{"report_id":"1d544bfe-673d-4532-8085-dedfb043f8fc","version":0,"status":"done","tags":[],"date":"2026-06-25T12:17:32Z","url":{"schema":"http","addr":"forms.marketingsbu.com.uy/exportador/exportador.php","fqdn":"forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":0,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/panel/login","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"title":"Login | Scotiabank","dom":{"size":10671,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1c95e5f64ca677f283968f75dbbb5b35","sha1":"d6b9114d194c6483028426b01f68f844abefd48c","sha256":"fe3359f4b4897d86e502c5cbabb8b0c9525c92cd81c7e68580390880413ee353","sha512":"36e550e04adf7d7925adbeca12a0364c0606418ac683f05ef4048a5a8d3b2cc5c9a1015a3c617040c3142cb6e16aec65441a5364cdec0212e983b832b9b3818a","ssdeep":"192:s0llYs/HFMJzElhG71iupMqE6Tk6J/fxK8xUFBMUGU9wMUFXMUFkFdwtODaoaOTF:sfulCHMSTVJ/fxKG2Mv3MYMJdwtOLaOp","tlshash":"892299b14b5c1e2e5112818aa06cb2e6706f4c37894b8deffdff222197cec445167a55","dom_hash":"domhashb16739073bf6211ff2137d6135e7c6eb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"forms.marketingsbu.com.uy/exportador/exportador.php","fqdn":"forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":0,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T12:17:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":22232,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"forms.marketingsbu.com.uy","ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":1,"received_data":438,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fdsbu.forms.marketingsbu.com.uy","ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-15T17:29:12.269398Z","last_seen":"2026-06-10T17:31:16.667784Z","alert_count":52,"request_count":13,"received_data":933442,"sent_data":7723,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":3,"received_data":131841,"sent_data":1755,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/js/jquery-ui.min.js","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c73a28be5dff19936b9f8932e59d7e78","sha1":"3cfa29986effade6dedd94f0a927a4613ce2c5dc","sha256":"d30eb09abb6d25e97ea31e0ff20856643388ab1de6f345d97d10f8837c2cff84","sha512":"34ea93dac2b4580425d5216e599ee5d454e6c4bc8d04d08ca501dfbe47818ac78b4345ffaeff71ae444cf0bc00d893fc1a0d732196319d6f34dbcf3008c30141","ssdeep":"3072:kDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:gNdIVWjNS9cdzAV","tlshash":"a344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":253949,"data":"","first_seen":"2023-08-22T15:32:24Z","last_seen":"2026-07-04T18:16:52.374323Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/js/jquery.min.js","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4feeeb323fa3e7b980d5916946b7bd5e","sha1":"e0d47dd7def31b3cd3dab43464c663382e8698dd","sha256":"e8c3cccfb58b82f8492042016898334e0623d643b563a2097492e7def5cfcfac","sha512":"416efd3bb56ea96bde5d0666b94a2e68b87d88de1c831fc891820e34a82604329d46b9c1fa0a06fb31195ef74872e5a0148f826019592b1d3abb45fe1640acfc","ssdeep":"1536:PRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:XHNwcv9VBQpLl88SMBQ47GK7","tlshash":"4783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87443,"data":"","first_seen":"2023-10-22T08:54:07Z","last_seen":"2026-07-22T02:11:39.107634Z","times_seen":921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:09.638Z","timestamp":1782389829638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 25 Jun 2026 12:17:09 GMT\r\ndate: Thu, 25 Jun 2026 12:17:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":2426,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ba7c658fb900892ba3c80a4ab6029c5d","sha1":"b5e0e06cd259b2d7c1a0496b9cdc3e6a951ccb79","sha256":"1fed9a9f0c2575723702f958957d187a562ee172f0df5c1889e2d339676ab949","sha512":"d90733d22bf95b1d0681c33b4a8f1f4c93be127f987d4828fa373b2001881a82739202a6bc6bbd512adb0e8029c0db87286136c3bac6ffc810072bd59e4f5e7c","ssdeep":"384:39fn9+9h9d9yS9/qY4o9m9G939fa9D9w9k9yf9/qY459L9r9c9fF9Y979/9yE9/s:3FsbbYSRv4wFMl22YfRiJhan6BBYERNW","tlshash":"4aa20ca10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-19T22:49:57.257828Z","last_seen":"2026-07-23T00:08:52.36944Z","times_seen":6017,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forms.marketingsbu.com.uy/exportador/exportador.php","fqdn":"forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T12:17:05.133Z","timestamp":1782389825133,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 18:15:57 GMT","end":"Tue, 15 Sep 2026 18:15:56 GMT"},"fingerprint":{"sha1":"47:5E:55:7B:51:69:9F:57:95:F3:D7:83:FC:ED:90:F2:4B:A4:E6:3B","sha256":"A9:3A:2D:3B:83:74:07:BF:B7:F0:D2:E3:01:10:E7:A0:2E:C3:44:4A:55:65:2C:69:60:74:87:A7:B2:21:3C:31"}}},"request":{"raw":"GET /exportador/exportador.php