oxWWRsF5DBWoob8I$xv7q8cyiSpN7w0X7D5HstYV$846rRx8bUUdA12xz9sb7nhWKDRr6iSeqkr3$nvPIMrrTJRW5aR65pFORZfveSo5T4-pPgjejyvPM3c1aJsMgAZGfGQ$6264rkhpu1w0xmFa7BxEqBng1tkKR7bLoRuSfTYGKVn9aJyDev+LJYEVZTEvP0U5M80FhzgWyqgRy3sDddO7b+7HuOa55HVTB8M9Toqeq0JCpI9NLFSWzekGW2SE4nvCFt10fzro85Iu51IT$y6Pw0Aw-nwUxjfWa1kIbEWaw51GOjEBi2xJIhi$JYbipso5r8qzF-MBvb1w3ujyb5EmKK3nuYXZ7Yh9v4AxJVM2JWCwT9GjInd5E1rM0ZCnAXF5J+spzYdnoQp5FhQX3aEIPE4SygJIbnCQ4vv+EDPrR76AsdJQNELR-Td8ENC3e8rujW0SSqyQRLtoSH0b4Gs9-2eZhQZxOTj98rqOy603thDLJQ1Wqe7411s1VOQd2yYrI4Nk6dFqMh3y-8EB7UDF13WaWAsc$33XMYQyjto0+vGxhgW6naRmxwOy5-fFYtefEpAvWkbI9SgxRjhRTjHd5MMWeQFt1CYr++q3xeOHLhHUGzdRzvwghcSKIGLGOyy49XX$5n6pRW6QnbIb+-1f$VeL7ZCgLcjiQPtt-cLvny49qRbgz5m$N6joeLGFKfbqzhyhMc8mBID3HwRVqRCNUKZngOjHqhxhxxU1GSJBVdLPO3Jovs$6zU2T5B-ap6cwz5SxbIKE4H9jD+K8R94zYuSagurpSL4SI0vGujkoaJKN$ZfPUCvbDTpbM-9qkg-LW5XNcJooHmxmFN-v0Yf6GoWjnSXxcr$5bOk0J0u5PVEBK+AqGORX452A6krPEEcGxsgm9q$xAhHG6u3qEvS4XF4dEk1gkKIA8GqihdQ29uXN$9LkrEF77EEPbamjF97Z8rKDQVCI4zUOyXWGv2vy7DZs0f5AWRp8Rdzg4SmZZJ+rID2g0QUXD$uj37J6UXQzqgnA6i-CnI6KCV6bmF+XSemc4ZWzkFHKARLeFCN11XznUg5k7H+61VJcBRksbDe$nn$yEzzXPuOMs+ZYodEH7BWMBbBGhYYefS4ZJ5KHCStR$Q+WEEzGoX90-2pS9mfFk7K-UEc$pnOqAQXoTVPs$hRsFTjeYKWfWjfF78Oz1YbW5wv5uj+WHohSfctdffVejCcuZbckQfFzyn8Yy+N6TQ-YYMpkxPeD7gxcIyzoYM51CUg49M$qEEb64DYsZNPhZrG9a9Lqxouc2Zo2jDd9rzEvt7ukhspb6$RtNOGyaKhdH$UBv0Ss8UmTnD3oO488iqZWt372C3Q9+sSmqH$uP4Ey5UmMMO7R0nEOvpB3SWN0oJeZ5fE2Q7eLvBt$gMEW+mDYIb81mDkhjDXDzYS55nzoprIsAfzGDUc$-EuhHEQQ3J6U4qi32N8ir$JXaOdQ+DfrUNSqNo0sW0ppK1I2Nyh7+91PUOQMRchfMVrvc6t3rVwPG$MGbVdLdy+40$8IhsfgLkz3jQvigpaPvWm36h$qnFD-y5uyTAVPw9cBTqaMbBY00JvRF6QXEWi1xak9+ppIoLW+ew5TJ4644BrFArdgz0u$abiWuFDks7I-dmGvNB-pOWwwSm-FhpEY8GoXPSo8PuUE4fSby6L9zuKFmGV7z3-z3C1GHg5LRWsHso4xEQZpn2HFbgd9a5YSZ1pnxRGwr8B8MB6C1AA-NRp+Dh3Jhu-Y6iRd8ZDRG$QPD9ObqqNCrni0RahOPDe4OFLFoP9skxyjpJcT215u5fBJU936Jon2ici$HiHUINx6saVhC-g78qSIBvhNQUKgwSxsYsF1M7XdYwO-LoHCaxnj5sMxtmT8gRjrp4AVoCt7PA$k1uJ$8URHdDgKGwcudH0YWe5gVtZBpFqK0+Kvg+Hq4I9XHM6eTENLEJEjTSKp12$GVshk29Q5S$kOp1TmqoEzGrjkwRxW0o+dY-KJ4uDXJiL20bQJYokA0zDDKudX9zo-OY-6CJwmiwMNrBYgcUv-q7LIUMSzzDKNBf1qPQkzRLI-Xo+7vCzGMv9S3xeGV7B212oTczker42OcJ5XmwfdSReqoTIM2mzgtFWF+1GB2ghpnsUM-EW2W0a3u1jD-GGA0YuyRp8YXYiDvrx4nvkTUIX-jn0M6gOmG1o29x5y4HzRZCj-d9oFRSpe-q4IS0ACgFmEifghxGEw2jvsZa57ay0U+YEnOWNvMc0ITdJaXbudAbWuYhrYur3T0hhr89A7yLqwkZy8b7AHEaFjRu8on+TBAJ2r90jxojkSPML1DweC+LEEVYGjIrnfLgBOM93RCU52MBBRDDcNxPJvfMRc9y55XxIL+I7kZdA6hj6eA5QRsWfOBj6xBFpyG-n0N91tea5im78xzpRDHaHQzvzkG-aZLx1+SmG9Vm$j4VEa$jJ8PW-bdPDYxfqJKqa7JfUD9w6ks9k+aAJcwDj3L2DokfIxYmGfNn0W1Q4zIEVXKbSvrvzaqjLREb33YfZ$zM$VxB+Zoxj3G50oD0TEYp3DXi61HqIEqR9pQQjFAIDxfhe+$ZfFPQAI6OSbn-3JUHcQANHVvjHCUUE6Umq+gXm$RKAc4-F4IsFtwQIpMes4-4Z1s1bnQxmvsbQKZppAncjTUXGBiWrOdfodn2hqPdH6Q-wa9z7eCO$r-32iMKc$CIC5TdCp9RibwtgWhaJv26V2cKnm+b4-xr$L-ZqWMhHAmgY+U6VLE4T-PEQsYpOXMi9wkT0FRXVcvP-oAvtDSeawgGH8aORO1y$SqtRU1Q2uAbmiYgi3E$hXqEq8u8swysY5FCvOLZ1qnc-46mgaSx8VaM0$1RkvwP+jJHe2g7aIeP$bXu54uXOa+voEqQLjSb25qin60iLmw$MS5BI6MySHGboSKDVLgcmI0fT4sx5yfWh1d+fOBADIQsnvnEr4OQJJef-j+cKN8Fns9r0E8+C5bFGAw0GEogo$RrsMkO69N3O1fMcLQyfQig3DxOR8fx-3fQQEJHzQjbqJZDhvs7V2d4-Lr5OKidnqFYzgZT+ohxe4EoOYJCQSVbDnJcph-IVTVqqi5RqJWnCRWhWS7uKBIIOOv$qvQXw$3jRLN7$qMBDfeKNbeGPjAT5wtD17idg7eUBVyIFxO8-a2Epp2QtC+bg5rQB6ebAEt9uZgeqvwJDc525aDe5KI+15$cNjCPUf1POnwq+1xim3nfVRmT5t31G1+gRuhBDOoNACXBA2TbWnuXFzvHPthxedSqH0YOiNRB37WNrVP4oC1HqBSAorkfkgCY$zbFG9TwOkRDUQ-tmN7a1BPfNBsV890gHZ12FkmLEZw9bz3MhqI6SCv8nuMxg2qByop9DbeWKyE3+RWCwTnOX6qs0Dc$5YK5rmSROSVhhxZ-8mSSUr+CVF1G0MT$07S2S$zWIm-t3Ze-DiQK4HaqDvIaBY2u99juNeGFst1CzFrSB00gr54bF0xdImzsme4RWi7-vU8$kqm7kt9HMQc9k4z8X8Yr75Jf8Njkq4DTCHL4b5UvqsOmBCbqPSIEvhSnqJc2h+H-ELS8fyqnWGbX3qLDsdt8WBKImvXXvEEOUwN2+Zqi992-P+pqDeu45zr788+uQwcbqdYW36rvMJbyGuhZxajGjbsARbLpH-2OFv4Npagy3gQ4hmXjup$THhu0Bw4X0Vsz2nWSgMksjHzGeEVJnPWrg05oevDkh3ZC6f3fu2X$RWDWCqiJ+ngscdzECpTaIzImCHg1h4ueM5xI1Wqv4XPqYh3WshWqp+xv4m69BYEFRitdsSsTLbdwqvCA+kUZ1jQKIqbYv7WWxa1w8MHsorr1xpIBmzX3FKMI84qXL9kkyw6axS0F+xHHI-0s-ixY1JW1mXEbLR3mIIf8fR3kUyVoXAhoYHPxWpMmf5f3yNb5QFMz5P5Kw-bao5G6-yDvBMRTKaHsoyPaa6$KF74Q2kspsXGb34L991XXjkQcUTVfmukeUQ1oVA0UnOLG7TuvEh-esYxdiQFGZwG9+Kp4KOcs0SsO8YwmmJqs3xVAK5YRRLZ$$Jpzu$Ci6isAtHr9kFthsktKQ-1WhOo5gg-+NJ+jD$CaqfSiRjiui-b+cIvX$zNgCGSP4Twwiz0P4d8rH1cRSx801S8iM1d-GvtY4LzqsD0qfLy4v3ZGPvId74g84C2YN6RD-$Dx8mpqI$JrpRtPmtnyBw4bjg6+5EFea3kc2pAN1RWz59Lavp-6h+w2k4$izV76pyyd1Gj$TYiYSAR6aYozL6Zexf7dmED-eKmFOHffjiRGqCcymd8CzE6B81NfNLDD6qLJ2RBaauIvrNBrseYF2XBubhg$KHwO0AOJ841nd3z8nQY2wuhHtgLgMN0Gm4nK7T09w$CpBY0Cxk$tFSAJK+qdQJM70zNgni0jxxS5A8p6RRnQA-61t1EJPhqEUgHM+qz7pek4WwftjrumCRzupUk-M2tk7vvU6owccBoe9cvNM4TSocU977ZFSnA7RJtrQeYT82eWG-1CKT6+avF9jXEcT5BjjRme5-GyZau012XChwhWRGuxPzcBUf8AkW1FD7kKq2fi-k$GgZMgT0v5tcHwgPH$kiKg0bv+S4nX24NE1qnkbULLgb1H8NVAd+VnEYAz0ZMqaKrfq46ht4OUckC$XHpVz0Tb$2hEdw3eKOB9DuL1j8o7rP7aUJKTVUjs66KJgSSQXZkFRyWQN3Mb9LSzfxNG-5GEfSjDiSSREOkaiTrdBJ$Wyo7baIQM76586BbkquoMcT$LAx0r5F3Mjw6JCs1Pb79PZ-C0EycdmpIGKogLzzh1cZ5ZhFDkHZGgxC8TVhPpeoMuJR3p4uh+IV6V8z10BTirjPp71jUsZuDvBRyBZ3seEWaKY6h7oHQMEqiRERb$m35PXpr3VBKe$1Ds7B8QIP3uVjQeNoyji9ZgegAY3Hyk2hCDMhaW9Wuuc$CkZSsHQMMkacSKU165gj-HqbhnHLhxk0dy4V856$MV$9XNgnKz$wCBAqfkiweW7Otydm91KnaC66jBf3z-IvDVP9X6N4gPb-ah+g04rpQB1ekaAAIO9fcRj4F3117M9WUeebe1Cfbbs+NGvr14WSJmc+Vdk3AyJabZDdHveDe9hdFkrm9jxzMbSg-cA2$LgPHEecgWn-qpddG4RgTdT8guibuIudObnD4CV14Nao+nOYuJv8MD+qnIvgpK2i17IsLIWyYhA9uSgZ$w28nEr$qE1