{"report_id":"b52b065a-eb41-4027-a5c5-d59127b565f2","version":6,"status":"done","tags":[],"date":"2025-10-08T20:24:56Z","url":{"schema":"http","addr":"dc.crsorgi.gov.in.web.dccertificate.in/login.php","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/login.php","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"title":"Login | General Public | Civil Registration System | Government of India"},"submit":{"url":{"schema":"http","addr":"dc.crsorgi.gov.in.web.dccertificate.in/login.php","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T20:24:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"domain_registered":"2024-11-12","domain_rank":0,"first_seen":"2025-10-08T20:24:57.512943Z","last_seen":"2025-10-08T20:24:57.512943Z","alert_count":27,"request_count":27,"received_data":2966490,"sent_data":15339,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2:11.4.14","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":2,"received_data":33334,"sent_data":1150,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-05T22:15:40.094389Z","alert_count":0,"request_count":1,"received_data":69604,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-05T22:15:09.164871Z","alert_count":0,"request_count":3,"received_data":173831,"sent_data":1458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-10-05T22:14:21.734265Z","alert_count":0,"request_count":2,"received_data":83020,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdn.datatables.net","ip":{"addr":"172.67.75.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-01-22","domain_rank":36722,"first_seen":"2015-10-06T23:00:51Z","last_seen":"2025-10-06T05:31:20.662987Z","alert_count":0,"request_count":1,"received_data":19278,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-10-05T22:17:33.15614Z","alert_count":0,"request_count":2,"received_data":175718,"sent_data":934,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":11151,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.4.14/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02f965e1956452c531607214a13972c","sha1":"22c90d2013dd99603a3ca54959c500ed7d7f8064","sha256":"4a558d64f917c440d02e03812e53b4ec701e371e938712d9fa9a90f9519412e5","sha512":"9cca9fa5b8202955092b71e2db11ddc262c65fbbb052897d837d09148a8e82b027b093bd80a04f9e703ae5e6a25218493ddc253c3d9915c4cecfe2048facc3c9","ssdeep":"1536:tHeYZ90pQc8VnXu9gqG54akH5hRSv1hcKFw+Vx:t+YZ90pQcJ9LJa0RSv1h5","tlshash":"bc635b5205003433babf06a579e4e304b6a15516fc324c24f87dd4948febe8b65b3bba","size":68441,"data":"","first_seen":"2023-04-01T10:42:41Z","last_seen":"2026-04-06T05:46:53.584623Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/jquery/jquery.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-06T10:08:15.636465Z","times_seen":445712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/login.php","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T10:09:02.614872Z","times_seen":127040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/fancybox/3.2.0/jquery.fancybox.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"185f7fa4c05407258d80c7492580b3c2","sha1":"6b88752feed40930cf94fc13e112504e7f22ad92","sha256":"dea92ae04655be7b1ef7a943f2da9bb55f9e106607d936d01669d10fc10d3980","sha512":"cd469a8a9bcc2728063dc802c54ac990b2ab88b5e722372db49d854b967f999a8fe0c9756503cb21a7e2e5295191e6ee843547e6248c746c98f05c8ae913974d","ssdeep":"768:aDKQ0aYtmEQsCsbwzFFuuJAvOYVTL5VrzdUpfXBoK2z4Mt/iDZdabtrtXcGdQeFt:oLYtmffz/uu/qT9Y9Fv+uSKtS5","tlshash":"794319db7720707586bb15a8a20f520ed137641af50284b278bcd4d516e5fc822effea","size":56753,"data":"","first_seen":"2023-03-10T00:37:23Z","last_seen":"2026-04-06T05:46:53.585878Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40808,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-04-06T09:20:41.913402Z","times_seen":9692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84245,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T09:28:40.933512Z","times_seen":54041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/dist/js/adminlte.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2695ce7b6e4c03f3613657d5f2c3aa10","sha1":"c91c7cb6f6433d957ff0812bcaace94cd016533d","sha256":"755b3b63190824c756288c7e13867b28622bb07d8fecc1e3e160cdbf34f3b105","sha512":"009516c1f33116e40bbf588f64e4d95f437f8d3088acbc726634d1290a2cb4d53bd4ccd94c43c78da8d22b6d0a8f54f02442e93fb825f92857c396eba672b012","ssdeep":"768:ZsFDjb54xEP+aQqSeiyHwB4qDyr9tkErdrDBkaF+J6aA8CmMgfFL4e6/TRPE4ESj:ZskExSpSD5ZF+a8EeaTRPE4ESi/K1","tlshash":"fb139209b2f4f5a100ab2ca5967b9916ba361c5d9406712c73ec94cd1bacd8d3263f3f","size":44244,"data":"","first_seen":"2023-03-07T01:34:16Z","last_seen":"2026-04-05T11:39:30.648901Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/bootstrap/js/bootstrap.bundle.