{"report_id":"256bf642-6399-412a-8e15-4be5065b2ef8","version":6,"status":"done","tags":[],"date":"2026-02-28T00:20:06Z","url":{"schema":"http","addr":"bancaprovincia.gl-assurance.com","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":0,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"bancaprovincia.gl-assurance.com/","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"title":"Acceder","dom":{"size":18570,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (750)","md5":"f15f4d2216131a5b9ac6eb21109ddac0","sha1":"f4a22e49c6b19f223416e6e6c30e07f3d6f72a3d","sha256":"c5a2c38a17cabd4ef6f4be425a6bb6d38b94c9f8911a30c5b59790d8faec7a47","sha512":"5433e148fd08786006a98918646ddc755c80cb188473ca29951c71853487bd132d9c1c428dcf5ad2188cbb3dffe1f09dc3674dac875c1bc695920777249b6314","ssdeep":"384:iFEFK2FRF2jFGmxDVb5b17KF51zD1VVJZbFxjbDlbDxzZ4j3rRbz7F7JWCAP1QRM:iFEFK2FRF2MZP","tlshash":"94825390b2b71fa6671784ad1ba7a7137624c007e1c9d8487fed26f18fb6c50046627f","dom_hash":"domhash0325116c34601166cbad33fa9f351870","first_seen":"2026-02-26T23:45:07.598287Z","last_seen":"2026-02-28T07:38:28.389608Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bancaprovincia.gl-assurance.com","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":0,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T00:20:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-28","alert":"Phishing Block","trigger":"bancaprovincia.gl-assurance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":24742,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bancaprovincia.gl-assurance.com","ip":{"addr":"190.8.176.86","port":443,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2026-02-28T00:20:07.004654Z","last_seen":"2026-02-28T00:20:07.004654Z","alert_count":12,"request_count":4,"received_data":113786,"sent_data":1912,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":1,"received_data":49155,"sent_data":572,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bancaprovincia.gl-assurance.com/","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":443,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c42ca28a2c7649764b8b25e78f04a49a","sha1":"f6fc3e447dad330b0fcac8180d7570d7f7fcd95b","sha256":"7bd2419c025e50ee6e83707a746080565e1e93c732b4ec5191f92a9eff9061f1","sha512":"d168ea69f32f230e4626410bf695e7a3bca7e336bbf8b2a73875eff984b97ea222d146337608cdb798cfff09a56f43b8827e77b8798e7133073bb22d9275d417","ssdeep":"48:dhH/Gcx7d75VmMvtVgw44P4wn4HWQb9TYSvPihkV+THk3iEtOIC07i:becGMG4P4S4HWIYBkQ0i0OIC07i","tlshash":"1491cf7aa5be7930067372eb5bcb52807531505b3002cd8d3e3c96841f62ca10bf2f9a","size":4387,"data":"","first_seen":"2026-02-26T23:45:07.60747Z","last_seen":"2026-02-28T07:38:28.395917Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bancaprovincia.gl-assurance.com/","date":"2026-02-28T00:19:45.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bancaprovincia.gl-assurance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Feb 2026 00:19:45 GMT\r\ndate: Sat, 28 Feb 2026 00:19:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24056,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"da2f9a1f3b41840d93c338c4b248ad8e","sha1":"a7deb30ce7fb0d075da5e9faf1d1b229cc776d07","sha256":"1334350a42e985e91b20ac233fdd44142bc77a0d61079a5f26fee4f915044119","sha512":"42401c8b1c459ea43d2bb3818da94a91a9c10a5dcae0ed2405061a87f1c60efd1a501e4f76fb60a08db0b3abd7daaacc90363d4cf480eb646756c6315216206a","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw9:6SqqY49t5qY4yf/qY45uOqY4P","tlshash":"89b21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:19:30.069328Z","last_seen":"2026-08-19T21:59:21.73138Z","times_seen":12742,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":43,"dns":1,"connect":9,"send":0,"wait":20,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bancaprovincia.gl-assurance.com/img/logo.svg","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":443,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bancaprovincia.gl-assurance.com/","date":"2026-02-28T00:19:45.