d2xy2Nf0kLApOd9A6Euo3O4avQIX5m-LyT9-gh7gRSMpsUUUZZfW44v+LXyYG7EodtBa97TCoA3jd-okuLrutgvib4HMQSyb+8e6MnvVL8zPogMwnJTYUgX2etYvqWOQBxJZ86r3$Y8qiA+1BOAmyU3-iRsIEzZiLJGMhpLMHSMq2CFzoPMxO7Evf2pkY3eHH74hzf1$3pyU1LJuXAVrGL+AXwvEOV2N5QJ+iyEzEPQsS1kiT+F2w6wEKUVSHXBRrUJRxCFTyOGE7GP1IMh93mZdyCDeZD5fwjqd6um3bgP$b8d4e6fFoixZ5KiJ-SDttpOjsu84rPxdueM6uZ3FZYk-3t2osL70UxC$U9xBGy6fso2u7SFfLE1h7o13RotN8XLU78ndhBxINoaLbHZjxFkc973UGy+mL0X0tAqEHU9zkoZh$gkN96XgIq+WLKZ6XtFFitPBAUqf-YU6b-KDLtcLmMjFPLbmGdcWRjfw3tioMU9JETI74Yp3dZQZe4VHV-SXsVtVzcWzepfRdhubhIrtMa-h4BFC4X8+MBg8to$8xPL92aFczAJdLvmxP98Y$vA4VHQktNhkrv1tWrFCV9qX$8H22z3jnatE$+ic2u7iYKOAwtE6OccbXF5EFOrwTARtwdPCQqLHU0Gop+7LGmp-BJZL9dBfyNx899PBEERIbFdCJRBQQ9IKPJ9ZxW1GGWoN4z7MmAnv7KR3qAPLobc2rrnLt-XJhQ5kfneLe6pXNPN-BBHsmcZmB9fFfj7FTPc9fA4vGGtEU7LckXPWKRVZKBw$eGmh5eEqJ$hJRwHso2rkZOpcmP9dkosRN4TDyDMQFzA+IZo3RtL1JnELbI+EfiBS-AqLLZjMAau80tJ8JJTodrDMqgserupTdgdKI7Uo2$HBSA5Pqpiv1+cUK4J-yxfbW5OI-6cs5W+kD1Z64ywfhMyQn0T$h5P3I-U0WQ24mryVXqwWoWh3IMk-96kJdGDHQctBX$q$WL$LpcKjeHdFYB95t88V+YCU3h1zydmck88TB-U+O3i4fQ1D1$sR$H46rTuxRXCZ6zOv0e5H3O3oaLiKM4UCZmyJiu3o+OLtfIZNEoVC8m471eyeN2R0Lj++kB8iViQJvhw76wqJG3NyLfy2q1jeVW2nEwY5JAocM7nNqbRK8AVYxntapE6firKfyLgvP07Xjxoe1tdzftm7pMbkAiasVdQt1AHj5I99R3I3M4QDcYuZjef+JyUkvtTfj3Cp05iak$dF2dZODHGySggRpgQMRxtYdzCG16M3Ii$+f0vsiR3kcMIRefU1bTYh3hhz6thuDO97ZfYOVU4Y42aXJPe1MpHdKWHjImJJvscu$4$3zO9vV9uxRzXt$aZgeh3hdCzRq8QJhXprLiaKCIZUpkbFYm-N-c4SqygIC3U4HEWZyYWfYqSxKZx1gYs+xv3A3I526f+w4v1Yw+$jwVxUf$jL0hqN3JeksANDdget6Pe$YLXj1J4RAZEFU9Q1fQpKyjq$T9aNtFEHSwZtxtwTdkmCuFgZzcwB5nnSPPNbuYzUo4C72LgFnj-BqGQR3tDkI1EFv4i2CyCkID$R74JXq5grBTKVIKy4GRMcoUgqAHD+pkT3aeAD7BjV0hq5oVgBaZpkEWv$pEOK8zhYRZIphKFxgNDFrazu8Uf2KPvq25moB2PUkS-qEcgeVZpxv3zVXC7Qctb4EySkBxU65Kr2at$c5Sd2K0CZIt8duKjUaguAKw3RL$iuvispbtmcMQIXH-jo3avStuLGkoTBUpGgOQ+MCJXSqDnMn5+dibPFoomdT2+aPRHWvmgMOenRjMZMSSsNHaX3S6nRZ0jH4HUOJrPhX4gwKE+312Rymz57M4x0OMW5X-xPf6spKpHdqEiZw9DZ7zuIQL4wdvy+YWrU6v+P8uMZn6UAq2av7rqLFRW2meAZGxqi1jzghxF$7DGryKQs+8ZrPvz3iDcRI9nC0xTF$G5ZIvwUONEC$CP7UROYgE8DK01B+k46OKsjT+JX0zC9cMvvszv9bdNK2noKOpo4M6jtby71XCs7pHd3-fk-hS2LaCptuKBXX1e3hgLPjukwbYf4BxOA1xTHVsaCCqn9AhXCPN-go+GJcEKe9dCPTOB2g-QfARvPa+dK4-atgodCen3G4OLTFWhke0YBqAstt8reByE3eWfzMYF8QYOOhtPTMkr5-hw9Y5eWfanovx7DwTDnjgv0whJmEYIKaHrAmYnCaIPt772cPRICkt00PPY67WtX82sDqSTs-+xLbq5iWDqDOmxkgeJj24sgntabof-sZ6yI-pwOdYWqLNK3uEmw4E1+8iaV9OwE26E6N8jY$q$HaDByzXwkc1od7$qUwcCx-HRTbHUuAwbW3yH5Qjd44t6XfbDYbFNC1Iswv0YFUt8BCsgt8zOo+3H5cqAfF29xVb$w1S0WEQ4G8g9EEJFMWb6JhVcFpquXRsQ$As-DSriBAIBeTTYX0qENCXHezqhTI$0KkH81CczHnxXfFF$JKXQr8DV5bwa$sHyKBTzUQdd2$$iqLW+$D-y-zfBuT7HG8v23aRb60nNhYwyQh1mCNK9BpYCjun62Tgk3KEKKz8VcXgkt0cQhKAv7zigL5zdmPZWCgZBx7IZUIcVHpKhgFHeDLYY1Jbu1GBYJFBwpgh6O$VB5mrwUAh31yyL4MVS9cBmWz0LMS689OFTdb1$q5zpXdLZWAhLYycj9M1z3eRwm4TrquyGH+1k3Ik6MOzTnFcDtquSD8vWMksIGbicUuIgc7xD+rxqrfC1g+2tmoutVwpuoprIiRCSAPxUzf+Th7Tm9rNNC$6HDWpaSN7YwUv+KXCpUj3ZiJbeQtL7FvAiXCG7s4Ydd8EVXr7xwMZdiHeN720hSOZ+Rx+hFYJH6FoW+NaxqnVZTCY5O+WxpOcH2eD8gtyQW65stwuYLVo53XpZg7P5MUOK5TQUjAgxF0gYv9oFnK4vTZbmn14WHO5nPCKnb6wsNTKYHIsVWsfGU4Rwo8n995mAFDIZ9UOpknaROa2LBokZOIhSyw1KK1FqU-fsgyq8pbDbVD6KAQjUK0JGd3z4u9tcwY60SLzhed$bEj$FIketKizp4CNbd3aIG9nrgFYFMd9x9WLG7PUZyPAUmzLQe6IJPQmEyoHS3XPAngNehzW5Ztao6gdvaWvgoeYipiTob6-hTTLRuLt74OKv52WWAa2Y220KmoG5g+J+Z9ua$WLSW3PQyE5CdoNyEXmHPMWCWVZfv1wE3O-HdsBfpvS8gVdAi63XJoITLKXvb96W4LroTsgh4xwOFONKJpVKdffGeDK-vcL1aQyvQwYcvuvC8mLL6tQOWfo$oqT5JLp6u2HYrytYjEr$AFY8UY7fKFO-cOtWbrp4G+A296+nGk2d6vAAXyEQnEQ5D1DwYrvzdhC5PCYzPZPoDviRgcG0X0KgVrzGQSFL+wDS+riVQR0S81RWNLnuxp$4Gsust+LeqQFhUgpGOvwzaS1D6Vuq+zNF7qEiREOAWRC-n8sCo55bUozwIgGbdo7OfpIpAhuOV5Gv4LCnKrMPsZcahHsNIDU9znvJeUhsMciZZU9oMkdJPXymVTZSocAMfqmV3K2eGntA7053cbsHTO6EyIDzUmQTM+CTdOSVfVX2mCAaHDMjzBstsjSgIIrQYuqCXcS08+Hxo5oIizpC0aCcDn4D3-MCmfx7jdn95D74qR+Iu6yE26fc9P0j0v$eaRSjy1bnpTJ5VYNMEcNBHVaVSvk3mC2o6BufBJI$r$9XsGQSTUyWJNtzitJOwr4WBaexZL2-ctWnDM-CqBVpW5ZeE3FZUaTfQ+KGdodPDhOSac1R7EAGScDu-CQNryP-1m-YJpYy6UjKs$UCCO8PWJuxeTvsDpoDsJHDPu2xEwBkgsqIT0$-rhJawBguq9xPv$fVziRbLexygQT8$MNa$V7O0dXX07$CZ1Y+3MBiULiGmn$gqXMvmE$qQbipVjTPtvLD+9nSrTaBs29Htcvr7f+97vjDS8sQvn+n9w5m3p5ja5KVj1JXnmgdaA6vZHOXOLTL-VSwg57xZLSpHYTY9MWZAnqjbb9gVp0ZS5tQ2L3HZLVIVf53T9-6HNM-TNMKMotConxmRTJg4r7KMX70SmHDPpR2cY8TziqkmnkXvtKUn1m+uOvheeqpDp-NAfotwayK9HZfWAQVLQBCp3O7j7D2zckFC4t3Jq8QPEha1EcKU1uNDL48pHDRayioxLDCTEp3ID7ZhVXtkJLOnNNeDZUax$rJrhdQW9u3QRZkrfTq$fq9Q5muYuLRnRgSjA5QZ+Q37m3pQcZXWZiYZ7oMIFZ5uh$Nd01iJQLovf99tJs5AxNM0KgYJkTXV9+yoatoBqMZA5pI94R4n$JspMKwJBDG41PkYCgAnLs0oq7mShBm-YV3KJbDIUT-fnKJ+3OZvThc-q0i3iur8gegcDuuSxUFqXy33jNNSVGQV1SOFwXMUPji$j9ZkwA8wOUyCspBh4VH95yQ20wb2Ho4vBURISN7$w2buhbZn6sS2tNjaoCkWYmnfGKI+p1nPLGkoWMEkZQKrjdj5ATUsgoVjFKac3Vrk+v6VWMnOhJhBBy$26qIQjNjN54B$acYTcTtXNK0GfXq1LBzTWNbLBiMxaEc3ZmWgcDCFY0Y3XDGOkdP+92o0$L-AL9haLw5WzGcDEU46COuTyQsL+R2ImWhS1DsgsqqM6vG0gViiTi2Z6UXfU3duPSBT2SZcH+oe4-9FVT5c5UJKHoD0H6oaBqZ9K6Gk7Ojcjy0nfcRdjRWeE8GBBdSLK6wpD-k+CooTBH93ZT4zph2g$sdepzIoc5c-Lm4GB0TmGwaQ$W8VBSX5HHVHGeeC4MiDFd69$J07L90w6Y4XsTvbuNLyrkZSt$omEqxW13SPKsH2iKikaGZFkmKmXmIbsyFsHEUYLr0i12p4nF$ySx2h-TTYxgNxWJUPX+RmuIdIdk$frmZ2JRwpH8XLTxxjQTR$4PmXOv80qAFTcgYMCBE2LZZcUXf6c6wfSHgT8FMtM1RGVPH5nH4rG5BvXawGuaUDZ5DovMkEAVd69-jGRoEPKXptkB5OSq4ZADPH8wFwZcDh$18p7nSK9tkZTekaancOEvQrAZEPOh8nyeCL7hUQZc1XFSkA405NRo2h8tLM7tMCiuiYPjSE4JzjWJejNzkBruenHe+juHut3Ij00ScKkVzp22CNKOKuwBoD2+NHfTDqObGem6wWSIFAhk4EhO1zVfuEOQwJenyo+2SgIyjUHs+A5SFWY+LCkhtL4Ycd54sEIHAuR1P9Bn9GVYJEOI9dgo7B9DaDXsgUU-JjUWqMvBrVKBCfVTyULE0J6+uAokp3oGchFX4KOcY1Jp5MhtpvAfbtmXNEkaoxMsVjbabaXetwbDhN6coHfe6e8H5G0WgyqZNqseuQ5qxWvMDYxzpnfBiWTsyQvccpZqckt5Onp5QsAQ3ZIF5IaeN+dRmg$QgJwBS7KJrP5KokeJ5KJdXdEb4bEx9gMBtsbkSLIjrABiMV3nEhqmhJs0-gvhFNbHwh9BkBdWU0ZoCHhJ--+nIkI-QTLsEpfg4BOWPvostwo9++0pMTXz5cNI0SkXt0uMQeYIIgu7eISmn0DYqRfuIc3TF6tgUZNpmZ+yfVPc9zVCs4HpuT8TtNm0GJ-X2BJFVeBUw8xH-S62amVoF4n5fpF3Ux4xYxk6$XYL+zhJ3dRbZF2+Q5KRG9yTOLOVLZMzyYtm3VHut8kFf6XTb37zcU-J29bXuA9HUhEMhTV$exkNT$rx+Bb5bQfDDkQOIeUSRQZBsWYT$LxPP+JXmfhHQifb5WPQUIyXz1bTS29$HpRXoMw2uXm8E7I5c0BwQTUHkC$6DdAikPE7o$e--MxpnubkqC0bgzvNiMKWkFqowUnby52eh3CMtR6+3auo0I7tOCgD3SQg9d0vtUKEfHWN6yIgnowaq2rwImrQxfOOTwt8b4SMo4Uf5YBetTc1jess4FKXMMT7PJZCr-Q84w4uQTmXQiEnG59I1OegAzZ$tcaskYrZbMWXHPQUixt8pGzZBNkNY26YYfmt0jds9YuYcnBBLH2qCcOBcUKm9QL3GhiG0m5z$bK0kPr$xvw2thgbWYcWWsrq1ugI44W8cJLo4x$nC6yRf03zDwXEMAIcNOHhSCiXPBF$u71rw9M5KrHn21xGeUyJRDi0VvKRzbwMW$GpDb1ItAI4An$22hewCvDZKz4CTOcZga5WDbRdTtHeSAoIInjLH-a2Rbaf5Z5PSMC8MrA6$-i0h3qE1p3HG-aApJROTpNaOZBMJPRNZo2wF1nfmxQAdLE29uoQO+oJdutSuDWPaAtJvKCII1Cw4NY2$rVskhUz$vFSJkVnuwxcfWthTwagd7Hn0TMa7tHe+O597yHOh8FTt1FcmrmS+ES8DsYZu4ASvQInCzwji1ity+bj3A4+uu0KQ5n0souOoQo5JorI82AeBwPOuy2pvWkhyj69c+0VH50Fx4mBVnaRaSNtaxVXWjWgn1Pc9J7VLId0ROJphw0Js-twxpw-Yy1c2ZNVhAFv0HOaAuFQo1diFVUX6ZNB8yL40oj-X-urxHmDHPp66-r9ef32mxihPXPYoy8MZZhH3AFCEa8PMkzdBvHLV7FA388zpXCZ0g83xMktXzyQL2CcuPw9kYbOUp3B7UDHzRqxeFzhWFypXddUqpCmkdQRoq7yXgSQIKfN$z867fNDdkJEe5nmymsD64sKm5oM8aGSicYBvqJCqfKWRyxuwfanJgL80BJ2zg9020sOIuQnk+mAcccrNJ0nCFiifqPr47dMh-4BPDMYGnuwPVsr-y6IEOfqw$$jE2sm7TX6xi265K3YWKuRUXy9RPE0AX+1rm8IrCTo$LtdAUawc8ZdP7mRF1JJxZYrTBnMcncb5xT-NZQpnNZoQ83XhhJdjdE9786W9f$mqDkjUOKdLT7Os9nGiVgeX6aoNvZBAIWm4eP0+V5vSdEXMNh7gh7GQERJcf8qJQVio0LZWk-Gtp3wkDQoKnQ7GUnIiqz-BKwwGaNcqHFA25ygCNDIpZc4PyH8c-XvJW3DF2tMMC3f1fpyF+WW4beMknS36HovDD9HVgQNiSb2Z-A$Oer2$3AJjfWvdBoERh4kNaPAzxkoZwwGAMcaJQsYNbPFGOeEHrUMDr032onprPz3MgLiqixBKQxZbAK6JM$s+3Pe6-N1vrIHSyRXEPGbAbcPFn8qpC7yWYPaIEgzw9bhZWivQWihphOfJ1mDaj1ujsZpiUXnNCJioaX5q5reDnUJEvkg76cIgKq0O5pxxjeU8Y3pYadetDvpH+yU9ExXT+u+np+VhCpCGJ7OuTZNcSy90iUX2sLOVrY1RhCtMi$jUXuib1BWWiUtG52m$OmjhhGDj0PE9h92HeDz3aFPQgbCVaCZZhtbjmu0uv6vXyJsfUAO-9CvwnrC699rf2g32oi"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: CLWIZuCnPD3ZNtw1jq9PudlrQ1b9TcMk3qib34Y49j6CBt5QUJR+rjmmpymeQCkHmLvE6gXcPaaa71nXi59ETpk2qM4JPgBh+LNgOa9/GC4R1//DqQ2VHSnKDqO2VxCBuz1voCSvvL+fgPyqa3XW8u89/kAANdOF+LnxoygJOkCjMMx2bq1eCVxFnKG8i28H/mBZ55ZFrArXV2SxRlr7z2xJsU0l8xcEshk58sLLvLSrpiRr7W8DTYrOPqoJN84cFiSCkJAVzc1QynCopaRMqg==$ZyLUesnCzE3kz4IBa4z3+w==\r\nset-cookie: cf_clearance=KYuCME6CVEsgW7OhCkEvYcxNo1f_Zz3cswa3YuAJCls-1789326665-1.2.1.1-Oueox2HStASQjKjUemwayoSYCXuMGWnUrORmA7cqMvgyoAtEbjQaKWXuGsFfvtKkhmiMZo5LHZANew2ROFNbYkU9eYcVEJmASHdzdhz5XGbK1Nj5Tg.4DH6XrennVoRAv.KLlCo.sFn56EtBGS4dxsSpf_kNZHRb.RCJX_6Q6dN1Qh356dBdOUXCBZf2jliGfyUyQv5OllKRKtX.89eHQ7y8aSz7HauMeG.G8e0gVoGtZDNOABjy20FiFw_00pPs6bEnp5xnei.tW4FsttbBgbZ1HC8nh8RNrbMuwur9Jv2JmXS677JeTVDwYQSw6qd0qApEFaUav9g5ZtLRTB1wgad_aQDPlbHckk_4MRmg8PADUYumgS0QxxgskGtdny2wjxjlZgdtocnhRfckMvSC4TD1RJmh0AiGKTIy3oYdj_8; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=kancelaria-online.info; Expires=Mon, 13 Sep 2027 19:11:05 GMT\r\ntiming-allow-origin: https://kancelaria-online.info\r\ndate: Sun, 13 Sep 2026 19:11:05 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3a974aa2a4fdd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"KYuCME6CVEsgW7OhCkEvYcxNo1f_Zz3cswa3YuAJCls-1789326665-1.2.1.1-Oueox2HStASQjKjUemwayoSYCXuMGWnUrORmA7cqMvgyoAtEbjQaKWXuGsFfvtKkhmiMZo5LHZANew2ROFNbYkU9eYcVEJmASHdzdhz5XGbK1Nj5Tg.4DH6XrennVoRAv.KLlCo.sFn56EtBGS4dxsSpf_kNZHRb.RCJX_6Q6dN1Qh356dBdOUXCBZf2jliGfyUyQv5OllKRKtX.89eHQ7y8aSz7HauMeG.G8e0gVoGtZDNOABjy20FiFw_00pPs6bEnp5xnei.tW4FsttbBgbZ1HC8nh8RNrbMuwur9Jv2JmXS677JeTVDwYQSw6qd0qApEFaUav9g5ZtLRTB1wgad_aQDPlbHckk_4MRmg8PADUYumgS0QxxgskGtdny2wjxjlZgdtocnhRfckMvSC4TD1RJmh0AiGKTIy3oYdj_8","quoted":false,"path":"/","domain":"kancelaria-online.info","expires":"2027-09-13T19:11:05Z","raw_expires":"Mon, 13 Sep 2027 19:11:05 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=KYuCME6CVEsgW7OhCkEvYcxNo1f_Zz3cswa3YuAJCls-1789326665-1.2.1.1-Oueox2HStASQjKjUemwayoSYCXuMGWnUrORmA7cqMvgyoAtEbjQaKWXuGsFfvtKkhmiMZo5LHZANew2ROFNbYkU9eYcVEJmASHdzdhz5XGbK1Nj5Tg.4DH6XrennVoRAv.KLlCo.sFn56EtBGS4dxsSpf_kNZHRb.RCJX_6Q6dN1Qh356dBdOUXCBZf2jliGfyUyQv5OllKRKtX.89eHQ7y8aSz7HauMeG.G8e0gVoGtZDNOABjy20FiFw_00pPs6bEnp5xnei.tW4FsttbBgbZ1HC8nh8RNrbMuwur9Jv2JmXS677JeTVDwYQSw6qd0qApEFaUav9g5ZtLRTB1wgad_aQDPlbHckk_4MRmg8PADUYumgS0QxxgskGtdny2wjxjlZgdtocnhRfckMvSC4TD1RJmh0AiGKTIy3oYdj_8; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=kancelaria-online.info; Expires=Mon, 13 Sep 2027 19:11:05 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15904,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T19:10:58.521Z","timestamp":1789326658521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src  'self' https: 'unsafe-inline'; img-src    'self' https: data:; font-src   'self' https: data:; frame-ancestors 