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f81d0a1705048649befc8b595e455a94","sha1":"aec551e4d573463088fca7d14fb644eb389f1839","sha256":"b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b","sha512":"c15ed88f56a52190ea645094409cbce5537eaaf108972f777c840037b8aa0c508f12e70b09e345cf8af7e450a8f6ce96ae974340f8bcd316e58d707c063b6f72","ssdeep":"768:0u/iPe3+zZTVPVBNppu7MTAN6/kp3EfB+4edVAja+t+QnXLb1+uaR+orWieOJAlU:0eiG+Nkp083dG3ulPFzfBqT+m/S","tlshash":"3d83734972a0b472069f61a6807b4a0bf2376c4da107b01cbad9d4ed1f7cd89316bf79","size":84378,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-06T01:34:44.080468Z","times_seen":5120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-06T10:08:15.636465Z","times_seen":445712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/footer-logo-sprite-3.150ba99c6fa2a0b159c8.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /footer-logo-sprite-3.150ba99c6fa2a0b159c8.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Aug 2024 10:58:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94546\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1852 x 80, 8-bit/color RGBA, non-interlaced","md5":"c88cef360ac71292f3b7d36bf0b26abb","sha1":"55094e60a295a6a34fe27cd0d2912a7da0ce5912","sha256":"517d3d2c4a3c32618e99fa6f33fb0643ca8efa4008e1fa46ca2ee4614b55d1f7","sha512":"9c84e4f9d757c971ef01ea2d9123622e4ea4a0d1bac861b40319fa7814e6a1b3bb6de97350f55742546270636cd37082a53469a981b201b0ded360149c6fa905","ssdeep":"1536:PZ/FvzN+9Tl8GVbrt2vIMju2q8DRSiBRLVeg+ljAJVzTmIJruc96/pb3:PZdLgbVbJEIMfq8siB1VeOJV/mGH6hr","tlshash":"429302a8d3acbc166dce8ba0980c6fd610401ebed2e75530be9f09535ca536c7e3b415","first_seen":"2024-08-22T17:16:28.671841Z","last_seen":"2026-04-04T10:33:20.348412Z","times_seen":97,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/fancybox/3.2.0/jquery.fancybox.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/fancybox/3.2.0/jquery.fancybox.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16383\r\ncf-ray: 98b85cb23ee5c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e58-ddb1\"\r\nlast-modified: Mon, 04 May 2020 16:10:00 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2336007\r\nexpires: Mon, 28 Sep 2026 20:24:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A%2FD1aCHyt%2F3i%2FZlEwyTWc%2F7y%2FVB25PoiRdF6bbpSAzecRg68Q%2F6PmeHCnbIKRj09AeeaMlflMsXBb2wlvNT87ZpjEQxRp64kLQXXdehHgpS0f0m2xF7SsRFKVoTDM8EmQ8%2BeuVsk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56753,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32013)","md5":"185f7fa4c05407258d80c7492580b3c2","sha1":"6b88752feed40930cf94fc13e112504e7f22ad92","sha256":"dea92ae04655be7b1ef7a943f2da9bb55f9e106607d936d01669d10fc10d3980","sha512":"cd469a8a9bcc2728063dc802c54ac990b2ab88b5e722372db49d854b967f999a8fe0c9756503cb21a7e2e5295191e6ee843547e6248c746c98f05c8ae913974d","ssdeep":"768:aDKQ0aYtmEQsCsbwzFFuuJAvOYVTL5VrzdUpfXBoK2z4Mt/iDZdabtrtXcGdQeFt:oLYtmffz/uu/qT9Y9Fv+uSKtS5","tlshash":"794319db7720707586bb15a8a20f520ed137641af50284b278bcd4d516e5fc822effea","first_seen":"2023-03-10T00:37:23Z","last_seen":"2026-04-06T05:46:53.585878Z","times_seen":556,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":71,"dns":9,"connect":12,"send":0,"wait":12,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/material-icons/iconfont/material-icons.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/material-icons/iconfont/material-icons.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/logo/crs-logo.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/logo/crs-logo.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3853\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"c874f30eea2fad469593f252d5bf67e4","sha1":"c6e6ee3e0de7e1ccc24d2b3f37c9d74f1df908e5","sha256":"93acd29a015c5d9bd3f2747a36681152cf155cb5d9db8e5eecb80f41d57a959f","sha512":"10e6d05564704d9f624e8042c10f79f86001c2f2a102512b175bef8ee371dd0a83bc1a7d4323829a417c5dbb6abfb5ecfd801bc770c38703a8e02a673ca4e264","ssdeep":"","tlshash":"72818d76b47b333b59780dacc39590b4c5be3a40f808f0132762226ead944cd95b3578","first_seen":"2024-08-22T17:16:28.661658Z","last_seen":"2026-04-05T07:10:19.58172Z","times_seen":100,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dc.crsorgi.gov.in.web.dccertificate.in\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 18:22:44 GMT\r\nexpires: Fri, 02 Oct 2026 18:22:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 525706\r\nlast-modified: Wed, 11 May 2022 