{"report_id":"9f3a9f6b-6754-418e-bd13-f1972913216e","version":0,"status":"done","tags":[],"date":"2026-06-08T05:15:32Z","url":{"schema":"http","addr":"www.constructionpaco.com/","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"www.constructionpaco.com/","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"title":"Construction Paco, entrepreneur général, résidentiel, commercial, maisons neuves.","dom":{"size":6047,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (360)","md5":"5a043c62cecc7b228e62963c3144df47","sha1":"b082421ba0aa0da6491f5cfc819c0b88a6d63d33","sha256":"395cdd6606ff520c9c1cfe0b140b8322fbfd39f6361c3e338131d869533748cd","sha512":"b48a9e8c3c7729291355f20a4038317ffa1d635bfa70b196fe8a568c628dbe9df9823c33f78e40706694bc22d9ef445f435d2686457daf36c2587039ff5b5bea","ssdeep":"96:pnJKiPDtiOelUp03kLxrL1PM7elxTH0CLLWNPk8cx1Gg7kEPuSTv:pJKgtiOelUmUvPs6vx1GqDz","tlshash":"ccc151377250280a95575494fa373b19d2625902d94eada3b9acb1bfcfc0bf2d473288","dom_hash":"domhashd7d0de3cde053e28ff301cd03aa59a64","first_seen":"2026-01-13T00:25:29.03394Z","last_seen":"2026-06-08T05:15:37.778352Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.constructionpaco.com/","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T05:15:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.constructionpaco.com","ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2014-01-21","domain_rank":0,"first_seen":"2026-06-08T05:15:32.906125Z","last_seen":"2026-06-08T05:15:32.906125Z","alert_count":18,"request_count":9,"received_data":616966,"sent_data":4699,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"construction-paco.com","ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1332,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":1,"received_data":1503,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":1,"received_data":16129,"sent_data":571,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.constructionpaco.com/images/btnback.png","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.220Z","timestamp":1780895709220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /images/btnback.png HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:31:35 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 873\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":873,"size_decoded":1115,"mime_type":"image/png","magic":"PNG image data, 800 x 100, 8-bit/color RGBA, non-interlaced","md5":"59b2197a6f4be5bf2f66087bcf08e775","sha1":"b6fe851290995ab58ffcb7741f16a69c9c0f87f5","sha256":"6b3c2a4031c555e4d15389c9266710417bd02324f09410578c48bb74a25bae3b","sha512":"e1859d10e2c87f11698feb6fb31d40455f2a956ae406591195eb5d5799cdcd1edf70e8c9024082c9df6b747d9c7e254a255782f53035ff7062837c2298c55efa","ssdeep":"","tlshash":"cc115fcb89d22b77fd38d6720c8a4649e5b00922b874b50cc1d561331f15692684d4e7","first_seen":"2026-01-13T00:25:29.054702Z","last_seen":"2026-06-08T05:15:37.779845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":1,"connect":97,"send":0,"wait":97,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/font/arial_1.ttf","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.237Z","timestamp":1780895709237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /font/arial_1.ttf HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:30:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 367112\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/ttf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":367112,"size_decoded":367356,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 23 tables, 1st \"DSIG\", 70 names, Unicode, Typeface � The Monotype Corporation plc. Data � The Monotype Corporation plc/Type Solutions Inc.","md5":"5995c725ca5a13be62d3dc75c2fc59fc","sha1":"056d20ac56be76d076480c2cab53811fefb91b73","sha256":"413c78f91bd39e134f3c0bb204b1d5a90f29df9efddc8fd26950a178058d5d74","sha512":"479a13a6a2a9be109b5699b41234f2df2c70fbbc7671594e3d684b5ab7193288509cefef01d590588062fc0874c884dc1d481b9484e35dc45abc56c0363e0b31","ssdeep":"6144:OOTI5lAtHjcYQJK9Tgv1T0ntei+frPUmZJRe2QJguvXgDZAd:XOWDc/JKkvxni+DMmZvsguvXgVAd","tlshash":"3c749f57e377a70fe3542b34c960e735a298b74d9b2243bb7f0c5698ec898e44f04622","first_seen":"2023-05-07T23:09:24Z","last_seen":"2026-08-05T10:13:32.511483Z","times_seen":48,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":99,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"construction-paco.com/images/favicon.ico","fqdn":"construction-paco.com","domain":"construction-paco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.897Z","timestamp":1780895709897,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"construction-paco.