'self';\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=6e8e015975b996998c8a4783d719948e; path=/\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqEp3if8I684D23rHVFIsxMs561U3GsgKoRgUpfF%2BWqJWjO3irEnb4Y0psizUc8Ts3G3C%2FtcBu6JzgBw5NAne%2BIF310qs0KUMjHuSISLilfKVo72dcX86%2FAFavMLCWUrErbgjenA5BRO\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3a974956d542af8-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"6e8e015975b996998c8a4783d719948e","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=6e8e015975b996998c8a4783d719948e; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21153,"size_decoded":7938,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (946), with CRLF, LF line terminators","md5":"471c276d7a8157c88db658e3b1bf1715","sha1":"797f309365a0218cac14b50658cb21cbfad5e75e","sha256":"8dcda5bbf7e1d97fbeeea09b09bf57ce2b8952310915a11cb588e7b2f1cc6544","sha512":"33b77593855dd835196fea7429c01c184f1eb796d7c23a8dba1bc62e14a742ac4e69a2676f840991e0311ab2073e2cd6f71bfd9496d3704648551a7207968ff1","ssdeep":"384:bRfn3QJh/LHFaXQkJ7kln+hz7fJ0D4hh554ORdG/4DQ4bE4BR4yHGRPVjj2nx/j:Vv3QJh/rFa7klnKxMxPMx/j","tlshash":"9392c856f9c9662b42339197b7b2f34ce96b9433c6408a18b5be45376f70e820c13dda","first_seen":"2026-09-13T19:11:43.355177Z","last_seen":"2026-09-13T19:11:43.355177Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5753,"timings":{"blocked":-1,"dns":9,"connect":16,"send":0,"wait":2301,"receive":0,"ssl":3427},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-35PD099H98","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.729Z","timestamp":1789326664729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-35PD099H98 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nexpires: Sun, 13 Sep 2026 19:11:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 190896\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":580995,"size_decoded":191500,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"2345bffe34d669dcd7d2be00dc8706a8","sha1":"33ac7cdecf37966e2029e008c8a2f7984440f27c","sha256":"9f162fc3ca6724bab1060cbbdc73e6604e2931ab7582ef31a030fbc134fae580","sha512":"be0185ba67861c20e861e3d833b9dbd61d14f2335131a4b8e5ef358abf8ba7654f70c7030b81e4dd69029d9e5f7d8f5589f3787b1114ade39645989a26c0af1a","ssdeep":"6144:tamf1L6SSxQhmgyyE3RdJl580ucTPbNELR3/jupWS3P+NJ3geZ:YY0yAy6PnpJP+Jv","tlshash":"3ac41ace73c674229796f078903f01cb697b29a2b49cc89af18adce02d3455a5167f78","first_seen":"2026-09-13T19:11:43.375256Z","last_seen":"2026-09-13T19:11:43.375256Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":42,"receive":61,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/breakpoints.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.746Z","timestamp":1789326664746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/breakpoints.min.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PMJf93OSX5PzdtWOYAfx75XFruo%2FmQbluhkypVRMBrKrppILOR1KRn4v69wo88h%2Fcv6XNH5fYimP9F89hUfJbwfyR%2FIkanfh%2Fjf9azMrurGTa%2F1BgMEDatntibZuZoUk1hSBxMpMoHn\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1205\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6b93cdd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2439,"size_decoded":1584,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2387), with CRLF, LF line terminators","md5":"81a479eb099e3b187613943b085923b8","sha1":"bab199b97edb25ed1b07410c6188ff52ea95f5a2","sha256":"309febcd6d6e0cf092201532215f03a6a9f30b30f26203272a4861d704e7cd52","sha512":"52181cf048ff13059f4e98b10f36105480fed40eedb26d95e2c9e1d56210823ad211216c4415b5bf3b108ac9d4bc79475b26f2e9d955aaff9466da4062702fa8","ssdeep":"","tlshash":"b541bfaf6e4f6d5c14b1d6e7623f716e00b5f966b60a2ce240c2ea806b107c554bafc1","first_seen":"2023-03-07T13:19:05Z","last_seen":"2026-09-19T03:01:05.458534Z","times_seen":631,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/bg.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.033Z","timestamp":1789326665033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/bg.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/assets/css/main.css\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:09 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:47 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding,User-Agent\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgBjvYN6BmcYAzFNocS8BC4gpUGydtkbjz9kjJjtLuLkJodNIZQ6SCDOmL%2FqLeHdRPLc%2BnKjAEIT%2FcLuyd67bK73AW1fn43rghommHuBMzKtRLeXnACB4XGqyqLNB%2F%2BwqhQ42eM9qNfI\"}]}\r\ncf-ray: a3a974a889d4dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36966\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36966,"size_decoded":37677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f683639e5168602d1feb668056769b68","sha1":"0590a10587bb64d0655f38fc3bda752141f4c07f","sha256":"0128f0d2a643e08d649dda3f441348f6dbefdc78a1b153537c283b9b8c2a624f","sha512":"d30048c776fc445d161f8848a0e6ce0d066914ac5ecb7810eb6e5c436846e227540bed0c2dcce3adb6bd9c345137564379b74d81a6d398a2d0ecdfcece07870b","ssdeep":"768:F6nQIcWrJxwgPUiezTR3cHSxZCAlqAH5Y3O0KlNOKVasH8E:QQIbAeez1CiZC5Ayw8sH8E","tlshash":"35f2f211874affa9ea287d771f3f0b6b510b9c4a94b5e7423d32f252d49a51ce310826","first_seen":"2026-01-31T10:28:16.387999Z","last_seen":"2026-09-13T19:11:43.380907Z","times_seen":12,"resource_available":false,"data":null}},"time_used":20578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4346,"receive":16232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5539HJ6T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.947Z","timestamp":1789326664947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-5539HJ6T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nexpires: Sun, 13 Sep 2026 19:11:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 13 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 117361\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331904,"size_decoded":117991,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4875)","md5":"efc21b679262c7e0029540a4d8c02d7c","sha1":"bc93969a7a8bd50de5a82006d5d8c85bdcaa38b7","sha256":"6beac64912afce64965e9ecc95cd76361cf08756e95cc8b2f7c77ee335805acc","sha512":"2f995b5c5fcad0375c5a75a27230165599ab7160ee433360c849d6bd6881d4a954efb784f3a5c19b2d047404ffa9f1a9fd025e692aa15287e121ea36683c087d","ssdeep":"6144:Ydf1L6SbQWm6qy/vd80ucTPbNELR3/jHdQ8Z:YXaXyidV","tlshash":"4864f8ccb3d6b42283a3b574903f014bb23a7991b84cc854f286e9d42d7466a9277f7d","first_seen":"2026-09-13T19:11:43.381745Z","last_seen":"2026-09-13T19:11:43.381745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/merriweather/v33/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqqJ-mXrVGjziE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.016Z","timestamp":1789326665016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/merriweather/v33/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqqJ-mXrVGjziE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kancelaria-online.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 97776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 12:37:28 GMT\r\nexpires: Fri, 10 Sep 2027 12:37:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 29 Aug 2025 16:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 282817\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97776,"size_decoded":98589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 97776, version 1.0","md5":"e6c9a38367c7a204d3cc630e657c5f98","sha1":"f04e08b1d0f67f8a0e91a0695317caa49af1ab66","sha256":"a851aa2bdd01adc4d11d1982670db59caf5dd13efb42d58e83191e61b532aaa8","sha512":"9bd74b8b284052287106ac620ddcb8cb321ed3312f4e6a8dd6e9525737e0e3623476ddd996687454e2fbf4516f01a387f4d1f36c8b7e38e02200eb8be1ce2b86","ssdeep":"1536:V4y4wSy1BJR19N0AqeZkiM3QrwFQilbZO/G0qhBlF3jlN6Jpf+mHIR:l4VyjJRzN0peZkiyQ0vl9jlhj37mH+","tlshash":"d0a312dfae25e789fb890ce93e7625ca050fd18cf546ce899e3c48a91fd1905d833245","first_seen":"2025-03-05T20:22:14.554251Z","last_seen":"2026-09-20T16:52:46.527996Z","times_seen":20727,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/merriweather/v33/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqkJ-mXrVGjziHTFw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.017Z","timestamp":1789326665017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/merriweather/v33/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqkJ-mXrVGjziHTFw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kancelaria-online.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 74808\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 13:00:43 GMT\r\nexpires: Fri, 10 Sep 2027 13:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 29 Aug 2025 16:10:59 GMT\r\ncontent-type: font/woff2\r\nage: 281422\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74808,"size_decoded":75621,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74808, version 1.0","md5":"d6ebf000e0f7e9e4e307bcb942042e28","sha1":"e67640e06b6b882d5ae0b0f55a0747c06756efa1","sha256":"f88c172a378829620e313b6128469f9a240540086144e8d8217897b81a328beb","sha512":"81e4f116c937662f41815d5b3f2902c1b71d0218b0a7a49ea5084fa22ffe32b5e733228f4b818051b1e41bd4b429e880de202bd3dc26a30afbba20e2a09c56b1","ssdeep":"1536:1K7/HyTO2n4kTKZYg4CWv7Cg4XjmrPSiCMCxH0DFo25oHgXhmKTh4nf:g7fn2n4aYWv7Cg1G/xUD95sOmShgf","tlshash":"c673027331c722b743e6f5baab32b0841d594624348f09a452bdda6e1f8732f963315d","first_seen":"2025-03-08T21:37:18.613409Z","last_seen":"2026-09-20T16:52:46.538936Z","times_seen":728,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":12,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/webfonts/fa-solid-900.woff2","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.019Z","timestamp":1789326665019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/assets/css/fontawesome-all.min.css\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:05 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:49:02 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQ4dBb5oKjAntCkUGFZK61e3FKr7Rdmt5dJHnKs40EVcxlMo6MpCWHCW7bHpwRN9lETMvryPVUDh%2ByKKfvgSDAPt8L5YZu5D%2BLtk6HnN1TRo65qsaQKfn76%2Bl40eZHxiN433r5%2B9NrsI\"}]}\r\ncontent-type: font/woff2\r\nage: 1167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a869cddd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78268,"size_decoded":78990,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-20T17:17:23.862305Z","times_seen":59585,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwmRduz8A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.022Z","timestamp":1789326665022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwmRduz8A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kancelaria-online.