19:24:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-04-06T09:51:31.243417Z","times_seen":158495,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":121,"dns":1,"connect":14,"send":0,"wait":15,"receive":3,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/fontawesome-free/webfonts/fa-solid-900.woff2","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/plugins/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/fontawesome-free/css/all.min.css\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:30 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 07 Aug 2024 10:59:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-04-06T10:06:01.363257Z","times_seen":120278,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /sweetalert/dist/sweetalert.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 55\r\ncf-ray: 98b85cb21f2f49c5-OSL\r\nlocation: /sweetalert@2.1.2/dist/sweetalert.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":59,"dns":2,"connect":1,"send":0,"wait":27,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.datatables.net/1.12.1/css/jquery.dataTables.min.css","fqdn":"cdn.datatables.net","domain":"datatables.net","tld":"net"},"ip":{"addr":"172.67.75.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datatables.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 00:54:12 GMT","end":"Tue, 09 Dec 2025 01:54:04 GMT"},"fingerprint":{"sha1":"2F:9D:F1:D1:86:97:47:87:3D:6F:36:B9:FE:82:FA:58:1E:3D:E2:DF","sha256":"B3:8C:A9:BA:85:CE:EA:A8:3B:37:CA:06:D9:10:42:1F:D1:4C:70:CC:2C:B7:07:17:B6:3C:0A:EB:04:6A:64:FE"}}},"request":{"raw":"GET /1.12.1/css/jquery.dataTables.min.css HTTP/1.1\r\nHost: cdn.datatables.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 15:10:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d409ca-47c1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: OPTIONS, GET\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1217453\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iaPVOxpKyb2OSn6igGfLZM2bYPeKFhq7B6dxnELd8uO1YwEoRU2eNYqYkSnbItbTft1iJnLhRq40DBs2TmGsmIcrSqA%2Fp%2Bypackwn%2BoeAg%3D%3D\"}]}\r\ncf-ray: 98b85cb35e39568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18369,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (18364)","md5":"f82c7c01ed0ef8d0cff63eb547d20845","sha1":"1a702c95aab45aa53da4ecd9bb2483cab481b9a7","sha256":"38d62f20743669a8f5d53178bf5b380505bf85f9757367705d7b534bf24768ce","sha512":"a7313b8f107ba1e6aafe164fd8d08520a95c2f16d4b09c0c57398398fb5651c5d66816fd218a2767b695ba747bea31098d671d99c7492afb52302494984b645e","ssdeep":"384:qiWJ1vYcbAj33XeqYBilaAjWsbKTab3PLZ7zqnxlpTibsbU/DQxSwkPKsexyPWxB:awWf","tlshash":"6d828a70b353b1082249eaf8454c49746a70b521996d8dbebc98d7df0f06cc7e2dadb2","first_seen":"2023-04-05T22:52:02Z","last_seen":"2026-04-06T05:46:53.591963Z","times_seen":587,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":268,"dns":5,"connect":1,"send":0,"wait":9,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.4.14/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11.4.14/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19062\r\ncf-ray: 98b85cb31cba23eb-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.4.14\r\nx-jsd-version-type: version\r\netag: W/\"10b59-IskNIBPdmWA6PKVJWcUA7X1/gGQ\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230025-FRA, cache-rtm-ehrd2290042-RTM\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2219977\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yHZlLQKJJ%2BuRDkbJzGH%2FWpxfLm1%2FHRWtB5hYOFhRoCG%2FU1xd9HHXXwU68TeIvw9Vh0e%2FjIsZnxnJFvSBDVv5imalQX%2FhQ1HgAKxKf2v4SwlJiyMFS7DsBeQnpRGS30Cwd1k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68441,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43452)","md5":"a02f965e1956452c531607214a13972c","sha1":"22c90d2013dd99603a3ca54959c500ed7d7f8064","sha256":"4a558d64f917c440d02e03812e53b4ec701e371e938712d9fa9a90f9519412e5","sha512":"9cca9fa5b8202955092b71e2db11ddc262c65fbbb052897d837d09148a8e82b027b093bd80a04f9e703ae5e6a25218493ddc253c3d9915c4cecfe2048facc3c9","ssdeep":"1536:tHeYZ90pQc8VnXu9gqG54akH5hRSv1hcKFw+Vx:t+YZ90pQcJ9LJa0RSv1h5","tlshash":"bc635b5205003433babf06a579e4e304b6a15516fc324c24f87dd4948febe8b65b3bba","first_seen":"2023-04-01T10:42:41Z","last_seen":"2026-04-06T05:46:53.584623Z","times_seen":576,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":219,"dns":2,"connect":2,"send":0,"wait":10,"receive":1,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.1.