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 03:29:00 GMT","end":"Mon, 03 Aug 2026 03:28:59 GMT"},"fingerprint":{"sha1":"3D:65:F7:EA:97:15:02:CB:AE:B5:2B:AF:80:45:AB:49:BD:82:AD:D8","sha256":"17:31:3C:1F:27:45:08:B3:69:19:B1:F5:8F:09:DA:15:0F:35:42:23:94:FD:86:6D:8C:5C:AA:E7:3F:9F:B1:06"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: construction-paco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:10 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 10 Mar 2018 06:59:37 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1086\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1086,"size_decoded":1332,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 15x16, 32 bits/pixel","md5":"73fd55dfbf62a5fe250111bb5cf329d6","sha1":"573f560af662f5f690e6c3807a9bbfbb6b1149a4","sha256":"ee8c64b6987f1a449ef6b7557f9894b2e0a3f0fa6bffa44d6b083d3c8c0577e5","sha512":"6ddf4613934ba23a2e69fcba5611b70b66c5967e54ecade6f2c1356cd9942efe82c8ef12f5fc229f4171a4c68503642ecfaef0cdda30656fa324e8060f8c8815","ssdeep":"","tlshash":"441126d392ce6868c8352d7930716e3880ff6e06cc0172039841f63c71391d79498a8a","first_seen":"2026-01-13T00:25:29.046976Z","last_seen":"2026-06-08T05:15:37.782722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":0,"dns":478,"connect":96,"send":0,"wait":95,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Dr+Sugiyama","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.106Z","timestamp":1780895709106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css?family=Dr+Sugiyama HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Jun 2026 05:15:09 GMT\r\ndate: Mon, 08 Jun 2026 05:15:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":819,"size_decoded":1065,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b398699d3513c49579cd3c06ec04c64b","sha1":"e12e390d9a620b5d79a5b7f47207ecd0bf9d1ec8","sha256":"99b46a18b8f0049ec0c3fd90e64301f63673968de72d13d4d093e311efb9ce90","sha512":"701fbc60c91edda39c37086554fc212eb81dd3b2a526bae987e660e9059646ffd1f019fd151b62c7e69543b34530e1d7b111b0739547fac491351b1394c909c1","ssdeep":"","tlshash":"e501f182092be00497d30cc512dd7e33ee0eb150784898219afe2cd8fc76e6a536378e","first_seen":"2025-11-23T04:29:07.758801Z","last_seen":"2026-06-08T05:15:37.784096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/images/logo.png","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.112Z","timestamp":1780895709112,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:31:41 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 26836\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26836,"size_decoded":27080,"mime_type":"image/png","magic":"PNG image data, 681 x 194, 8-bit/color RGBA, non-interlaced","md5":"75552bebacbce0e98bdc82ef8a4166a3","sha1":"9cd3aaafca3c710b8c9adf7c33ce6834181e424f","sha256":"3c52ccd7a00bd1f5e73c37fe5dbee348d6466e356a5ede05c972963056435c31","sha512":"9f599225875b038816dfa481b11676e72e4060ed8d9ff2ef61bd2eff1e1d6359c6e7bd93519881c4e80f0f43ebe06cf7fdfe4d7e8557b837c9b9a845cd6b0522","ssdeep":"768:WkAIdbKyTvygmD/Lc3AAfSMbV2CKfbNovVYeV:WkATsiIQSSCV2CKfpoWY","tlshash":"49c2e11bdc417700a13d312a0714049e7dd722ad4ee7ca2adbf09b0b2aa61356d66e6e","first_seen":"2026-01-13T00:25:29.051012Z","last_seen":"2026-06-08T05:15:37.785241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":89,"dns":0,"connect":104,"send":0,"wait":105,"receive":105,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/images/sms.png","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.115Z","timestamp":1780895709115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /images/sms.png HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:31:41 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8788\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8788,"size_decoded":9030,"mime_type":"image/png","magic":"PNG