{"report_id":"016d0a64-863f-48c8-819f-3aec8e214cbd","version":6,"status":"done","tags":[],"date":"2026-04-28T13:35:27Z","url":{"schema":"http","addr":"authsso.productoselbosque.com","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"ip":{"addr":"192.185.108.232","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"authsso.productoselbosque.com/","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"title":"Verify Your Identity","dom":{"size":4924,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2237)","md5":"c37e77c8118e9fcbf465529231e8f2c0","sha1":"06f918b799a72f92bb47b1ea5350e727799cb935","sha256":"65b6af1aad75d0a68773603cfaebc8b8464398aab1d296fc60adbc087e903956","sha512":"c59f1c41396851014bca8a49040c2d658f96cc82c34941abc880e727a0039813c46fe978307ef2a51e96a0b3aec9b77f3e3ce4ed4d981cae6e089a5cce9cbc1b","ssdeep":"96:nqGII8ftCSSDoRaXQMw0eLelA4DZx/WMYQCMdQA3nGwJygdB:q9IsMSSDJXVw/LelA4DZx/WMHCMaA3Rv","tlshash":"2ca184061bc00225734729ad39e393e4e614cca3aa4654fd741ce0acebcd962d6f7738","dom_hash":"domhashb88dc65294f31d05ab9a97556eeb2d28","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"authsso.productoselbosque.com","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"ip":{"addr":"192.185.108.232","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T13:35:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"authsso.productoselbosque.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"authsso.productoselbosque.com","ip":{"addr":"192.185.108.232","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2015-04-03","domain_rank":0,"first_seen":"2026-03-27T13:04:58.621557Z","last_seen":"2026-04-28T01:38:05.784502Z","alert_count":15,"request_count":3,"received_data":29378,"sent_data":1462,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"1000logos.net","ip":{"addr":"172.67.71.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-07","domain_rank":51487,"first_seen":"2017-01-24T12:12:42Z","last_seen":"2026-04-27T14:01:24.870388Z","alert_count":0,"request_count":1,"received_data":21797,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"authsso.productoselbosque.com/","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"ip":{"addr":"192.185.108.232","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef4fdfcd9ef8f59caf0ca99a8112a81b","sha1":"c48b7f2ffade9800f4a6604942a97b0de6c97b3f","sha256":"139312eeafaaa0c0ec85954fd8d6449c96d32d632696f88706a9a370525cafc4","sha512":"6dc298ee35ba733f42eb56d6cdeb23ff085f5036cebec5c2bd4d683fadb9bfbed84c7faf438fc819b7922bedc5fc405a4428b6b140e27f3c3dcf09b17d411006","ssdeep":"","tlshash":"614111556ec0079423db2fab10a731e4c065dc967e8244c9c029b8ad7fa6d67d7eaf30","size":2212,"data":"","first_seen":"2026-03-27T13:05:01.211807Z","last_seen":"2026-04-28T13:53:42.804243Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"authsso.productoselbosque.com/","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"ip":{"addr":"192.185.108.232","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T13:35:06.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.authsso.productoselbosque.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 15:21:22 GMT","end":"Wed, 24 Jun 2026 15:21:21 GMT"},"fingerprint":{"sha1":"F9:05:BA:64:35:82:EE:CB:D5:CB:DE:6C:D5:C1:CF:9D:A9:59:CE:A5","sha256":"BA:D1:12:8A:22:33:D4:F7:49:B3:B4:6C:46:EE:A0:69:ED:39:0F:D6:13:F5:FD:4E:8C:64:52:75:DE:7B:A1:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: authsso.productoselbosque.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 26 Mar 2026 16:27:32 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2144\r\ncontent-type: text/html\r\ndate: Tue, 28 Apr 2026 13:35:06 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4976,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2237), with CRLF line terminators","md5":"4b41388f0e35800767aa1b333943cae5","sha1":"a6e5105c1b33897bd270687b86dd620769123342","sha256":"7a2a02a94417170122209c8a3f222d26aac62504ab53be4acc6ce0631e45c7ce","sha512":"ae8b2add520550bc748ec12650384eb6282d6d3b37bd886862fe7685581c2be4deedf98d48ef80c27ed6497a42a2489b2460391b1944d1461de16cf1eed856fb","ssdeep":"96:iGII8ftCSSbcw3XQMw0eLelA4DZx/WMYQCMdQA3nGwJygdZ:i9IsMSSbhXVw/LelA4DZx/WMHCMaA3R/","tlshash":"69a193161bc00225736729ad39e393e4e214cca3aa4654fd741cf0a9ebde912d6f7738","first_seen":"2026-03-27T13:05:01.205411Z","last_seen":"2026-04-28T13:53:42.802974Z","times_seen":7,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":328,"dns":128,"connect":93,"send":0,"wait":96,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"authsso.productoselbosque.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1000logos.net/wp-content/uploads/2022/04/DocuSign-Logo.png","fqdn":"1000logos.net","domain":"1000logos.net","tld":"net"},"ip":{"addr":"172.67.71.