{"report_id":"3dad6917-cafe-4c7c-827e-966b862abb2c","version":0,"status":"done","tags":[],"date":"2026-10-03T16:52:01Z","url":{"schema":"http","addr":"redsys-transactions.sbs/","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"172.67.192.37","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"title":"Pantalla de pago Redsys","dom":{"size":15111,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f91b49e71aa8dc950e601b862c2ac069","sha1":"12cfe87e430ebdc13316a0625a68a0f3c4e6029e","sha256":"50a284ce845aace0715e913ba3a03abc10f3632eeed807faf1ef4528b8e64c07","sha512":"dbdac645b662787f056451f47377ee05b00985585a8901556b79ef2b947009a5b37511c4bcb5b84d700fb7273ee21c331219c349ac2d2a5fbf9b1e6a7eb6b0ae","ssdeep":"192:ZfuelXODHxWyJdW26oBimd50gN/nqY4+WVCCjG3SdgygqcTz64JgrAxQTA3:Zf7l+RR6oBiYfuVgqmPJg6F","tlshash":"4362849578f601b26593d1adbaebae072e61c503d70a88543e9c07d44fc7dc6cca36ac","dom_hash":"domhash8a5edf4d66015414babf2fb899c2a05e","first_seen":"2026-10-03T16:52:05.554005Z","last_seen":"2026-10-03T16:52:05.554005Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"redsys-transactions.sbs/","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"172.67.192.37","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:52:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"redsys-transactions.sbs","ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-01","domain_rank":0,"first_seen":"2026-10-03T16:52:01.983047Z","last_seen":"2026-10-03T16:52:01.983047Z","alert_count":90,"request_count":15,"received_data":283399,"sent_data":8717,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"sis.redsys.es","ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":115605,"first_seen":"2017-01-30T12:39:53Z","last_seen":"2026-09-29T09:36:56.789355Z","alert_count":0,"request_count":9,"received_data":146763,"sent_data":5295,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6800f04f93251f80dfd53a4502bb8c5","sha1":"e76dd55dcc42cfbdc0d10874c8beca5eb0dd660f","sha256":"eb0c16fc1dea4a326a8b20d5c8e4bfe7978bc33bdee27497ec4a53504df5521d","sha512":"38d768f8b21741e00b31931975251ffea051bdbbba039a8bff21f81239824b32e67c8aa2791186f85c567d3f331c3cfa829fc3e146700f594a2816f38c6fb0a8","ssdeep":"96:0oG/nqTlqWV+WVCCqa7q3fqMggoWmgqM3Tz649NhPgrAfpQTAY:0N/nqY4+WVCCjG3SdgygqcTz64JgrAxm","tlshash":"0991439b797705e14ab7f2bb2bdb4201253641033841e998bf0c87055f99e49a4f7bec","size":4474,"data":"","first_seen":"2026-10-03T16:50:49.322901Z","last_seen":"2026-10-03T16:52:05.590094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999.css","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.338Z","timestamp":1791046292338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/9999.css HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BV28s3GNs6%2BUmVvy3hjlkhuw05pFyJDFeIbgDhXVOLfefupqCv3y%2B%2F2dprUSiSgNxUgj2kYPY2v2nJiZj5YEnhSwPwZL3BqGulTSwz9ApkxohUyUt8qIWFqdoVNvRD1gfPkEaM4m9IxB6Q%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a44d73bf19490daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56945,"size_decoded":13587,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"344dd3836973e5ede2936ec44d582b43","sha1":"0f391c0970107a97454895c86646ea4a9ba696db","sha256":"8b2871c33d83eab0910f072a3a5fd4dd1de24f8487345fdf96da83385aac77bc","sha512":"c68e1a9478ea6e63003de67f2d95be3fe58959e63d070d80ef526b6ec03c6c784c9c93bc74e226e2a9bcac89d24e52359707b62ef9cad262fbefce290122c423","ssdeep":"768:lacatQM/BlBUO5cEB4ZTBPYPUNQd/FUhLPzI7pvZ0KN1HK52EO2672Y7wzX2edN2:lNajV/UhL7I7/LN26CY0zmednzrEoE","tlshash":"cd43b8a9e682240e73338668a3f73765ff3d40139b0e95bdbd683560c3d95682971acc","first_seen":"2026-10-03T16:50:49.318116Z","last_seen":"2026-10-03T16:52:05.558611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999verified_03.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.355Z","timestamp":1791046292355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/9999verified_03.