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dc.crsorgi.gov.in.web.dccertificate.in\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 17188\r\ncf-ray: 98b85cb23f39b500-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62deef96-4324\"\r\nlast-modified: Mon, 25 Jul 2022 19:31:34 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 93051\r\nexpires: Mon, 28 Sep 2026 20:24:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qwpvffyyOyK4qHMcdBHBldhzod%2FWjvmR7CnwzsVUnZ1YsnEaxFL014vB7fYUoLTGpue29qJK60Dzg%2F4QNQ2MW2fKFXH5WUKsbCZmsn7Ro2YiVScYFCzMjvaCB64IHOk6kMWnoFrM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101709,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"8ef777107c4620d4ddd4f8c4bb14a36c","sha1":"0ae47fa834fb55de7b50c79021aeabecfae50c9c","sha256":"c5e8e8eb22e2eaf1ad02370c22c63c04774ab0b83b4329d5945333750814bb2f","sha512":"d6c0913dd9115e1055d8f04b51d45be2d320d70d983dfdfba9ab5415e4bbce5072ee3248f0b7f8547c167d965fa57b5848bcbce69926f4669855831fc39042d4","ssdeep":"1536:RUMVM6MVMkMVM9MVMNMVMispLZdz+WnQcnlFwLb3esoUde7cQ:oZdzRQcnlFkesoUY7cQ","tlshash":"99a3b7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-05T04:43:09Z","last_seen":"2026-04-06T05:46:53.592602Z","times_seen":3730,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":64,"dns":8,"connect":12,"send":0,"wait":14,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/images/emblem.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/images/emblem.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5318\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 105 x 154, 8-bit colormap, non-interlaced","md5":"a11ead9872830abbaaa762f16fd47402","sha1":"b6ad5e1144eb2869da87f18a054ebe0b81b10ed2","sha256":"2a721729088121ea59b491a9398354aa433adf255c61125839e77899534492c3","sha512":"27a1aede31564a965f87e20a239e71db5af5af5e40cb477e84b77ed415e9200fe48fb3381a59f557d532ec8ad4b5baa3ae78dd14de23ac7f7a0dc0cd6b036aa9","ssdeep":"96:N5TYqIqpWy4G+yDzRtMtXLGwaoGZne3dDy:EqIqEy4/qzRtiiwanle3dDy","tlshash":"abb1ad80c5a9088be2be7c48da91774b71cb0d2dd47e35f7acfc4730a823876266c859","first_seen":"2024-08-22T17:16:28.658937Z","last_seen":"2026-04-05T07:10:19.575516Z","times_seen":107,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/icheck-bootstrap/icheck-bootstrap.min.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/plugins/icheck-bootstrap/icheck-bootstrap.min.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Aug 2024 10:59:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1379\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12293), with CRLF line terminators","md5":"e067d8454ea71a421ac69892bc0f1bdf","sha1":"3185a60f3cafa077277c925bb83a80517a1ed9a7","sha256":"7f1c6f368fef383f3c0107eb1a1f3c0fbe308187b1e3b93dfac6b76d69827a52","sha512":"f2fab68399c7134eb68f7c68af85f13de6623e39910e1eb096e7d095f0baa5d43ff6eac9914d3b34cd2d11111eca63fef8d73369c27f439f6e97efcad9e62f72","ssdeep":"192:WEe89dc7KHrB5yyyCqNgkpsQHGK94qY38VFHC0DWk2Ir+kWTYFWamQOMCQcBUpAR:gH4kImcd","tlshash":"1c425cd88de49ac5b83ad73673a4de155316006273f61fb2f1ee17ec4a058186e33e58","first_seen":"2023-04-12T08:42:43Z","last_seen":"2026-04-03T11:27:09.406758Z","times_seen":667,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/bootstrap/js/bootstrap.bundle.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/plugins/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Aug 2024 10:59:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20975\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84378,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"f81d0a1705048649befc8b595e455a94","sha1":"aec551e4d573463088fca7d14fb644eb389f1839","sha256":"b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b","sha512":"c15ed88f56a52190ea645094409cbce5537eaaf108972f777c840037b8aa0c508f12e70b09e345cf8af7e450a8f6ce96ae974340f8bcd316e58d707c063b6f72","ssdeep":"768:0u/iPe3+zZTVPVBNppu7MTAN6/kp3EfB+4edVAja+t+QnXLb1+uaR+orWieOJAlU:0eiG+Nkp083dG3ulPFzfBqT+m/S","tlshash":"3d83734972a0b472069f61a6807b4a0bf2376c4da107b01cbad9d4ed1f7cd89316bf79","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-06T01:34:44.080468Z","times_seen":5120,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/pdfjs-dist/build/pdf.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/pdfjs-dist/build/pdf.