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22124\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:20:13 GMT\r\nexpires: Fri, 10 Sep 2027 10:20:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:48 GMT\r\ncontent-type: font/woff2\r\nage: 291052\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22124,"size_decoded":22937,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22124, version 1.0","md5":"49c12ada931f2217a799c1ed4d2430df","sha1":"5ba6da8a818a622d315ea25687585aa2e694a533","sha256":"05c26abcc0f7b38e8cd0ed66b1e99e63c1fc5da32859fac2335044375a5ac00b","sha512":"981d133f5a3d4891d98832efd07a13336b528b4966d7ab7ca494ea89615804334cc36e5a8ecc9d2cfa3d5dbc6e986c91d89515d0ba23d17c28718a0f9f5b6fa0","ssdeep":"384:wGMq/XprCx24WPTp1Dmlkp8IlLc+biAL4fqn61ZiJY5lQefQCkJdUIWI2xogYDU:/ZrCU7p1M+bicaS6ui5lXk0pxoDU","tlshash":"8fa2e1bdbd346c2e485070e7e16ca49be8930762c35709f9f8fd31251c5b681e92989f","first_seen":"2025-09-30T03:27:48.941162Z","last_seen":"2026-09-13T19:11:43.395332Z","times_seen":99,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.732Z","timestamp":1789326664732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 15 Sep 2026 19:11:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKFlHtkVYFQbVU9DCefjDVv%2BBg9i61hKRG0LYS6Z9OyR8YnGYczG6PxZWrTzHFvJ9qBiMf%2BTgQczy%2FDmpsn2N0m6OGvEWbSm7J8Itwj6OpzD1%2F1cZ0cgJuReXn6a3Tz8mSojIX9aunaP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\ncf-ray: a3a974a69934dd0e-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T16:44:42.838647Z","times_seen":436784,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/prawnicy.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.765Z","timestamp":1789326664765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/prawnicy.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:48 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6%2FacHg%2BHhih5qXJ0zHevKujn9ZaZO15kAjHpm273Ugg2ENqLnaJ2A3giGEqLtRYVA5%2BOBoEI2TA5LgjLLImlgqHsrJ1amaUsrm7xDNhGVtbUbu6AB2kzSoSeHY5KemESl4g%2FzYcycbQ\"}]}\r\ncontent-type: image/webp\r\nage: 1206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a6d946dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16206,"size_decoded":16925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc420420073496e4ac0767bca1224ce4","sha1":"c2cb5fa6df426a51cf9663b17ff6256d50f70246","sha256":"0f13612b4e2b02848cfa60effbd4efd2f42387f3c862f12a0b13b87d4ff1aeb2","sha512":"e44119ffd6214d57b3d7c3078e003ce8d8b23e79f0219a9009e691cde95b6a7013510cfaff866720daabb1b6561e9b7e5d421c74f8ce166fcf1e8ebb2f34200c","ssdeep":"384:rR036QDMLMgxsz2tSuT8qaPieG98yybnSEAN4i:rf/4gxdt/nrJ9Z2q","tlshash":"db72ae59fa421e91c7dc6b3420fbd6a3573793c8e283d0867c8c88023f715b89d99ac6","first_seen":"2026-07-14T07:01:45.772192Z","last_seen":"2026-09-13T19:11:43.399514Z","times_seen":9,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.173Z","timestamp":1789326665173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js? HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 13 Sep 2026 19:11:05 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3a974a95a23dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21243,"size_decoded":10187,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21243), with no line terminators","md5":"6d0b50c96f2c2cd327482388ab7a9978","sha1":"95c6612e8135ea7cc6b67c701dc10e1100170aae","sha256":"51586fdad501b39b86c7fa9ccfb016bb90a438e65ecc972f8a48fd9898771007","sha512":"f0149c0fec7dcd97d44a6119e3293798e7432cff3574fba3c0f1ecf43a7f245fdb40480e70a4020181b0b772107becf38a348c918cfd80c5556c854455b68d87","ssdeep":"384:695s9p4w5QIRRjV1q1v52dp/xK7NFJv7l7Mb1j9GLjmNH4KQ:695s9pL51xVus//xK5z+b1jna","tlshash":"5292719bb4e6f49c932a2075042734dea26ebd84205c1a58c510f5ffbdb63598237ecc","first_seen":"2026-09-13T19:08:00.927145Z","last_seen":"2026-09-13T19:11:43.401572Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-35PD099H98\u0026cid=1474672132.1789326665\u0026gtm=45je69a0h2v9220527782za200zd9220527782\u0026rcb=8\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153~120474863\u0026z=1813833097","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.217Z","timestamp":1789326665217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:49 GMT","end":"Mon, 02 Nov 2026 08:40:48 GMT"},"fingerprint":{"sha1":"AC:46:A3:8B:39:87:22:F5:32:ED:16:91:E0:7E:28:F9:39:7F:D5:13","sha256":"A4:B2:FB:D3:1E:80:B3:DC:DB:0F:63:1F:D1:60:FE:3F:E6:F8:61:9E:91:4E:FF:2E:A6:1E:2D:71:C9:D0:1F:75"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-35PD099H98\u0026cid=1474672132.1789326665\u0026gtm=45je69a0h2v9220527782za200zd9220527782\u0026rcb=8\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153~120474863\u0026z=1813833097 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 13 Sep 2026 19:11:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-20T16:43:34.613503Z","times_seen":1071990,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/css/main.css","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.727Z","timestamp":1789326664727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:38:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLjBoHyO1gCD3xfeO8Gbcu8Xa0VZfZSZOe1tPWAEnmazWw82AGZYk17uDtTNE7rgQlVk1sdkb7Xi8CjZMYKVNckQhCu3QAKT8igREGEnYOojFDohDvT1EJCEhb6RqPc9hJfJ9yOJSkRI\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 1206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a69932dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84146,"size_decoded":13598,"mime_type":"text/css","magic":"ASCII