{"report_id":"94776ca5-f691-4530-9fc9-b79ccbc75320","version":6,"status":"done","tags":["australia","government","phishing"],"date":"2025-10-20T22:18:05Z","url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/index.html","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":0,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/index.html","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"title":"Sign in with myGov - myGov"},"submit":{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/index.html","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":0,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-24T22:18:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com/dejmkut/index.html","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]},"summary":[{"fqdn":"flordelamazonas.com","ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"domain_registered":"2024-02-04","domain_rank":0,"first_seen":"2025-10-20T13:39:25.099869Z","last_seen":"2025-10-20T13:39:25.099869Z","alert_count":26,"request_count":7,"received_data":331166,"sent_data":3411,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":34392,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":3,"received_data":122889,"sent_data":1662,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/index.html","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-20T22:17:42.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/index.html HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 17 Jul 2025 12:56:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1289\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4388,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"2da7cd0ac72b97badc5eb89c09c317d2","sha1":"c4cbd206bd55f491a6b92110493bee638650ab13","sha256":"098322ca38101d395dfd1de6e787e6f4658dde1b9e9ec74fb43cc1692b20571e","sha512":"35e9d53797250ba432232163ee3edf9f08a2cd1a9e8852044f256156f7bb598a2ff20dd9385b225cb18a65fed7aba64442b5f4b1a0c4bc414216fe589fddf0b4","ssdeep":"96:XSfKNPDr0URgREfWh8RsfNeArvmDeJKnP:iiNbr0URgOWh8RsfNelDeJWP","tlshash":"b6912f3520c8682b212342d7a3b22758fadbc532cb626615f4fc63fb5ff6d419917225","first_seen":"2025-06-01T12:23:01.030797Z","last_seen":"2025-11-24T00:39:12.911179Z","times_seen":24,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":311,"dns":25,"connect":138,"send":0,"wait":140,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com/dejmkut/index.html","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css?family=Montserrat:200,400,700|Roboto:300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Oct 2025 22:17:43 GMT\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33706,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9bf8d02f18daaece233f120f86846c9","sha1":"8b7679e9ed31f1625da25be7bddd2bbfd8f96560","sha256":"2c1272baa0c26ccd0e6a821a4824732e873ad60f3b942ca8180a641940c31f8a","sha512":"eca89ff3e8440b2eb1e19ce66e3d3f660ab95e11929ac5274817d73b8b60543ff06f7061885fa878ff55c6062bf1db0f6392c731599a2ff341ad0f65f9af6455","ssdeep":"768:Qc70afUQRptmJKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVNJBe9m4fGQvXrR:lBia0p","tlshash":"8de21ca1041744009b835cd223cebf35fe4e92217151c0b9abfdab6beddbc66426936d","first_seen":"2025-09-15T00:37:28.865087Z","last_seen":"2025-11-12T21:57:54.178147Z","times_seen":19,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":129,"dns":1,"connect":28,"send":0,"wait":56,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/css/mgv2-application.css","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/css/mgv2-application.css HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/dejmkut/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Oct 2025 22:17:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Jul 2025 12:56:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19689\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59825)","md5":"ff76c80e5ee6b2dac5b2c1f6d81a7db1","sha1":"51a288c36145212e75fd2d5af5bee813443a5204","sha256":"f820184b143520527fa900eb1d53900501f71106be05c653f6c2b81534f3801f","sha512":"c4c3ac0e8c927183e6b6e38a6a78188c43f72519fb4e1108139596502022e87d6579513cc8c77ab5921693ff665ca71762e15f3f58235fe7aca3bf881f321a08","ssdeep":"768:cbSe1xHfSkG31VGIOX5mSXpYeOTCsg9mFTYiLT1aCGjbrqp80zhoq+b4vuwCxmw2:Id1xoZOJmSiTNjGjbrqp80zs4dwMxFvj","tlshash":"d7c3f9a28db0322da597c52df8d2978c3738a121d2428fbafc1561e9c7ce2d4193775d","first_seen":"2023-04-06T07:42:53Z","last_seen":"2026-08-06T22:54:05.434074Z","times_seen":291,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/images/myGov-cobranded-logo-white.svg","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/images/myGov-cobranded-logo-white.svg HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/dejmkut/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Oct 2025 22:17:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 17 Jul 2025 12:56:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20325\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de646b2f77f5fa27d55a01bbb9cf584e","sha1":"33316eb871adf6e08af7c780eb15872549d08dc3","sha256":"10b11a7c97b90bcf7ad520ac94c5769d08540ce1ee3b84d487c587bf128e3388","sha512":"e9045ed1fc7c7820e37a6ae88fadb685a79a5d162676fa81360081824bb4ef63dae66ae0d62337d81668eb83998b26ee6404faf0fb299c03cc52e505ad027354","ssdeep":"768:bOLsHDCJYU28s5MBiVkYR1utxxmLhtzP4GWWT5m/tW0BhRL26WGiGy5ZGrr:bT+Jo8sifYRIaWgKVl29GiGuZU","tlshash":"9e532f7a5308877b45c3cb84dbda64c9325dd1c3f2faa0c8dba3158b5d128bb95bca11","first_seen":"2023-05-05T04:27:34Z","last_seen":"2026-08-06T22:54:05.431434Z","times_seen":2457,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/favicon-16x16.png","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/favicon-16x16.png HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/dejmkut/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Oct 2025 22:17:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Jul 2025 12:56:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 238\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"734603b796e313e6b30c5314cfff7a0d","sha1":"9ef8bcab45a447a173ba98d4e8af6114c30a1aca","sha256":"5e70f30259d620e25efa88586a8871d5c94113f0b0d7d6f3e817f585891bf154","sha512":"747a27c58f5395436643d58de585c2cd4870a171b99f9dd3480dc112034426702cfdfafb5c006abfba092d00254d31b51c9a6ae2971a007b980370eb5d43e354","ssdeep":"","tlshash":"edd097e4b5a49d64c5dad1351ba0d1038ca31323483103af2a4b982806b1c0d08f6a00","first_seen":"2023-05-09T01:10:32Z","last_seen":"2026-08-06T22:54:05.439376Z","times_seen":1490,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/css/blugov.css","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/css/blugov.css HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/dejmkut/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Oct 2025 22:17:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Jul 2025 12:56:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9464\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70656,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"017be08165c903d14304596847c2661b","sha1":"90d38f57be7614813e1e49a6090064dc023985b3","sha256":"4217794b756a7de5f436ce268788f5f5ec0d457fbba048d13aa6addf30135b14","sha512":"900a16b36a733018bf813288d4756ceb6ba62e7de79892cc698176318ae46a92b5f0071b6508d29bbbfb0c2f89c5c688447e5c80e88c5e91d2329181b652f9a3","ssdeep":"384:n6InYg9b8BqfUiiM5FGu6XNagF/ONyRybTf8R8bkHto5oCj4Nme48t/LgXspXfIk:n6ImBqfUii8Q/LRDlnkdzcgJsNgM","tlshash":"ec6394635b50320ab266882ebd8277987a35c435e195e7eefccd11d8cfda341272670e","first_seen":"2023-04-06T07:42:53Z","last_seen":"2026-08-06T22:54:05.442244Z","times_seen":463,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/images/myGov-cobranded-logo-black.svg","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/images/myGov-cobranded-logo-black.svg HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/dejmkut/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Oct 2025 22:17:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 17 Jul 2025 12:56:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20323\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b53f20300babca4ebb422e59b888be1f","sha1":"699c5898c6dd9d2b8b949db2e13c8f0b0d29e26b","sha256":"954aa858b3bffb8511bc41bc88b07d2b24597c37faf522550e26c9aa3b0d220d","sha512":"3c8417a8c6b689a876633c18f00558b89334f5bcaf8fcd0242d4ed3120bdc0eebc1f1981642c7337c3f690fbc7b243fd61f08220bc7c0bc3bcb2b2ac8c9ae5a1","ssdeep":"768:pOLsHDCJYU28s5MBiVkYR1utxxmLhtzP4GWWT5m/tW0BhRL26WGiGy5ZGrr:pT+Jo8sifYRIaWgKVl29GiGuZU","tlshash":"fc532f7a5308877b45c3cb84dbda64c9325dd1c3f2faa0c8dba3158b5d128bb95bca11","first_seen":"2023-05-05T04:27:34Z","last_seen":"2026-08-06T22:54:05.43644Z","times_seen":2524,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Australian Government","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Australian Government phishing","tags":["australia","government","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"flordelamazonas.com/dejmkut/icons/icon-blugov-info.svg","fqdn":"flordelamazonas.com","domain":"flordelamazonas.com","tld":"com"},"ip":{"addr":"147.124.216.94","port":443,"asn":396073,"as":"MAJESTIC-HOSTING-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flordelamazonas.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:14:06 GMT","end":"Sun, 04 Jan 2026 14:14:05 GMT"},"fingerprint":{"sha1":"F9:29:18:F2:69:05:E6:99:F0:5B:6A:CA:45:B3:8C:6A:74:47:6A:4D","sha256":"26:CE:78:C0:48:95:1B:41:43:DF:53:D9:57:75:67:E9:55:C4:5D:91:E8:01:52:6F:05:2B:84:3D:57:3B:18:6D"}}},"request":{"raw":"GET /dejmkut/icons/icon-blugov-info.svg HTTP/1.1\r\nHost: flordelamazonas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flordelamazonas.com/dejmkut/css/blugov.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Mon, 20 Oct 2025 22:17:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T05:07:07.342121Z","times_seen":17756185,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-20","alert":"Phishing - Australian Government","trigger":"flordelamazonas.com","verdict":"phishing","severity":"medium","comment":"Australian Government","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flordelamazonas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://flordelamazonas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601206\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-07T05:06:35.365483Z","times_seen":957695,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":103,"dns":3,"connect":18,"send":0,"wait":18,"receive":19,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://flordelamazonas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601206\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-07T05:06:35.365483Z","times_seen":957695,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":164,"dns":1,"connect":30,"send":0,"wait":16,"receive":10,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flordelamazonas.com/dejmkut/index.html","date":"2025-10-20T22:17:43.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://flordelamazonas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601206\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-07T05:06:35.365483Z","times_seen":957695,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":168,"dns":0,"connect":29,"send":0,"wait":20,"receive":8,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}