image data, 165 x 200, 8-bit/color RGBA, non-interlaced","md5":"172a92c97d9bd3456018f5af29b992cb","sha1":"399a4f1df22ec0900451d82d4ca0c964bb4fd8e5","sha256":"70c682441dbb406947b508cfedf8541ed60d37ee6f2feb79af9db82c8737f627","sha512":"bea77480a61c80c5a4d2145b9a1bf73e872fcbcca7aaa1dafe39335dd11d20b4d3d56d1e7c80c3a86dff7cc3a1bf02acc1b56bec0ab9cd2bb19a14501a4d56b5","ssdeep":"192:37dtOlWBFClbLd64teyThguShVVQYIgED:3RUlWzCZd6lyNdCtIhD","tlshash":"b402ae8921c4c1a4a09f20d64da9408d5ce776c9e9a209745ed4a713d43ece4e3f8f4b","first_seen":"2026-01-13T00:25:29.060078Z","last_seen":"2026-06-08T05:15:37.786785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":89,"dns":0,"connect":98,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/images/index.jpg","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.218Z","timestamp":1780895709218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /images/index.jpg HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:31:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 63971\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":63971,"size_decoded":64215,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:03:11 19:07:33], progressive, precision 8, 1200x680, components 3","md5":"9efc5f8a7a6f7fef83a7bc7803c59e64","sha1":"1da6a1e56b5a857ba6acfcc1e521478355910743","sha256":"7a2ea50cf496849b4f2da32438772a4abf38209e91292c6d64ada5c39741cf31","sha512":"aee8463d9a9ec9695afd3d8b972df890f3732f75cdcb25ee5c7d2316db7dfbd185e16e1a31292a297de3914ce937952d8e2a49cf41085ab2c28edf5530af86cf","ssdeep":"1536:Bh9hRGHVFES4NzfnPx02pK4mzsbUaTVXZFHiI/o6NJW:bPYHxefJtQBCPHh/e","tlshash":"2253e12ab6208ef6faf60370554ac357e3269a89a27331c7b12c368937f13c1195e753","first_seen":"2026-01-13T00:25:29.037431Z","last_seen":"2026-06-08T05:15:37.787991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":100,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/images/blk.png","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.222Z","timestamp":1780895709222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /images/blk.png HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:31:35 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 143\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":143,"size_decoded":385,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"01381875a8cd730cd1b107b2c8b47c0b","sha1":"746cfccc31a1a66ce861c7b95f63cf4a684abea6","sha256":"5c4204e80736ee207b839533a985f827f11da46aa37aca1732c8f93ced7fcd4e","sha512":"dca45f4439973e304fc600ecdf8d7f7c9d014454060cb44e32872348e8f5d506a1b80263d34095d3c5689311d01352050825226fae0db637b4ca80cef65587a7","ssdeep":"","tlshash":"54c02bed6f232c25de84c6a2f9ff12d2c83511606b7e101f510073230483981e10df11","first_seen":"2026-01-13T00:25:29.040114Z","last_seen":"2026-06-08T05:15:37.78922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":95,"send":0,"wait":96,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/images/midindex.jpg","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.224Z","timestamp":1780895709224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /images/midindex.jpg HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:31:41 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 128101\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":128101,"size_decoded":128347,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2018:03:11 22:49:45], progressive, precision 8, 1200x847, components 3","md5":"e1261f801e2a6e7adb952f1c97eded93","sha1":"9826213212f344650440d0f61bb1632f8a75efce","sha256":"dd63cbc9ad2b673239477291d3fb14002c0bf64e8bfa2440f46812681ccb0b22","sha512":"5913f114f05bd2db3f60cb281da68b29174a1590aa33559e67deeacae86b72078a85697bf5ccd130c4de0369ac1408247de3a30153050dae389ebc79d9ee6a82","ssdeep":"3072:YZW9ZNE6ytI/A6x85IqoKTkqN2Hw5SXLTWzC:5ZSvI/zC6VKTkxH0C","tlshash":"f6c30218782c9d42ebd337394737c7a627531ea527e378823d5dd86833262f0095a6e6","first_seen":"2026-01-13T00:25:29.05288Z","last_seen":"2026-06-08T05:15:37.790338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":95,"receive":281,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/drsugiyama/v30/HTxoL2k4N3O9n5I1boGI7ZbWOY4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.239Z","timestamp":1780895709239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/drsugiyama/v30/HTxoL2k4N3O9n5I1boGI7ZbWOY4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.constructionpaco.