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authsso.productoselbosque.com/","date":"2026-04-28T13:35:07.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1000logos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Apr 2026 05:16:12 GMT","end":"Tue, 30 Jun 2026 06:16:09 GMT"},"fingerprint":{"sha1":"73:38:7C:5D:06:6E:49:43:EC:2B:76:9F:D7:C3:5F:E2:EE:72:62:21","sha256":"DD:8B:0D:4E:24:A9:6D:61:F7:9D:FC:8C:C6:C6:F4:6A:1E:46:44:B5:FE:49:1B:3D:8B:7A:B6:10:D0:6D:8E:2B"}}},"request":{"raw":"GET /wp-content/uploads/2022/04/DocuSign-Logo.png HTTP/1.1\r\nHost: 1000logos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authsso.productoselbosque.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 13:35:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 21106\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Dec 2024 16:02:59 GMT\r\netag: \"67659533-5272\"\r\nexpires: Thu, 30 Apr 2026 01:37:44 GMT\r\ncache-control: max-age=172800\r\naccept-ranges: bytes\r\nage: 43042\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4izyQYBG2c6OSSnaht%2B0mjeE9NN%2BAiyVkc%2BHhvr7YdjirY2mX6%2F8YXqMGolcE7W17Wj6QKFwxmW0DnRHP8b0cd7s4rSDncaMIy93Ub9xtqK%2B1GpZCbIYjN4RTtDLoE0%3D\"}]}\r\ncf-ray: 9f3672c55e82c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"eba63d03066c51d8bbfe3689d26e639e","sha1":"00eadd145162ebc3020dad4b648c00c1d5d3647b","sha256":"994fe9d5aef70e40cb5b0861120c1b67e3ce825e830e31fa4c448fb397267fcf","sha512":"acd9210c9b2f09599a3cd08cc1bdb293721297217187119cba522992597fadd4af881e715a9a2d78ff7987bcad437ffbb08f98b55ad1930df99ce9aac201382c","ssdeep":"384:elEaWfd8JhrasxSIszQNlRi8mCQmaVDN1OJOdwxnOhuZarRG1pOCATTNSK+4C:XR8UIs+itCQmGDN0oynlaQ1UCATT9+4C","tlshash":"5192c094ad97b353fd90d37626cb07aade4710f28e630bca1c95e253e41b2063729c4b","first_seen":"2025-10-05T17:02:56.919123Z","last_seen":"2026-04-28T13:53:42.80361Z","times_seen":9,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":38,"dns":20,"connect":1,"send":0,"wait":12,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"authsso.productoselbosque.com/images/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"ip":{"addr":"192.185.108.232","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authsso.productoselbosque.com/","date":"2026-04-28T13:35:07.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.authsso.productoselbosque.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 15:21:22 GMT","end":"Wed, 24 Jun 2026 15:21:21 GMT"},"fingerprint":{"sha1":"F9:05:BA:64:35:82:EE:CB:D5:CB:DE:6C:D5:C1:CF:9D:A9:59:CE:A5","sha256":"BA:D1:12:8A:22:33:D4:F7:49:B3:B4:6C:46:EE:A0:69:ED:39:0F:D6:13:F5:FD:4E:8C:64:52:75:DE:7B:A1:BA"}}},"request":{"raw":"GET /images/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1\r\nHost: authsso.productoselbosque.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authsso.productoselbosque.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Fri, 14 Nov 2025 18:17:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Tue, 28 Apr 2026 13:35:07 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":11816,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-07-25T08:21:01.055843Z","times_seen":16063,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"authsso.productoselbosque.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"authsso.productoselbosque.com/favicon.ico","fqdn":"authsso.productoselbosque.com","domain":"productoselbosque.com","tld":"com"},"ip":{"addr":"192.185.108.232","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://authsso.productoselbosque.com/","date":"2026-04-28T13:35:07.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.authsso.productoselbosque.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 15:21:22 GMT","end":"Wed, 24 Jun 2026 15:21:21 GMT"},"fingerprint":{"sha1":"F9:05:BA:64:35:82:EE:CB:D5:CB:DE:6C:D5:C1:CF:9D:A9:59:CE:A5","sha256":"BA:D1:12:8A:22:33:D4:F7:49:B3:B4:6C:46:EE:A0:69:ED:39:0F:D6:13:F5:FD:4E:8C:64:52:75:DE:7B:A1:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: authsso.productoselbosque.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://authsso.productoselbosque.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Fri, 14 Nov 2025 18:17:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4677\r\ncontent-type: text/html\r\ndate: Tue, 28 Apr 2026 13:35:07 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11816,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-07-25T08:21:01.055843Z","times_seen":16063,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"authsso.productoselbosque.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"authsso.productoselbosque.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}