{"report_id":"fb98d49e-1b30-4c7b-be71-7c2e024883fb","version":0,"status":"done","tags":[],"date":"2026-07-05T11:11:36Z","url":{"schema":"https","addr":"antai-service-app.kingpur.pt/mycsss/login.php","fqdn":"antai-service-app.kingpur.pt","domain":"kingpur.pt","tld":"pt"},"ip":{"addr":"45.88.108.231","port":0,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"antai-service-app.kingpur.pt/mycsss/login.php","fqdn":"antai-service-app.kingpur.pt","domain":"kingpur.pt","tld":"pt"},"title":"myCSS Login","dom":{"size":7569,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3395d2ea1eaf61a8982f37a3dcd569bb","sha1":"11ccd89efc594f6cc58fab4b55178df733786882","sha256":"3047012e4c917213783f68763444245177f7f35ab888d2b2799f2d6acd973ebd","sha512":"77e41e74ae525d9e484e0702f7f550b077728dab2124fd5180720af86310bb975f68c940759ee76866682e38adcfc2e18c40f0d6ca2af6c29e5194b02ca5c64d","ssdeep":"96:wxgp0/8Pd1VW1n2RUQrxAYD/7DqrygTv9+l4RVUa:BY8l141n2RUQryYj7DyvkTa","tlshash":"95f1546264f310273943e5b53be79b0a3a65d003c50acd683edc57c8cfc6a8689a379c","dom_hash":"domhash62a0c91067cc12037631c38c18e81f17","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"antai-service-app.kingpur.pt/mycsss/login.php","fqdn":"antai-service-app.kingpur.pt","domain":"kingpur.pt","tld":"pt"},"ip":{"addr":"45.88.108.231","port":0,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-09T11:11:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"antai-service-app.kingpur.pt","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-28T23:50:27.274026Z","alert_count":0,"request_count":1,"received_data":285953,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"static.wikia.nocookie.net","ip":{"addr":"172.66.2.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-10-19","domain_rank":62708,"first_seen":"2014-02-27T12:31:06Z","last_seen":"2026-07-04T14:08:30.177546Z","alert_count":0,"request_count":1,"received_data":6847,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":3,"received_data":147225,"sent_data":1701,"comment":"","tags":null,"fingerprints":null},{"fqdn":"id.css.ch","ip":{"addr":"194.209.96.18","port":443,"asn":3303,"as":"Bluewin","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2023-01-20T15:56:44Z","last_seen":"2026-07-04T21:45:49.028943Z","alert_count":0,"request_count":1,"received_data":5806,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"antai-service-app.kingpur.pt","ip":{"addr":"45.88.108.231","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"domain_registered":"2024-12-18","domain_rank":0,"first_seen":"2026-07-04T21:45:48.011234Z","last_seen":"2026-07-04T21:45:48.011234Z","alert_count":8,"request_count":2,"received_data":8959,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":6195,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-07-25T00:47:31.277175Z","times_seen":17904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"antai-service-app.kingpur.pt/mycsss/login.php","fqdn":"antai-service-app.kingpur.pt","domain":"kingpur.pt","tld":"pt"},"ip":{"addr":"45.88.108.231","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"646a67bfe88704d3d48280d4258dac58","sha1":"f1460b84a02f2bfaad596c5a6f2ffe8706f19bdb","sha256":"f883b5decd7b97c318b549fcd89a13650a1455c119ceade1a317a14c936ccf97","sha512":"b292e72dd4569b59c071aeee2bb3654877a7f7caa425a53728344d540e23da40bd3cb0198e5e7f3501c1120e33ed086e92d04707dda16545cd842317c2b0cf13","ssdeep":"","tlshash":"42f04f29a8ea500270a371a51f7f0105b5b5b40be154cd083b7cdfd5afbd960422abbe","size":493,"data":"","first_seen":"2026-06-11T10:51:26.959656Z","last_seen":"2026-07-07T07:57:07.39575Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.193Z","timestamp":1783249874193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Raleway:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://antai-service-app.kingpur.pt/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Jul 2026 11:11:14 GMT\r\ndate: Sun, 05 Jul 2026 11:11:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5511,"size_decoded":1293,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99562f752620b8e2ec85c09baa05b26e","sha1":"08dc5205cb70620c72ed51ad5c8c68896fe7610d","sha256":"012da3e2e28c1bcf61c0eda9fcd30ab5bee29c74bf16e61a459208d8a85b91ae","sha512":"13b79a9735ef45c5b7f40a63b9ee900f63636c8750d828cdea2ac2e71a42acded41d6a1dc9f76b2ea85455e59d6131c10293220930cb452adfee3317e801ca17","ssdeep":"96:vOEaifOEaGFZOGOEaHxOEaXJc+uKOEaGNaOXaifOXaGFZOGOXaHxOXaXJc+uKOXi:4ioTRH+DO9ivTiH9DNbiBT4HbDrp","tlshash":"21b198a00917d000eb47acc623ce7e36ee5e22053046953e9bfd58f8acaad361394b0d","first_seen":"2025-09-11T19:20:59.098214Z","last_seen":"2026-07-24T15:46:15.059513Z","times_seen":209,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.196Z","timestamp":1783249874196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://antai-service-app.kingpur.