HTTP/1.1\r\nHost: forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Thu, 25 Jun 2026 12:17:04 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN, SAMEORIGIN\r\nLocation: https://fdsbu.forms.marketingsbu.com.uy/panel/exportador\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":1494,"timings":{"blocked":-1,"dns":313,"connect":130,"send":0,"wait":263,"receive":0,"ssl":787},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/panel/exportador","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T12:17:06.635Z","timestamp":1782389826635,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /panel/exportador HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Thu, 25 Jun 2026 12:17:05 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.2.34\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Methods: OPTIONS, POST, GET\r\nAccess-Control-Allow-Headers: X-Requested-With,X-Prototype-Version,Content-Type,Cache-Control,Pragma,Origin\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Expose-Headers: Access-Control-Allow-Origin\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: laravel_session=2fe5c7b3537d37f343fb888ac5a147b9ef1c9c3a; expires=Thu, 25-Jun-2026 14:17:05 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax;HttpOnly;Secure\r\nLocation: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":231,"connect":131,"send":0,"wait":332,"receive":3,"ssl":139},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/panel/login","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T12:17:07.473Z","timestamp":1782389827473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /panel/login HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: laravel_session=2fe5c7b3537d37f343fb888ac5a147b9ef1c9c3a\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.2.34\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Methods: OPTIONS, POST, GET\r\nAccess-Control-Allow-Headers: X-Requested-With,X-Prototype-Version,Content-Type,Cache-Control,Pragma,Origin\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Expose-Headers: Access-Control-Allow-Origin\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca; expires=Thu, 25-Jun-2026 14:17:06 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax;HttpOnly;Secure\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":11021,"size_decoded":11886,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0a189295c8b3e36dc99b930c496fe475","sha1":"44c3775c1906ad9d102ccc21e4357179d8a63720","sha256":"410ed08df1a2397e034bc2576745defd4897af8a072e904ba282af7786928d55","sha512":"a3bbcb2e29fcd4ef6d2f2cf76bda21a8f41770073d8fa0d5330c2d57eff3d74e6b390cb6eaeabfca7d97a0927b8d63376107497d8e9a31fff3e6e83a4f7af79d","ssdeep":"192:HNaa9WfP0ou0jAX0MMm2yyD1hMzib5PktHEgejgb4MWfTUFaMUhUeMUFdMUFLCR2:HB0WEMMdyPtZe8b4MWfTvMK7M+MaCRqr","tlshash":"f132b861364e962e8213818b9078f2a9e86fcd37854b85aff5fc333357ca8145713a5a","first_seen":"2026-06-25T12:17:38.891869Z","last_seen":"2026-06-30T07:54:05.033224Z","times_seen":4,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":132,"send":0,"wait":316,"receive":131,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:09.988Z","timestamp":1782389829988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fdsbu.forms.marketingsbu.com.uy\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 25 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7172\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43947,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T00:27:34.124708Z","times_seen":239913,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/images/favicon.ico","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:10.163Z","timestamp":1782389830163,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/images/favicon.ico HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:08 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 19 Nov 2021 02:00:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7406\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7406,"size_decoded":7810,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel","md5":"57bd61bda4ace37c9e4e86d552c54b76","sha1":"210e6f2d324480e71eb8c90087fe1a9e5a70cc23","sha256":"20f10502111b9fb4c47d833fe055188971bac8a6ff333aef302bff2a80e228e6","sha512":"f549759ae63dc9daca9419ddde2863e3ef20a3b5d8553c91ac851026a786e1b7fccc78beb9889f017fa318c61e9a05a0a1fcccab6c0b0cee5f541ad858d635d3","ssdeep":"48:reU/J73DGlAMXJiRiXX1R0gjODxvGLyu:iUh7DkAMXJiKX1GNxex","tlshash":"1ee1425b2204fa0bd7794d34de0687f49fd4509dadb89701785c0f9cec1e8398809f94","first_seen":"2023-05-08T12:23:11Z","last_seen":"2026-07-20T17:45:44.962714Z","times_seen":148,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/vendors/iconfonts/mdi/css/materialdesignicons.min.