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31017\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:39:49 GMT\r\nexpires: Fri, 02 Oct 2026 12:39:49 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 546280\r\nlast-modified: Wed, 10 Mar 2021 14:28:09 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-06T10:08:15.636465Z","times_seen":445712,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":264,"dns":1,"connect":10,"send":0,"wait":9,"receive":9,"ssl":276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700\u0026display=fallback","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:300,400,400i,700\u0026display=fallback HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 20:24:30 GMT\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10465,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"01814b1291b8bc6c47112b456b7a26df","sha1":"accaffc5c44e929fc09c3499e4d0943c93cce88c","sha256":"9adf65c300703595be359cc8ff6e7ece1139a4dbc85bcdd16ab5466ee1288b87","sha512":"295d2c35d211106ba42bb872b60ae9f17f0a2798d8f39c8c2d4b7786b9fa0a37144143904bb079e602a50fa55ee04eb38131a0e886bb11d52b4b822303437be5","ssdeep":"192:mTx2TsTJTd3tT/ThYTnnSt863/XIQYqjJ883msXtBHWBAa3zLosq:mV24FptTaTMnz/4q","tlshash":"e822edb2441a94489ba34cca33df7f36bd4e64207155d2aadffd084caca6c2a4364f5d","first_seen":"2025-09-14T06:57:07.741918Z","last_seen":"2026-04-06T01:24:38.843923Z","times_seen":269,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":235,"dns":4,"connect":8,"send":0,"wait":21,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/jquery/jquery.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/plugins/jquery/jquery.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Aug 2024 10:59:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30267\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-06T10:08:15.636465Z","times_seen":445712,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/material-icons/iconfont/material-icons.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/material-icons/iconfont/material-icons.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/pdfjs-dist/build/pdf.worker.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/pdfjs-dist/build/pdf.worker.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dc.crsorgi.gov.in.web.dccertificate.in\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15920\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 18:33:53 GMT\r\nexpires: Fri, 02 Oct 2026 18:33:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 525037\r\nlast-modified: Wed, 11 May 2022 19:24:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15920, version 1.0","md5":"3a44e06eb954b96aa043227f3534189d","sha1":"23cef6993ddb2b2979e8e7647fc3763694e2ba7d","sha256":"b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e","sha512":"fab970b250dd88064730bd2603c530f3503abb0af4e4095786877f9660a159bf4ad98c5abea2e95eb39ae8c13417736b5772fcb9f87941ff5e0f383cb172997f","ssdeep":"384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK","tlshash":"cc62cf5c6a901684c67c29b63b6d616be9a1cd50c2ab73904fdba317d30d3a1e0298fd","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-04-06T09:18:08.491Z","times_seen":63933,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":121,"dns":1,"connect":22,"send":0,"wait":16,"receive":13,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/CSS/main.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/CSS/main.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44870\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":355471,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (57408), with CRLF line terminators","md5":"523441ff24bc8c38a395896f55ac82c9","sha1":"526dc48b0c51b52679cd069473ca0ad560666b62","sha256":"13d269688a43fbafcdbdebb300b6e4e5f9dd7087b9e26c33ef0f759e49688008","sha512":"e4c0d99822cadff328a0266c19c0175549aeb8432790544d72acf31bc8e2ae6736e4b68b8d102e6b2a0a343f76d922f8df67e05c458ebc6f8e24aefe30a26585","ssdeep":"1536:/2EAFF+J8kJOS9yijlEq31NSwzS5jyQWgGaYnPeMwgG4ZwWcPi04Fuv1pgW8/Jxn:pLzS5j0nh71","tlshash":"e5749331e345262aed1f8526b9c0da49e1e8cc51f1d215ebe9e26d3c8ff74c511a33a8","first_seen":"2024-08-22T17:16:28.652992Z","last_seen":"2026-04-05T07:10:19.574988Z","times_seen":62,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/styles.d9a92685a7b2d205a93d.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /styles.d9a92685a7b2d205a93d.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Aug 2024 10:58:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44206\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":346759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59679)","md5":"397881e53e8f61a0451b1d3293966209","sha1":"920708131ab554dc0c9d3bc2cb3eb95e0bc50729","sha256":"2ef66aa6dc7ae6d6fdecad086a163f7af3dcc8da1b21774517bac16419ea0904","sha512":"2deb5f9370284330fc079a794ace6d793d150b579eb1829d77a699b11e0f9ae14e01a25d745f1b79bb987ba69824310d98044cfd0e4ae180af432dd91dab4d4f","ssdeep":"1536:Hu0gaqYnoCODCsIVzXZTjz55BVPhswp9Udkz3sSuvks/62n018A3mPu/s+qu/EY/:JkBEtfLauVUpz600I4fDV/","tlshash":"47748592f540201af55781a5d4c0bf694eae6541f3013e7af1576fb98b8adcf02afb08","first_seen":"2024-08-22T17:16:28.655855Z","last_seen":"2026-04-05T07:10:19.578994Z","times_seen":76,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/logo/crs-logo-light.