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 05 Jul 2026 11:11:14 GMT\r\nage: 1987855\r\nx-served-by: cache-lga21985-LGA, cache-bma-essb1270073-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 8295, 8631\r\nx-timer: S1783249874.229156,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":285314,"size_decoded":84258,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-07-25T00:47:31.277175Z","times_seen":17904,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":12,"receive":10,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wikia.nocookie.net/logopedia/images/e/e3/CSS_%28insurance_company%29_%282022%29.svg","fqdn":"static.wikia.nocookie.net","domain":"nocookie.net","tld":"net"},"ip":{"addr":"172.66.2.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.202Z","timestamp":1783249874202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wikia.nocookie.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 15:25:51 GMT","end":"Tue, 11 Aug 2026 15:25:50 GMT"},"fingerprint":{"sha1":"A7:BF:A3:AA:80:D4:AF:91:19:21:45:FE:B7:F7:2B:A4:51:FB:DA:FC","sha256":"6F:BC:10:9A:1A:E8:03:7B:50:57:F3:4B:14:3A:B6:5D:85:B7:63:73:94:E5:9E:95:C4:14:90:FD:0D:CC:08:16"}}},"request":{"raw":"GET /logopedia/images/e/e3/CSS_%28insurance_company%29_%282022%29.svg HTTP/1.1\r\nHost: static.wikia.nocookie.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://antai-service-app.kingpur.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 11:11:14 GMT\r\ncontent-type: image/svg+xml\r\nsurrogate-key: aaa16affb67838f230f3d0f099459d91707d0293 wiki-logopedia thumblr original v:2993a246\r\ncontent-disposition: inline; filename=\"CSS_%28insurance_company%29_%282022%29.svg\"; filename*=UTF-8''CSS_%28insurance_company%29_%282022%29.svg\r\nx-thumbnailer: Thumblr\r\nvary: Accept, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Range\r\nx-cache-hits: ORIGIN\r\nx-cache: ORIGIN\r\nx-served-by: thumblr-77c4bff7b4-ff5m5\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr\r\ncache-control: public, max-age=31536000\r\nnel: {\"report_to\":\"nel\",\"max_age\":604800,\"failure_fraction\":0.01}\r\nreport-to: {\"group\":\"nel\",\"endpoints\":[{\"url\":\"https://services.fandom.com/browser-errors/report\"}],\"max_age\":604800,\"include_subdomains\":true}\r\nx-envoy-upstream-service-time: 145\r\nserver: cloudflare\r\ntiming-allow-origin: *\r\nset-cookie: __cf_bm=RFdAweByPs2fQCosUd5oC15vp1xjzQzhkjGaeOksnpU-1783249874.2926607-1.0.1.1-c7e38kH82q.M9NX3bKstaB7PmKTJHLb1GfkPMt4oT34xhHhSB7Z6txsUsImsuHjVnQUHPw40ghr.WLiXpZ75II4FYVXQrjwU2Plii7EcHMZe.ZH2SpZH9qR7FL6SWysQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=nocookie.net; Expires=Sun, 05 Jul 2026 11:41:14 GMT\r\nage: 12018121\r\ncf-cache-status: HIT\r\netag: W/\"YIwX3Cap6HJT74IAY7zdPA==\"\r\ncontent-encoding: gzip\r\ncf-ray: a165ed825a2b723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5320,"size_decoded":4102,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"608c17dc26a9e87253ef820063bcdd3c","sha1":"33f034816eb7f26190e7380873f756d0a02847f5","sha256":"3fef2170200919f1c197f1642a5fa9d8e7b746eef3a942cfa8d868b5f7577461","sha512":"3ebd4524f27ab81ef9bca4e1d5d17d75805be0294f45f0c540399c17c64c111b6fc97ec9730caaa5dbd7a66c151fd897ae5a800d9890361c347204bce3dbc0f0","ssdeep":"96:R8RXL1J/wUozvjQADvfQ3ZbJPbXb9ne3Gk5g/b3mfX++/AFSWJp9N8/3Vp:RYlwULWY3/PzbZCP+/FlJ+/T","tlshash":"2db1b666f37902f4d75883d444d26cd533ad30a3b6146875feac484c9f824cab63e2ae","first_seen":"2026-04-19T05:11:04.619505Z","last_seen":"2026-07-07T07:57:07.388443Z","times_seen":17,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":70,"dns":0,"connect":2,"send":0,"wait":8,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.326Z","timestamp":1783249874326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://antai-service-app.kingpur.pt\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:14:21 