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.307Z","timestamp":1782389828307,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/vendors/iconfonts/mdi/css/materialdesignicons.min.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 19 Nov 2021 02:00:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 145692\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":145692,"size_decoded":146094,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"67431d295be1e963642d702ffb39df90","sha1":"9caa629826475b5f8106b9d20ea8aed3e5e3752d","sha256":"3fb4fdc139e729d66585549aa34fd56f016c6001db06b0ad4d2ac37fd7a87a5d","sha512":"2d13f2f13a39c59bdb1c18e7efc73f8dd7f960bdc964bbf3ea409a470660aa7eaee8e61fc17c582e143ed6a8d024f5285867dae8de6c0298f5db26ffeef6adc4","ssdeep":"1536:34t9aV9toTFQ8vIipN8MiKLOqz2cp7UolYM+SAlqSag0h:342TtohXvIaG8BFhlQyZh","tlshash":"0ee31be9e00c14e3bb33c453e380f7a8658bf2b1d6851d5af98f110e29c7a651687f69","first_seen":"2023-04-05T22:56:45Z","last_seen":"2026-07-04T01:02:34.079966Z","times_seen":69,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":526,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/vendors/css/vendor.bundle.base.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.312Z","timestamp":1782389828312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/vendors/css/vendor.bundle.base.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 19 Nov 2021 02:00:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9234\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9234,"size_decoded":9635,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (4341)","md5":"6ebbde8b7d4fe39dbc9a7f5aeb09b4f1","sha1":"562d975831c7b9dc6d4ea50abe4f8d6c463e1ad2","sha256":"b747e8bcac8120973c5998da3cabeeab19343f2609eb37bc1bf2e3e0811533a0","sha512":"50613df7ebe36b111a42d9029cfa78e62decc646484ba89922e8e31e2bf55622bc351ddae56d62b0e66f6688a1d2a09c7188cea7685a9138567a5658003730f2","ssdeep":"192:Pf0y0FQWFRoIYhl+/fRILbcxNRULVCyLwxzhwxcGq:44+ILbGKLkhw+","tlshash":"6012e7b986675b80364bd5c95faba7063e3e40c3fa27c55db78731982f0639c4b62b40","first_seen":"2023-10-17T15:07:23Z","last_seen":"2026-06-30T07:54:05.0306Z","times_seen":22,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":130,"send":0,"wait":142,"receive":122,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/vendors/css/vendor.bundle.addons.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.318Z","timestamp":1782389828318,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/vendors/css/vendor.bundle.addons.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 19 Nov 2021 02:00:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9234\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9234,"size_decoded":9635,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (4341)","md5":"6ebbde8b7d4fe39dbc9a7f5aeb09b4f1","sha1":"562d975831c7b9dc6d4ea50abe4f8d6c463e1ad2","sha256":"b747e8bcac8120973c5998da3cabeeab19343f2609eb37bc1bf2e3e0811533a0","sha512":"50613df7ebe36b111a42d9029cfa78e62decc646484ba89922e8e31e2bf55622bc351ddae56d62b0e66f6688a1d2a09c7188cea7685a9138567a5658003730f2","ssdeep":"192:Pf0y0FQWFRoIYhl+/fRILbcxNRULVCyLwxzhwxcGq:44+ILbGKLkhw+","tlshash":"6012e7b986675b80364bd5c95faba7063e3e40c3fa27c55db78731982f0639c4b62b40","first_seen":"2023-10-17T15:07:23Z","last_seen":"2026-06-30T07:54:05.0306Z","times_seen":22,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":133,"send":0,"wait":135,"receive":124,"ssl":134},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/css/shared/style.css?v=1","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.321Z","timestamp":1782389828321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/css/shared/style.css?v=1 HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Wed, 10 Jun 2026 20:52:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 250916\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250916,"size_decoded":251319,"mime_type":"text/css","magic":"ASCII text, with very long lines (631)","md5":"c8077eff2771b49833399f159caf77da","sha1":"6bdc03fd56e66abbce5c5d7683d01a5943737621","sha256":"e37e3d4a44d4ab1fc469b0ce7065697ff71efc8e3d38d40bb12c2a09d8317009","sha512":"f64c338e0c27c13fac4d0fb28c54e0f167f3c6af612e5f9f7b4a8425755898ade1762f6e24ecc8bf1ba66cff2fbe21d146ca05e7822b03efb2e68fd44948e5b2","ssdeep":"1536:CtMkiNEkq0UyrH2rRB1DWMpNn9GgAAsVjH4QLhNnjHKwPyYiUYO1L04YJ5DB4IDc:CtMJyyTMO1HYJ5DB4ID/4WFzRFlAZ","tlshash":"dc348597eef121457073d69c649bdbe1b72a0003c60dcebd779a6218cf4c6c469f6a88","first_seen":"2026-06-11T13:58:21.989861Z","last_seen":"2026-06-30T07:52:59.59921Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":131,"send":0,"wait":132,"receive":911,"ssl":135},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/css/demo_1/style.