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/logo/crs-logo-light.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13650\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 890 x 129, 8-bit colormap, non-interlaced","md5":"c64be9f75adcecbd9832ba41bf089e7c","sha1":"1611d120ae18220245d9707a333cd44ca1d91ad2","sha256":"c7c5ae14cac8549503b60690c73aaaf9bfff569422ab41bc27f18b9cce54fc9b","sha512":"e369f30e51e3c4a9bcb22e60c9deebd1b07b60b3113b04ed94505da4957bdc39959db5b8092b636cf037078f2e3fe5bc815ffdd99ced4798eb9e17746ccef511","ssdeep":"192:gknWfIGPAAW24GSeY7WJzI3KcG6UrwW8uAh8BANbbGoEbhCnaMFX5sDTpG5FF:bnWwT724ppWpyKjd8wAhyL1icDT+P","tlshash":"9752a045f8522e00c8482d036d9990d76f7b9fc86f92e189f8d89c1b2f643f9c958ec9","first_seen":"2024-08-22T17:16:28.660334Z","last_seen":"2026-04-05T07:10:19.57282Z","times_seen":106,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/plugins/fontawesome-free/css/all.min.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/plugins/fontawesome-free/css/all.min.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Aug 2024 10:59:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12380\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-04-06T10:06:01.359615Z","times_seen":80526,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/images/crs-logo.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/images/crs-logo.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3853\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"c874f30eea2fad469593f252d5bf67e4","sha1":"c6e6ee3e0de7e1ccc24d2b3f37c9d74f1df908e5","sha256":"93acd29a015c5d9bd3f2747a36681152cf155cb5d9db8e5eecb80f41d57a959f","sha512":"10e6d05564704d9f624e8042c10f79f86001c2f2a102512b175bef8ee371dd0a83bc1a7d4323829a417c5dbb6abfb5ecfd801bc770c38703a8e02a673ca4e264","ssdeep":"","tlshash":"72818d76b47b333b59780dacc39590b4c5be3a40f808f0132762226ead944cd95b3578","first_seen":"2024-08-22T17:16:28.661658Z","last_seen":"2026-04-05T07:10:19.58172Z","times_seen":100,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/pdfjs-dist/build/pdf.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/pdfjs-dist/build/pdf.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/images/azadi_logo_light-min.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/images/azadi_logo_light-min.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6340\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 65, 8-bit/color RGBA, non-interlaced","md5":"32d93343a815978fd9ed56414883c0bd","sha1":"2405ee6a5e036545f24779e28ea699489efb9b94","sha256":"e8e90509a491d3da05e2438eef0619c8e325eeabf0572700d175b45801ddc385","sha512":"8735061ef7700137bc375c11e9b377724d58f96605923aff8065036791756e5f289a68da2813a9e7ab5916c537fd8c7c97d48b79366189c3c88a300bf66b0c96","ssdeep":"96:zoqhghidfxrDp1j/rJuTomydYpui/sZBD1N3hOIAuEgNoHm1BgYNE07gxP:zoqhciBdj/rJuzI6/szxN3h/ZvycKDY6","tlshash":"b6d19ec6b2f38f46db83be62cd781712518fa844ac51fd70c307239a4ba8e925f61274","first_seen":"2024-08-22T17:16:28.662816Z","last_seen":"2026-04-05T07:10:19.570933Z","times_seen":109,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/bg-logo.3696e599b410630c8833.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /bg-logo.3696e599b410630c8833.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/styles.d9a92685a7b2d205a93d.css\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Aug 2024 10:58:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38198\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 272, 8-bit colormap, non-interlaced","md5":"12b00b6d575653a8387c9f128c71a37a","sha1":"36b1d19602d0c48ac2acda2cca8359eecdaec0d5","sha256":"9352e327da58165c486b4a421b6f76e91b53b64b76b72c4575b18ead5cd374af","sha512":"d763bf1c83a45606ec69c8177578aa4c6f40fbed1320ed86c4e66995ce8deaf04e45b89628a18ce4d3dc2d3785548b582c86973e01ca2cf7869bd2cf7c9688a6","ssdeep":"768:nnp7S2FvYaug4NAaV/axuPv24k90qU64c8mh73Dq:cmugiyxuPv24k90qUJcZh73W","tlshash":"5d0301763891ec9e76c8cf20b853f7eb065a4439004601b96a7cb38ac86e53073f92c5","first_seen":"2024-08-22T17:16:28.669698Z","last_seen":"2026-04-05T07:10:19.576623Z","times_seen":98,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/base/fonts/fonts/77caabd3-1877-4634-85c8-8e398a093b99.woff2","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/base/fonts/fonts/77caabd3-1877-4634-85c8-8e398a093b99.woff2 HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/assets/CSS/main.css\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/base/fonts/fonts/e388ac99-8c6a-4451-8690-1d15b4d45adb.woff","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/base/fonts/fonts/e388ac99-8c6a-4451-8690-1d15b4d45adb.woff HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/assets/CSS/main.css\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/fancybox/3.2.0/jquery.fancybox.