GMT\r\nexpires: Mon, 05 Jul 2027 10:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3413\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49075,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-25T01:51:14.074316Z","times_seen":60937,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":16,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.css.ch/auth/ui/assets/custom/img/favicon.ico","fqdn":"id.css.ch","domain":"css.ch","tld":"ch"},"ip":{"addr":"194.209.96.18","port":443,"asn":3303,"as":"Bluewin","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.419Z","timestamp":1783249874419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA512","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id.css.ch","organization":""},"issuer":{"commonName":"SwissSign RSA TLS OV ICA 2022 - 1","organization":"SwissSign AG"},"validity":{"start":"Wed, 19 Nov 2025 06:08:15 GMT","end":"Thu, 19 Nov 2026 06:08:15 GMT"},"fingerprint":{"sha1":"4E:D9:88:A8:09:5E:18:93:8C:10:43:20:D7:1A:02:29:D8:86:B8:5D","sha256":"45:57:4D:DD:DC:1F:AA:7A:90:BE:A1:D8:7A:4F:DE:29:7C:12:21:4F:52:7A:33:ED:BB:EB:F7:44:F1:6E:83:D2"}}},"request":{"raw":"GET /auth/ui/assets/custom/img/favicon.ico HTTP/1.1\r\nHost: id.css.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://antai-service-app.kingpur.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Origin,Accept-Encoding,User-Agent\r\nset-cookie: CSS_LB-S=$xc/cxOu4y8b_xAv39L_f7Kz3y2KcKaN1q1lL42JvbRkpVdCzXWf; Path=/; Domain=.css.ch; Secure; HttpOnly; SameSite=None\r\ncontent-length: 4286\r\naccept-ranges: bytes\r\netag: W/\"4286-1765463942000\"\r\nlast-modified: Thu, 11 Dec 2025 14:39:02 GMT\r\ndate: Sun, 05 Jul 2026 11:11:14 GMT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: Content-Type, Accept, Authorization, X-Request-Source, sessionId\r\naccess-control-allow-methods: GET, OPTIONS, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://cssversicherung.report-uri.com/a/d/g\"}],\"include_subdomains\":true}, {\"group\":\"csp-endpoint\",\"max-age\":31536000,\"endpoints\":[{\"url\":\"https://cssversicherung.report-uri.com/r/d/csp/enforce\"}],\"include_subdomains\":true}\r\nexpect-ct: max-age=21600, enforce, report-uri=\"https://cssversicherung.report-uri.com/r/d/ct/enforce\"\r\npermissions-policy: fullscreen=(self), geolocation=(self), sync-xhr=(self), accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), encrypted-media=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), speaker=(), usb=(), vr=()\r\nnel: {\"report_to\":\"default\",\"max_age\":31536000,\"include_subdomains\":true, \"failure_fraction\": 0.05}\r\nreferrer-policy: origin\r\ncontent-type: image/x-icon\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4286,"size_decoded":5806,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"12a81b7427d617b356a88029ba52c675","sha1":"dd18ea24ebf34da8c07e37168cfd77212d12b24a","sha256":"443f5da46f138d77ca2716502e5fb652a9f55c763256cfd970113e0c2b2adf74","sha512":"21fab57b81b6eed0044014be45bf2b8bf81c1344091503609d6eedfe17f31bd462c82cb0d272a90a8a951787700a4283c3a097af68db8354be697778758cadc2","ssdeep":"24:su8L30kCq2588fhgoSi1PaGt5j6Hx93cSmpB1qjtR24Wqrealnf/T:SL30P57fh/Swzvj6RFcScBQj7L/6aF/T","tlshash":"89917c0477879955c14861367593195e0f2c7e61704b0d3a715dfe6edd3ab0b83a8c87","first_seen":"2025-09-26T12:02:35.026281Z","last_seen":"2026-07-07T07:57:07.391211Z","times_seen":55,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":0,"dns":196,"connect":36,"send":0,"wait":40,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"antai-service-app.kingpur.pt/mycsss/login.php","fqdn":"antai-service-app.kingpur.pt","domain":"kingpur.pt","tld":"pt"},"ip":{"addr":"45.88.108.231","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-05T11:11:13.476Z","timestamp":1783249873476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"antai-service-app.kingpur.pt","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:41:24 GMT","end":"Tue, 29 Sep 2026 17:41:23 GMT"},"fingerprint":{"sha1":"81:F2:E3:09:AE:6E:36:FF:D5:48:F1:4E:92:76:39:50:8E:F1:3B:73","sha256":"88:82:34:BB:85:DD:DC:DC:66:C8:18:DA:AA:D7:C0:76:FA:54:92:68:D2:80:E5:78:4E:65:03:5B:31:30:54:B6"}}},"request":{"raw":"GET /mycsss/login.php HTTP/1.1\r\nHost: antai-service-app.kingpur.