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bancaprovincia.gl-assurance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 04:28:33 GMT","end":"Wed, 27 May 2026 04:28:32 GMT"},"fingerprint":{"sha1":"21:3D:2E:16:8D:0A:65:99:DA:51:96:26:DF:0C:09:46:E8:26:4F:92","sha256":"49:4E:73:DF:4C:E2:33:6C:97:35:6A:F2:74:27:FB:5D:05:C0:DF:9F:43:DA:57:A9:4D:9D:2C:A7:7D:8B:33:AF"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: bancaprovincia.gl-assurance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bancaprovincia.gl-assurance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:19:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 05:27:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2375\r\ndate: Sat, 28 Feb 2026 00:19:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6247,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b30b67890258d4ea9e17ae4343ebfe","sha1":"56531ce11a1fbcfc92abbe5a852c8c336e3997e2","sha256":"26faaa49a9fd0c54bfe926c37380e51b6860265370e29567cd832048cc7769e9","sha512":"1d125633719adeb20b2f91ecdeeed6e4f17f874847fbfe7c0982c406e9ddf9b26e7827d5edac2e578e60c62d175f1fea716701fbd5845364845a198fdf2e95e8","ssdeep":"96:VvnG0+TczhXsnViMvorsYINKO/gaD2KrAR9XL6RUPzDdJpO5qPdzLexyqOYgO7ZH:RaczKViiopINLQKkR9X2RUbDu2Oxy02O","tlshash":"69d195dc3aaace94f9d8d7b27f70a8945c22b4dea58905c8c2a1fc36b0c34d42d45ed5","first_seen":"2026-02-26T23:45:07.599923Z","last_seen":"2026-02-28T07:38:28.395227Z","times_seen":4,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-28","alert":"Phishing Block","trigger":"bancaprovincia.gl-assurance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bancaprovincia.gl-assurance.com/img/wlp.png","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":443,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bancaprovincia.gl-assurance.com/","date":"2026-02-28T00:19:45.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bancaprovincia.gl-assurance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 04:28:33 GMT","end":"Wed, 27 May 2026 04:28:32 GMT"},"fingerprint":{"sha1":"21:3D:2E:16:8D:0A:65:99:DA:51:96:26:DF:0C:09:46:E8:26:4F:92","sha256":"49:4E:73:DF:4C:E2:33:6C:97:35:6A:F2:74:27:FB:5D:05:C0:DF:9F:43:DA:57:A9:4D:9D:2C:A7:7D:8B:33:AF"}}},"request":{"raw":"GET /img/wlp.png HTTP/1.1\r\nHost: bancaprovincia.gl-assurance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bancaprovincia.gl-assurance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:19:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Feb 2026 05:27:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72066\r\ndate: Sat, 28 Feb 2026 00:19:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72066,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1346 x 752, 8-bit/color RGBA, non-interlaced","md5":"2ac67d62465e69ec4d043ab3ed497629","sha1":"da89c769d4ea3da3c93fdb3d87e6d86eec8de59a","sha256":"ef23bd4df94bc553e61e5ec91431691a0d342bfa73864765ca1d98eda71b24de","sha512":"51514911762b869c636a53d121ccf9b0fe43180fd5b9797f69c6a6ba0d88f2618ff1e84b537bf48abf0b74aab15c69abb160a334718ec79e336fe99d5d84532e","ssdeep":"1536:PkqhdPYWBv9AI3Jhst1x3TTz7rasSVLgA/rAAa9VyNviTGv:MyAWLBCfDf7+VkxFEYI","tlshash":"89630138fdda2178f518133a9258ec2d7ab5988d11c0138a21ffab355a600aece69d71","first_seen":"2023-07-11T01:47:50Z","last_seen":"2026-06-30T10:05:20.801596Z","times_seen":105,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-28","alert":"Phishing Block","trigger":"bancaprovincia.gl-assurance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bancaprovincia.gl-assurance.com/","date":"2026-02-28T00:19:45.