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/fancybox/3.2.0/jquery.fancybox.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2477\r\ncf-ray: 98b85cb21e8ac272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e58-302e\"\r\nlast-modified: Mon, 04 May 2020 16:10:00 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 93133\r\nexpires: Mon, 28 Sep 2026 20:24:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UyIL19rG2Qv8oRlq5QmM98PyfcoF8OhkEGTOi%2Fi2BPSWnkAOibRv%2BcxWXznQ9%2Fved82e%2BNMA8r5MXqljfZmFrA6FwLu1nF2%2FdjT5hMOywnJnAl%2B6wNdf6ZUrTwIqGb6PBuI%2BJRS7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12334,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12333), with no line terminators","md5":"8f1d026311882cd40e8fa47e61927179","sha1":"796f30c780da9ea933c26438ad2d518dfdc29c78","sha256":"8fd5c030950b6f19545a9b593f6f0986040f1f820e57f47b3adeaf48381fcd0b","sha512":"f72e757d1cba35743175fda5ea1857bf370372ce0dd913d5508c663e604a5a6ceef6c62e873dd50ef9fb93d71699c90a4eeb48e3dbaad44995c06e77910fc73d","ssdeep":"96:PGAE7/mPQRMa6f3sNIpOsDH7DES2Wf8+WDJT53RjRuCicmz5Z3N2VdZ:PhQ6XcZa7AWdMT539MCKW","tlshash":"42424f73a1403128903bce11d7df9948e27ad5522a221affa68cf919cbc7bd911d63c7","first_seen":"2023-04-07T20:40:57Z","last_seen":"2026-04-06T05:46:53.572517Z","times_seen":539,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":55,"dns":1,"connect":1,"send":0,"wait":17,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/dist/css/adminlte.min.css","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/dist/css/adminlte.min.css HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Aug 2024 10:59:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 109745\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1382975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65158)","md5":"2e6fe3f7ca7204380f24b48bd2ee694a","sha1":"1bf174ccc0b0deca0e042692d0cb47d21b5a485e","sha256":"cb47a624a33c59dde423a5b5e6a4291b954cc51612dd37eb085b84961807619f","sha512":"07c28ce9079e079b140a88f8bc40c8e194f01b3a8ea17bfcddb7591eb8a2d91bdda942ab36324a971bb4cb44b898a0d28853219023aa9eedf66a8dff06cf97d5","ssdeep":"12288:VA6LNkwxKgkfBW6xBu0qLOLvyjC64Ihkv:6wxKgkfBW6xBu0qLOLvyjC64Ihkv","tlshash":"5925750960f13579b0ab4e1e6dfcf9600a1f94e9c4681fbfb57b37848b8458b6163e06","first_seen":"2025-07-29T07:38:53.030483Z","last_seen":"2026-04-05T11:39:30.58008Z","times_seen":192,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/login.php","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T20:24:29.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2:11.4.14","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]}],"data":{"size":93172,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (46705)","md5":"01fc5c5dfddf09e44911104708951c5d","sha1":"9939802d0947bc3218d8f2ca8f0b69346b39e642","sha256":"b6a5d3b76526de4a9176d599e07806bd6fcf5902eeaf63802c22b83229cc8c6d","sha512":"0d9d318748c83599cc134faeb7282a9ad07bb6901192c5bba0edad1ff6441f53d80295d94d91f9d3c2fa3340e8acc5f55511544f21b5d55f2ce523e5f604b81c","ssdeep":"1536:2VrJkqp571lwdM4FOpH8CQuleBPo+E8p/NpMNQP31JmIKw2jbTNIiAqMWU2CsHtC:2VNqGr4D","tlshash":"859362f143004feea283eb5f90e37a2c1568d06ae5170add7a482e6d47c5be711de34a","first_seen":"2025-10-08T20:24:59.944001Z","last_seen":"2025-12-30T09:48:03.948929Z","times_seen":3,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":51,"dns":3,"connect":20,"send":0,"wait":44,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29671\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:42:28 GMT\r\nexpires: Fri, 02 Oct 2026 12:42:28 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 546121\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84245,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T09:28:40.933512Z","times_seen":54041,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":259,"dns":6,"connect":34,"send":0,"wait":8,"receive":4,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/images/banner2.png","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/images/banner2.png HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 234371\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":234371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1914 x 486, 8-bit colormap, non-interlaced","md5":"217e300e56ee8953370574e9897bf5dc","sha1":"b334af0e3025302dfcc397cd4f4d313628bd04ef","sha256":"a49ad58e38754abfec7f34b297b287c4368f4240e21e885ea49352118d5ac676","sha512":"282e1b41b04e8fe430befdd52883b9857027d6b8147b2d7ffa6c4e36d4efc88bb6d3d6c2ec438c8e784b980cb9742f5773af0f6b27cbd5eeb7a5b7290d4059ee","ssdeep":"6144:beNIa/PyZ+4PfwVIKrPlD6TRFl/sghKMfP8j:beJ/PkJCI1RoggM30","tlshash":"0a3423d85ef53dfbd9af41bdb8b7811422046d804712264eb859cc818389dafb7a85f2","first_seen":"2024-08-22T17:16:28.65454Z","last_seen":"2026-04-05T07:10:19.572245Z","times_seen":74,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/pdfjs-dist/build/pdf.worker.