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 05 Jul 2026 11:11:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2131\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7573,"size_decoded":2363,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"92b3b7447edc4439a54066440b5b145a","sha1":"2dc54c3ff8ba83f7d37a50463beb7b6a7ec0a573","sha256":"60b9d2f457a647afc2171369273fb56a2ca51afbbca9d53d11cc79fb17119c62","sha512":"2607e311729d1d3d9be84a6bf7d852d8eee2af4f925595dd6c8b9cf5c9193b3e04bfa5c9c4b2abe7c6321faa3d94ce8d6d2bcfd139fa9c24a3734006e48aff8a","ssdeep":"96:Wxmp0/8Pd1VW1n2RUQrxAYD/7DqrysTv9+l4RVUIz:XY8l141n2RUQryYj7D2vkTIz","tlshash":"c5f1546264f314273943e5b53be79b0a3a65d003c50acd683edc57c8cfc6a8689a379c","first_seen":"2025-11-26T00:12:59.069316Z","last_seen":"2026-07-07T07:57:07.386605Z","times_seen":29,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":67,"connect":29,"send":0,"wait":39,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"antai-service-app.kingpur.pt","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"antai-service-app.kingpur.pt/mycsss/Asstes/imgs/eye.png","fqdn":"antai-service-app.kingpur.pt","domain":"kingpur.pt","tld":"pt"},"ip":{"addr":"45.88.108.231","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.203Z","timestamp":1783249874203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"antai-service-app.kingpur.pt","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:41:24 GMT","end":"Tue, 29 Sep 2026 17:41:23 GMT"},"fingerprint":{"sha1":"81:F2:E3:09:AE:6E:36:FF:D5:48:F1:4E:92:76:39:50:8E:F1:3B:73","sha256":"88:82:34:BB:85:DD:DC:DC:66:C8:18:DA:AA:D7:C0:76:FA:54:92:68:D2:80:E5:78:4E:65:03:5B:31:30:54:B6"}}},"request":{"raw":"GET /mycsss/Asstes/imgs/eye.png HTTP/1.1\r\nHost: antai-service-app.kingpur.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://antai-service-app.kingpur.pt/mycsss/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 05 Jul 2026 11:11:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 879\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 27 Nov 2023 01:01:54 GMT\r\netag: \"36f-60b17d90e2480\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":879,"size_decoded":1154,"mime_type":"image/png","magic":"PNG image data, 30 x 20, 8-bit/color RGBA, non-interlaced","md5":"b021c57391727b57cbaa5d9574eb2812","sha1":"9466727d6d1805a88b2144dd85104f71df6e4611","sha256":"75873ccb1f15d18b50ca5c7d19b9465dccd68b5a4515239aeff0b0dafd690799","sha512":"8d096bcb79774dae86d23a6158d1c7e9aa3e0084f7174ad5428097db08de88b08aaa165bab732fd5ea5047da3b90a0ee93f80288bb19570d1973ac698a5ff91b","ssdeep":"","tlshash":"d21163e3f281c45bbcb0373107a76ac21c9c23c45839abf5ec4e8839200a6046aff249","first_seen":"2024-05-31T02:03:05Z","last_seen":"2026-07-07T07:57:07.394803Z","times_seen":56,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"antai-service-app.kingpur.pt","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"antai-service-app.kingpur.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.331Z","timestamp":1783249874331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://antai-service-app.kingpur.pt\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:14:21 GMT\r\nexpires: Mon, 05 Jul 2027 10:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3413\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49075,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-25T01:51:14.074316Z","times_seen":60937,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":20,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://antai-service-app.kingpur.pt/mycsss/login.php","date":"2026-07-05T11:11:14.332Z","timestamp":1783249874332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://antai-service-app.kingpur.pt\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:14:21 GMT\r\nexpires: Mon, 05 Jul 2027 10:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3413\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49075,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-25T01:51:14.074316Z","times_seen":60937,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":27,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}