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 06 Jun 2026 19:27:52 GMT\r\nexpires: Sun, 06 Jun 2027 19:27:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121637\r\nlast-modified: Thu, 04 Sep 2025 18:38:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15316,"size_decoded":16129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15316, version 1.0","md5":"61f10cded80a33e4cc700554adc33d85","sha1":"45b1ef8e93d48fb1d860db860208287f011cacce","sha256":"b7230c53f46fbf807eb95e4311aa77e5c468b9a56a598b25fbfa4b572a411ee4","sha512":"54baf45ae8e3515b36f0f50e3312cd01693432444ce558d11bdeba0baee7f097c7913b0ef99087bbcc1ae9f1835122ddfd2164a7677e6caa528bd768e680708f","ssdeep":"384:ge6cr6r9RmN1+UqylfRQ84RF+/0w1qLr9wA3FCJn3WzdyIVk:ge6c6r98jvqCO8oY/0w6moCJn3WC","tlshash":"bd62cf98489e41bfc71adbfc6a47bcdb10aa124c0fc48a67c49257de44bc3a74738693","first_seen":"2025-06-28T17:33:45.873759Z","last_seen":"2026-08-05T09:05:19.703049Z","times_seen":16,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T05:15:07.698Z","timestamp":1780895707698,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:08 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:32:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6302\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6302,"size_decoded":6545,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361), with CRLF line terminators","md5":"b4458823dc5e72f9c2391296ccd1310f","sha1":"0bbcd08f422ca1351416a71ed1b4b2d60db407bd","sha256":"7f49d1b4776e0235cb00ba9911bf7a10f87aea42dd29d7cf05dd5b5f2ea015d7","sha512":"f1b1fdd7dd83c8705ee285e60a652a6ca6a9da4ea788632939f274057bba5018db6ddbb33dc016940bc6c7462f8961b1c4f530a4ee77498f320444d018aaecab","ssdeep":"96:qvv/mMbrhSY0nsd6cLyOfAqjPQ5RSrzV9+CrEixpmgVk4PuSTp:qv3m8hSY0nsXd+wnxpm6Dd","tlshash":"bad1643b72512c09927761b0f2333a5dd6721502ea0f55a2b5ec71af9fd1fe2e163288","first_seen":"2026-01-13T00:25:29.056692Z","last_seen":"2026-06-08T05:15:37.792893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":606,"connect":99,"send":0,"wait":101,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.constructionpaco.com/index.css","fqdn":"www.constructionpaco.com","domain":"constructionpaco.com","tld":"com"},"ip":{"addr":"66.70.160.66","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.constructionpaco.com/","date":"2026-06-08T05:15:09.104Z","timestamp":1780895709104,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.constructionpaco.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 09:28:44 GMT","end":"Thu, 13 Aug 2026 09:28:43 GMT"},"fingerprint":{"sha1":"55:5B:65:05:E8:BB:AE:11:9A:28:77:33:83:35:EF:25:6E:77:A0:63","sha256":"BB:AB:C8:55:6E:02:07:C7:91:5B:E6:9A:AD:F1:1E:E2:74:7B:7E:81:82:C8:38:E7:C7:8E:81:15:00:49:D3:F7"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: www.constructionpaco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.constructionpaco.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 08 Jun 2026 05:15:09 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 19 Mar 2018 12:32:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 12651\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12651,"size_decoded":12893,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8f0f902d21fe2d1bf31200c5df84bc79","sha1":"a275376c412cbf0044cdbac467ccb339e8970beb","sha256":"7a47ea41d50df2c6957085b6ad7d489b42cee34660939be954cc18d52b6ff128","sha512":"6a872a5952b301171d3b918a666ac3a36d364366569aa34cd5406d2cb8079f46b7d277a62e09def54659a69a45cf1b24e8300f37bde7c0ec26dfc22e8d87f057","ssdeep":"384:GVVvfBZF33AqFJU59aiaAdSdYxVL4q+V/7e0EVD3MlQ1E8k:GbHBZNAqFJU59aiaAdSdYxh4q+V/7e0B","tlshash":"c34213162ea1500c790728f5ebf06ff667310426d30f86beb835ba16e7535f8b963258","first_seen":"2026-01-13T00:25:29.049003Z","last_seen":"2026-06-08T05:15:37.794451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"www.constructionpaco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}