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bancaprovincia.gl-assurance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 03:31:04 GMT\r\nexpires: Fri, 26 Feb 2027 03:31:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 161321\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-19T21:42:41.022109Z","times_seen":330448,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":94,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bancaprovincia.gl-assurance.com/img/favicon.ico","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":443,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bancaprovincia.gl-assurance.com/","date":"2026-02-28T00:19:45.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bancaprovincia.gl-assurance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 04:28:33 GMT","end":"Wed, 27 May 2026 04:28:32 GMT"},"fingerprint":{"sha1":"21:3D:2E:16:8D:0A:65:99:DA:51:96:26:DF:0C:09:46:E8:26:4F:92","sha256":"49:4E:73:DF:4C:E2:33:6C:97:35:6A:F2:74:27:FB:5D:05:C0:DF:9F:43:DA:57:A9:4D:9D:2C:A7:7D:8B:33:AF"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: bancaprovincia.gl-assurance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bancaprovincia.gl-assurance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:19:45 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 26 Feb 2026 05:27:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1587\r\ndate: Sat, 28 Feb 2026 00:19:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dd217fd869e48f949ffa274189a9e55a","sha1":"72e0f31519b3e210c7b4fa2a1dab675dec1e1938","sha256":"db55140fe8ae9e6f2159b740321b153e0f65cbf4a895364c6cd4da6a109c029d","sha512":"e777a7b7deae415a771460edf85a323e4d14aca686d70082b1b8fc8d693ecfb7e57c1def4952f3c1df5b8d4f0a5864f71869e4c2607ea1b5bc749798bcfae8cc","ssdeep":"96:jf8672eASaq+fE1F1xIOwq382YkremDq4xXZ/Oir:jf92ePS+PSOwm8IremrxXkm","tlshash":"ea621d40ab21e54bc5e749327b2776fb346114c5acfa1afdd038fe7acab8101b5815e2","first_seen":"2023-08-07T12:38:11Z","last_seen":"2026-02-28T07:38:28.392166Z","times_seen":53,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-28","alert":"Phishing Block","trigger":"bancaprovincia.gl-assurance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bancaprovincia.gl-assurance.com/","fqdn":"bancaprovincia.gl-assurance.com","domain":"gl-assurance.com","tld":"com"},"ip":{"addr":"190.8.176.86","port":443,"asn":52335,"as":"Colombia Hosting","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T00:19:44.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bancaprovincia.gl-assurance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 04:28:33 GMT","end":"Wed, 27 May 2026 04:28:32 GMT"},"fingerprint":{"sha1":"21:3D:2E:16:8D:0A:65:99:DA:51:96:26:DF:0C:09:46:E8:26:4F:92","sha256":"49:4E:73:DF:4C:E2:33:6C:97:35:6A:F2:74:27:FB:5D:05:C0:DF:9F:43:DA:57:A9:4D:9D:2C:A7:7D:8B:33:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bancaprovincia.gl-assurance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.29\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 28 Feb 2026 00:19:45 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19046,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (750), with CRLF line terminators","md5":"a2ae7b0cde45ef18307591cbb99e955e","sha1":"900b51568cc659df9568e78164b7a88678d8721c","sha256":"5bec3b6eefe2abd0a491cb140a9bd3d212c7f5985fff1c8727c846ad5572dd96","sha512":"fd9c3bd8e4d4e2656772f7af6e1a697f556b3ec6d67c9f256514841b2cd14415c87706223f874e12ee1c150d34f216404a677d9a9a2fbcda5c329cba2b47d33d","ssdeep":"384:AAVMG1oO8GQGcmtMQceOc88AEGMouGDsGOoeETu32IGemMmA50DvVQxgc:AAv1B","tlshash":"19823f90b2441f6a9237c5ad1b639b16fb19c007d28655487fec27e34fb6c14052babf","first_seen":"2026-02-26T23:45:07.606502Z","last_seen":"2026-02-28T07:38:28.393094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":413,"dns":133,"connect":135,"send":0,"wait":185,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-28","alert":"Phishing Block","trigger":"bancaprovincia.gl-assurance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"bancaprovincia.gl-assurance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}