text, with very long lines (514), with CRLF, LF line terminators","md5":"ad25be188599a00c8fe957c094d50668","sha1":"f7def9013aaead91bec6e9095756ab049477bc1b","sha256":"3ab699e12aa75f71aeb0d11a5faf60c4ff8ecd5d5c599bf53c53ff936a98fdab","sha512":"9f849bd3946e260df1cc333e9298300a5a5d2fb0baeac3a5749e02c870dd6d67e0596fd0112baa53a27e3bd0909d3bcecd58078b6cb2b65f08af377ef9200ea2","ssdeep":"768:PWI8Bo1StbnLoIoD6xgZnjZZw89ElGN1jZPwwPmJ0BjjZ2oUV8Zy5ZjZyAoPOFgQ:PaHRPT","tlshash":"5083fe94af0d0149870a50546eba72e5863cd4318e528dfffc1bab75eacc60c076ebb5","first_seen":"2026-01-31T10:28:16.371364Z","last_seen":"2026-09-13T19:11:43.403546Z","times_seen":13,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/porady.webp","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.759Z","timestamp":1789326664759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/porady.webp HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 08:34:48 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OSJ5W28NiipApBoKYsXqkmvDYhzIujnS8zCKiAZLS37chbNXAu0DzylW%2FTMMX6TCBYZyjmQrfc90XRrglPWcVn0MXpA1HYn6H0DZ%2Fb1NZlMlVjBePctw3RS1OYzk6cra00qIxd7lJcF\"}]}\r\ncontent-type: image/webp\r\nage: 1207\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a974a6c941dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17780,"size_decoded":18495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65757d615577b6e50aa7e78b72c20dd7","sha1":"bb3c7c1d55c29a001de47de05c75959574066c71","sha256":"ea9c96b8a80154085847b477a13f7e35f9d1b436ee49b3500d0d3589e357b9b1","sha512":"f7508bfa4a13182449f5d30b071f919ba071d4aa4278dbcb9b9d616a9a4d6a5e72604207d2392139d2dcbf0133293254545251dc72224510be4f139663b9b1a3","ssdeep":"192:smCChKRKT9jIiJVbo5NKXG42q2YpEoX0/eYPu94OPrFjgvkB+8IrkneE8V4i:EZRKT9JAKXGmp70GYG9BAaneE8V4i","tlshash":"b282af19f5a21d216ec964f860fdd792d6330bc85b83c158bc9dc99a7fa22e08c49dd3","first_seen":"2026-07-14T07:01:45.764562Z","last_seen":"2026-09-13T19:11:43.404883Z","times_seen":8,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.014Z","timestamp":1789326665014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kancelaria-online.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 13:03:49 GMT\r\nexpires: Fri, 10 Sep 2027 13:03:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:48 GMT\r\ncontent-type: font/woff2\r\nage: 281236\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14204,"size_decoded":15017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14204, version 1.0","md5":"a44fe95a332db9fee477ead82225127c","sha1":"e00f10d9174c32686c5cb27c6ddb9214c6365323","sha256":"01f626ea1f2510f33efbd895b41049a10d2ddfbf2737b5400721ed310cf071a3","sha512":"62e39ad91a98ab2c7ba8da0bad6d502118f98766fa0b6e164263f6dc1acff06a8042efebb6ed846e953d7ff999ccc67e234edcbac5dbfc6139e385dfcebc4025","ssdeep":"384:+w7oj2S+ALeakzpJZ8fvaPNn2xBAvJJhTRW6TCFIYZ:V7oj2S0awJZ8f+2AvrW9","tlshash":"fa52bfa2771bc861cd12f69e0dce367ede9f35897900a333bc495e47b49489904460e7","first_seen":"2025-09-11T20:37:14.08517Z","last_seen":"2026-09-20T14:26:46.148684Z","times_seen":3452,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":12,"connect":25,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/webfonts/fa-brands-400.woff2","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.021Z","timestamp":1789326665021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/assets/css/fontawesome-all.min.css\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:14 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:58 GMT\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwaHuSUbQRrLxYuI9n8QWCsOwrvDphRRDZRZhqiXmjrDtUpKzNP%2FNU4nOfQ6axgKVOP4E%2Fcy1XpM%2FYBP1yjuG0SHkzJ9B04S0nJnqlm4VJof3VdkMmM%2Bnf8QGG5mmw%2Fn9g0NL7jkjqAs\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncontent-type: font/woff2\r\ncf-ray: a3a974a869cedd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/images/asystent.svg","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:05.538Z","timestamp":1789326665538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /images/asystent.svg HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e; _ga_35PD099H98=GS2.1.s1789326665$o1$g0$t1789326665$j60$l0$h0; _ga=GA1.1.1474672132.1789326665; cf_clearance=KYuCME6CVEsgW7OhCkEvYcxNo1f_Zz3cswa3YuAJCls-1789326665-1.2.1.1-Oueox2HStASQjKjUemwayoSYCXuMGWnUrORmA7cqMvgyoAtEbjQaKWXuGsFfvtKkhmiMZo5LHZANew2ROFNbYkU9eYcVEJmASHdzdhz5XGbK1Nj5Tg.4DH6XrennVoRAv.KLlCo.sFn56EtBGS4dxsSpf_kNZHRb.RCJX_6Q6dN1Qh356dBdOUXCBZf2jliGfyUyQv5OllKRKtX.89eHQ7y8aSz7HauMeG.G8e0gVoGtZDNOABjy20FiFw_00pPs6bEnp5xnei.tW4FsttbBgbZ1HC8nh8RNrbMuwur9Jv2JmXS677JeTVDwYQSw6qd0qApEFaUav9g5ZtLRTB1wgad_aQDPlbHckk_4MRmg8PADUYumgS0QxxgskGtdny2wjxjlZgdtocnhRfckMvSC4TD1RJmh0AiGKTIy3oYdj_8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:05 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 19:09:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDmSmdc%2FfbkG2kMpvXBKGd3%2Fy2lxNsTvWg1Lwe%2F90A3eYnnNxc4R8%2F%2FKQeHeOBzi0d%2BaDZOc0db8v2wVX2MwsVOytvjHUt4pKoOGZkvbfRMDWlbjVXM%2FsRoUN6dBs4DnEHEM0IhuSvYa\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nage: 