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.323Z","timestamp":1782389828323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/css/demo_1/style.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:07 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 21 Oct 2024 15:49:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 27519\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27519,"size_decoded":27920,"mime_type":"text/css","magic":"ASCII text","md5":"283f6d84899920c4a7bcce81e91adee1","sha1":"941a68c04263b6c4d36cc7c58ea8b3ba338f1db8","sha256":"743f9e3ac40f9e42c18df2381f7228b581de12ec0060b5450c7b4a2dc0076269","sha512":"91f8dd9e755002289c600851e600ab463e4d53cf87748f3eac882853393fa233e687d03180056358bd0250dd6e5a4ef38a00a59aeb605efdbac4c8adf0baddb2","ssdeep":"768:R9wdeemxIFk+el5jIGWS0ONFDPu12uvmDycm0yCygBeLJSQp0yYUxFwerq/nBu3C:R9wdeemxIFk+el5jIGWS0ONFDPu12uvc","tlshash":"f6c2209b5af230042452145cc7fe07113eaa0813ca2eddaa76bf264ddfcb39451b6f99","first_seen":"2026-06-11T13:58:21.995191Z","last_seen":"2026-06-30T07:54:05.03561Z","times_seen":11,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":134,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/js/jquery-ui.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.544Z","timestamp":1782389828544,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/js/jquery-ui.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:07 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 25 Dec 2023 14:53:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 37452\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37452,"size_decoded":37853,"mime_type":"text/css","magic":"ASCII text, with very long lines (2515)","md5":"fe010342cbf905fc736a769433949619","sha1":"d30d323a9ef7b1d166d6f3715c1532ba5659211a","sha256":"76b0782c1c0656d1a7cb5d3e5cc02de0f979d6335e8b2b914f06fdf2e96b6f9d","sha512":"9a8fc4fccf142a7f7e97d78ccf3d7d6d6a80e8e061428ab0cb2eec81090be0da185df09fe1abee74e0a37281a226704d58154ca3f239911a3fb139ba42457fdb","ssdeep":"384:OCwiEt7D/+vaW1eyHPPiF5fydQt/DS25S:tlEtHGhHUJDS20","tlshash":"07f20b316b432909ba1bd1a465a11bf7d32e1342ee2b6e7f64aa345cc3d54e0c0bf5b4","first_seen":"2023-04-05T22:52:02Z","last_seen":"2026-07-22T21:04:09.652164Z","times_seen":232,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/js/jquery-ui.min.js","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.546Z","timestamp":1782389828546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/js/jquery-ui.min.js HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:07 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 25 Dec 2023 14:53:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 253949\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":253949,"size_decoded":254365,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c73a28be5dff19936b9f8932e59d7e78","sha1":"3cfa29986effade6dedd94f0a927a4613ce2c5dc","sha256":"d30eb09abb6d25e97ea31e0ff20856643388ab1de6f345d97d10f8837c2cff84","sha512":"34ea93dac2b4580425d5216e599ee5d454e6c4bc8d04d08ca501dfbe47818ac78b4345ffaeff71ae444cf0bc00d893fc1a0d732196319d6f34dbcf3008c30141","ssdeep":"3072:kDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:gNdIVWjNS9cdzAV","tlshash":"a344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-08-22T15:32:24Z","last_seen":"2026-07-04T18:16:52.374323Z","times_seen":60,"resource_available":true,"data":null}},"time_used":1359,"timings":{"blocked":435,"dns":0,"connect":0,"send":0,"wait":135,"receive":789,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:09.990Z","timestamp":1782389829990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fdsbu.forms.marketingsbu.com.uy\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 25 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7172\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43947,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T00:27:34.124708Z","times_seen":239913,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":20,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/vendors/iconfonts/flag-icon-css/css/flag-icon.min.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.310Z","timestamp":1782389828310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/vendors/iconfonts/flag-icon-css/css/flag-icon.min.