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/pdfjs-dist/build/pdf.worker.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-06T10:15:03.362162Z","times_seen":116124,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/assets/images/flag.svg","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /assets/images/flag.svg HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 11 Jul 2025 07:00:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 701\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"929a5f04415abb1243c9ee39e3c6ae05","sha1":"4b92cd9f1b4b04de4377eeb8b3714122e26cbe71","sha256":"eefec48081241c0d3cf292d7f67e77a3da8950ba4b9c1bc042fa1b741fb74eb0","sha512":"ddb283b6ff7f3136f13d36227bf9da3292d151c52dabf5d6a3bc83600b0a549765bc337e06c4b682c461e3eae75ddd51a4b322c841c4118088366f821e239d5a","ssdeep":"","tlshash":"9e41bdb161eed852ea31c381ead414b4ca6da2ef468742dcf18c721f4f354a5394f365","first_seen":"2024-08-22T17:16:28.657766Z","last_seen":"2026-04-05T07:10:19.583811Z","times_seen":87,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.crsorgi.gov.in.web.dccertificate.in/admin/dist/js/adminlte.min.js","fqdn":"dc.crsorgi.gov.in.web.dccertificate.in","domain":"dccertificate.in","tld":"in"},"ip":{"addr":"86.107.77.54","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:29.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dc.crsorgi.gov.in.web.dccertificate.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 07:09:56 GMT","end":"Tue, 09 Dec 2025 07:09:55 GMT"},"fingerprint":{"sha1":"E2:B6:27:23:01:62:3D:85:C0:B3:A4:96:BD:B9:E2:D9:D8:07:DC:CF","sha256":"C1:7B:01:8C:6C:4B:C4:76:39:16:0D:61:BA:A5:F0:38:35:6E:97:51:B9:C6:7D:5B:4E:D0:86:D0:D0:8E:18:47"}}},"request":{"raw":"GET /admin/dist/js/adminlte.min.js HTTP/1.1\r\nHost: dc.crsorgi.gov.in.web.dccertificate.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/login.php\r\nCookie: PHPSESSID=d5ad8f7ba09c71d5c320e507d48865bc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 20:24:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Aug 2024 10:59:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10059\r\ndate: Wed, 08 Oct 2025 20:24:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44016)","md5":"2695ce7b6e4c03f3613657d5f2c3aa10","sha1":"c91c7cb6f6433d957ff0812bcaace94cd016533d","sha256":"755b3b63190824c756288c7e13867b28622bb07d8fecc1e3e160cdbf34f3b105","sha512":"009516c1f33116e40bbf588f64e4d95f437f8d3088acbc726634d1290a2cb4d53bd4ccd94c43c78da8d22b6d0a8f54f02442e93fb825f92857c396eba672b012","ssdeep":"768:ZsFDjb54xEP+aQqSeiyHwB4qDyr9tkErdrDBkaF+J6aA8CmMgfFL4e6/TRPE4ESj:ZskExSpSD5ZF+a8EeaTRPE4ESi/K1","tlshash":"fb139209b2f4f5a100ab2ca5967b9916ba361c5d9406712c73ec94cd1bacd8d3263f3f","first_seen":"2023-03-07T01:34:16Z","last_seen":"2026-04-05T11:39:30.648901Z","times_seen":379,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dc.crsorgi.gov.in.web.dccertificate.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert@2.1.2/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dc.crsorgi.gov.in.web.dccertificate.in/login.php","date":"2025-10-08T20:24:30.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /sweetalert@2.1.2/dist/sweetalert.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dc.crsorgi.gov.in.web.dccertificate.in/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 20:24:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 98b85cb4ab2e0731-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 322513\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 20:24:30 GMT\r\nlast-modified: Wed, 02 Jul 2025 23:04:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:KsRuvuRtUVvobe66OFtOQfjP8WA2SzYsmm4VPfMnxms=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01JZ6P48MKWHZPM05MD8XBPBCE-ord\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40808), with no line terminators","md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-04-06T09:20:41.913402Z","times_seen":9692,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}