1201\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974abaae4dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":658,"size_decoded":1125,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"265f0dc6f1b18802e3b7476d10d30cd6","sha1":"1950696579706a6674cb8edba90be62f7a0771ef","sha256":"885d1ac7319e796282871bc251c281f20283f135a9225fec2e11882f9e91a2b9","sha512":"50db6d506e9c482f3853d22a1cdde9ce4c859dccedce1a04af2e8ebd1f7cce01bd875b3a6884bbb24ba9eadd81de80bbdbcb602273c6e55d203332a71fb75a98","ssdeep":"","tlshash":"db01945e420545fd1f0887912c04b0a8251efcfd7a941b79e41a425352a17dea0d6ae9","first_seen":"2026-07-14T07:01:45.774255Z","last_seen":"2026-09-13T19:11:43.406896Z","times_seen":9,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/js/util.js","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.748Z","timestamp":1789326664748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/js/util.js HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kancelaria-online.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ur%2F043Q81y%2BMrEMnJdb6BMK6cMqD%2FoD0lhi8%2BaYyApaqxSVuKr3P6omO449qSo5KP4EevLJ6T0uAy1X2doMur553DXuUjZQNO9MEjKQLy78PT%2F%2Bo93zsqMA%2BfjcpHXuWGKU%2FWv6HPes\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript\r\nage: 1206\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a6b93ddd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12433,"size_decoded":4246,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fd2716a7b68ce7748c9676787b61db43","sha1":"e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954","sha256":"c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00","sha512":"5b3750e70a8dc0745def9105669b96ae70affbbcf89478c755a8078e3354dce1258968cd55fa9dc9f7ea5ee57c1aef97f7dc675f1c266b879f25f6786d85e129","ssdeep":"384:8uuVLI9hkwbZo57c1VAcggOy3kDA8XiVD8bD:8LVLI9hkwbm9CVADgOy3kDA8XiVD8bD","tlshash":"2d4273d6b39f58df4d36325ac27ba448b23fcaf2410a1352f8a1ddbc706090d46354ae","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-09-19T03:01:05.426576Z","times_seen":1915,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kancelaria-online.info/assets/css/fontawesome-all.min.css","fqdn":"kancelaria-online.info","domain":"kancelaria-online.info","tld":"info"},"ip":{"addr":"104.21.83.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.816Z","timestamp":1789326664816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kancelaria-online.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 22:53:50 GMT","end":"Thu, 03 Dec 2026 23:52:24 GMT"},"fingerprint":{"sha1":"FB:95:25:B7:39:C4:6E:DF:74:9E:DF:A6:68:7B:8F:E2:C9:CE:FF:48","sha256":"E5:0C:B8:AF:A0:0E:9D:1D:D2:FB:B7:DD:84:B8:57:BC:3A:69:1E:71:67:A9:CF:97:04:B3:C2:5F:DF:68:CC:6F"}}},"request":{"raw":"GET /assets/css/fontawesome-all.min.css HTTP/1.1\r\nHost: kancelaria-online.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/assets/css/main.css\r\nCookie: PHPSESSID=6e8e015975b996998c8a4783d719948e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Jun 2025 13:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aE40Q0tZWRhHl1hsPTpfIjE2Vi9Y984uuSrcqyw00mQ0%2FGqIpSkRxgFzJmtLu4IfTMegX%2BinjU0w9u2P4cObchv1H8%2BjA9TCsQY7qp40b%2BUcVMN%2Fmn6nYMZKppLeKC8wlGsWikI8lay6\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 1179\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3a974a72965dd0e-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59401,"size_decoded":14379,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"1d4a5860bcbe24db028f661a8fc0ab67","sha1":"aff81bda37e7369a013f157ec2ced16927eb83cb","sha256":"24926431fdf5baff0c1929f104152a0726dedf19181876f04cfbc78c98ee318f","sha512":"49ce7be4001b3e7e7c5ba80256baf61cdfa4aaeb0ef6dd37a30e17cee406f86197bc3819d977bc584bc5927d2f2a418be624de4af51b1008b8dbf9acaf46e953","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"b643fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-08T10:34:54Z","last_seen":"2026-09-13T19:11:43.410096Z","times_seen":406,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kancelaria-online.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kancelaria-online.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Merriweather:300,700,300italic,700italic|Source+Sans+Pro:900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kancelaria-online.info/","date":"2026-09-13T19:11:04.819Z","timestamp":1789326664819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Merriweather:300,700,300italic,700italic|Source+Sans+Pro:900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kancelaria-online.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 19:11:04 GMT\r\ndate: Sun, 13 Sep 2026 19:11:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11009,"size_decoded":1627,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"edd734e747377a9e8404adf9c668c7aa","sha1":"c999a11132049853ed7cdc60a1c0c54f9fe77225","sha256":"e0a9f203a5d35ba5df6bee85177e452d9dfdc4c331768e53e31f9af7676e153b","sha512":"7b254f8ea07ed57fde140db7f0fb522a769fe788b647cb8d7f79d7b17d6e1f83402c3349b128bf960c07c1ccdf37e5796e5b2b06242bc8618e3f6397663394ac","ssdeep":"192:UlCElhxlUl1WlnhCEhhxhUh1WhydH3d/gdZ6dbVdLdHDd/0dZWdbRdbxjCjo3KcL:UAEXxWyt8Ebx6+wR+01a+r7","tlshash":"61321fb1002b9808a7875dd533df3e329e4e6579a044e175affd18ac6caac360365b4d","first_seen":"2025-09-17T15:28:00.436834Z","last_seen":"2026-09-19T03:01:05.464757Z","times_seen":51,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}