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 19 Nov 2021 02:00:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 33688\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33688,"size_decoded":34090,"mime_type":"text/css","magic":"ASCII text, with very long lines (33688), with no line terminators","md5":"59a25841d0d31eba4a72fa9a12a6b538","sha1":"06fa5894a523dc2017d02af639a245bd72c5a807","sha256":"0fe6690c98e11b16b97dfc9092e4efc228b8027b4518165ae235214a97658633","sha512":"0ae4b8cecdb290f9419b37fd411ad897c4cf2018e08a6955baaee6c053af367f8d71394c3e67c28faf94085b85ef85003f07cd86df535c5893d226f9001cd3fc","ssdeep":"192:A5B9y1dbzi85+DkROJup2j0S+iSM2nTMVZVJggtfQxK/dyeOKeOh:NdK85+DkROJup2j172nTeVJgAfQxOph","tlshash":"afe2f963da83e41fb60756337a167618a3df2492db814f2a34bf62b1d576244343afb0","first_seen":"2023-04-05T22:38:02Z","last_seen":"2026-07-22T15:59:37.688075Z","times_seen":4503,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":132,"send":0,"wait":139,"receive":263,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/js/jquery.min.js","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.539Z","timestamp":1782389828539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/js/jquery.min.js HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:07 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Mon, 25 Dec 2023 14:53:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 87443\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87443,"size_decoded":87858,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4feeeb323fa3e7b980d5916946b7bd5e","sha1":"e0d47dd7def31b3cd3dab43464c663382e8698dd","sha256":"e8c3cccfb58b82f8492042016898334e0623d643b563a2097492e7def5cfcfac","sha512":"416efd3bb56ea96bde5d0666b94a2e68b87d88de1c831fc891820e34a82604329d46b9c1fa0a06fb31195ef74872e5a0148f826019592b1d3abb45fe1640acfc","ssdeep":"1536:PRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:XHNwcv9VBQpLl88SMBQ47GK7","tlshash":"4783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-22T08:54:07Z","last_seen":"2026-07-22T02:11:39.107634Z","times_seen":921,"resource_available":true,"data":null}},"time_used":951,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":136,"receive":517,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:09.992Z","timestamp":1782389829992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fdsbu.forms.marketingsbu.com.uy\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 25 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7172\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43947,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T00:27:34.124708Z","times_seen":239913,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":25,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdsbu.forms.marketingsbu.com.uy/nwexport2/assets/vendors/iconfonts/ionicons/dist/css/ionicons.css","fqdn":"fdsbu.forms.marketingsbu.com.uy","domain":"marketingsbu.com.uy","tld":"com.uy"},"ip":{"addr":"169.54.196.205","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fdsbu.forms.marketingsbu.com.uy/panel/login","date":"2026-06-25T12:17:08.309Z","timestamp":1782389828309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fdsbu.forms.marketingsbu.com.uy","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 18:46:03 GMT","end":"Thu, 10 Sep 2026 18:46:02 GMT"},"fingerprint":{"sha1":"DD:1D:45:C4:7E:7B:81:DA:2D:B2:D3:3C:37:9C:04:84:C2:27:3A:3E","sha256":"24:D8:F0:B6:2B:D4:49:9E:1D:D3:DC:77:D4:27:D2:5C:9E:6F:DD:B5:85:E7:C8:24:D1:07:C2:F9:8B:FC:27:8A"}}},"request":{"raw":"GET /nwexport2/assets/vendors/iconfonts/ionicons/dist/css/ionicons.css HTTP/1.1\r\nHost: fdsbu.forms.marketingsbu.com.uy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fdsbu.forms.marketingsbu.com.uy/panel/login\r\nCookie: laravel_session=ad8547eb60841b64a49bec16f438a3fbde12f6ca\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 25 Jun 2026 12:17:06 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 19 Nov 2021 02:00:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 53644\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53644,"size_decoded":54046,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (306)","md5":"81e2900fb959aa3d9fe995b9dbdc4d18","sha1":"875cc7cd28cabc8940923cd19e364b99f065327d","sha256":"4cc329813c2853737c5cf44707ef0c7a70ff384c0fdbba39220b383f801bdc87","sha512":"8ccc060720322021800c574d4231403f11b8b5151374238945fe6ba41f83ae9762fd69e79cfade3658dc9d6fea69f3ca6241af5e773d02d6a75ead91cbe7989a","ssdeep":"384:W48xv3ReZQONCd3/imukfahfMm3isnvh4MbsyOPaGo:W42v3wZ3Cd3K6ihUm3DnvCMbstyGo","tlshash":"a033ffe4d6be0ca10b3ad0c1234abf54a739aafc684e0dd9f15bb48d71c7534d1929ac","first_seen":"2025-10-10T16:33:46.151417Z","last_seen":"2026-06-30T07:54:05.035028Z","times_seen":18,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":132,"send":0,"wait":139,"receive":389,"ssl":137},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"fdsbu.forms.marketingsbu.com.uy","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}