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6npOrzESPga2f0Sjmfxu7HsLuysPd0t4%2BsSE9XOY%2FEcU3mRe5VQThDsliJe4wn4Jq4K9DcIiU0oNS%2F%2FXMQAij6I8Ozq9oq62zOUAm8YGiK2NkgNUolcfSNt1NlUaQch%2BoQUMOvyFk8PiXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d73bf39550daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9821,"size_decoded":10512,"mime_type":"image/png","magic":"PNG image data, 119 x 44, 8-bit/color RGB, non-interlaced","md5":"ffac613947da92855ee566c6dfe8eaf1","sha1":"3a7f067522384f9504c9d6741484c0d41bfa2df0","sha256":"85ff63111feb7fd8127181277a9297e8a8e3fa227cfa9890db81291ac25cb74b","sha512":"49d58f12608dc7175615ff454f527d337702b305ee56e48dea9ffac2c115c8cb473578e4f5d608d0af48b1eca3a58891fac746f2f06826660178a39bccac7341","ssdeep":"192:hGbMztF7Rn5Ir4aUqnjqFKAAHkNKaGJca5GjhK0a/sFT:hjx/yrWqnOsAAoKaGJcSGj80c8","tlshash":"7712b0571b10f9cad5ea6dddec541486214f8f09779a8b438c57ce8e0c346b8980298f","first_seen":"2024-08-20T05:01:09.98553Z","last_seen":"2026-10-03T16:52:05.563058Z","times_seen":36,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-visa.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.716Z","timestamp":1791046292716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-visa.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:05:39 GMT\r\netag: \"8ad-65936487a2e2f\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=108890\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 1184\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2221,"size_decoded":1723,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddd3db46b033701ab8a230050ffef054","sha1":"4cba84735997e8e0ee25f5196adcc24ad412ef4d","sha256":"c55c73825d52496fdbaeb749605cba985d49622d5f7053383188a9f32cde7ee0","sha512":"ae7b8242a11938b3db5b1d7ef85f16c87c28dad122bbea217438c931299cfb8921f35018c9c75116f233e7b114b9d69c67a489dc879e8c61f047774f05e7008e","ssdeep":"","tlshash":"3441868cf1259dd98a0ec74875e6a9568119309fd2ed8a2ae6f81cb1ed004d02334f9e","first_seen":"2025-07-31T22:28:50.732029Z","last_seen":"2026-10-03T16:52:05.564677Z","times_seen":81,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":14,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-mastercard2.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.722Z","timestamp":1791046292722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-mastercard2.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:06:06 GMT\r\netag: \"2a56-659364a1442c0\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=128100\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 4003\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10838,"size_decoded":4543,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3aa231fb37a04100a8872ac834bddeb1","sha1":"feb823fc814ee068d3f855733da6c37369adc4aa","sha256":"b28c3d47ac2ac12abf0eabf8ba86a62bd11ef61851c00500fff7fb80d5455c9e","sha512":"1acd8efd57369537f2c780ef07ab4e77bedba11699fc16469364fa57d11ce7c1fafdb12d6bd1904172c4c96a71a463a9feaf7df030926010c696ba7098f1ff68","ssdeep":"192:QYl0xUVSnFqVo1xEeSdu88y/NysZ6lLrVIQ:R0xUE1sdu88ylmLR3","tlshash":"1322b6eba3f472fab7cad72ec012846139c630be3526970da4d957991727ce040ede42","first_seen":"2025-12-01T21:14:42.236859Z","last_seen":"2026-10-03T16:52:05.565934Z","times_seen":77,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":22,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/sis/graficos/logotipos/comunes/9999powered.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.730Z","timestamp":1791046292730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999powered.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999redsys.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 76\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbGhpBb%2BLiz9pehciNUE%2BvoIMd079HIPkNeAo50pGgh9aP5dev3Sy0Cw4UgvopbBLq%2BoLnbaIaxfg7Jw%2BvATt3q0bLN7NxUi5L0cDBElc2o4dPvxUyGfUzz6E6%2But5tFJywVAyrztVjBOA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a44d73c199bf0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":849,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a2ae3eaedf7f44998f3639756a1725cc","sha1":"2616e0e695487e0f4fc5ddc18c57dcf95ce5851a","sha256":"860b53ed6ea6a0cf602fae632cfcd28dbcf637f85a8bee28d2ee9c6cc9081669","sha512":"e950a920950fde6d4786cf81516355080821cca1d59253cb46b829f99f1aed7ff2e1618c93664801f441258923199b275d8b853baa3b657861cc238f31da9391","ssdeep":"","tlshash":"2fe0728b82f20a530291002007e0b7801c0a270f0acaa22ab68d732a5fc0181c8872d8","first_seen":"2023-05-19T23:07:51Z","last_seen":"2026-10-03T17:25:02.828469Z","times_seen":529,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:51:32.234Z","timestamp":1791046292234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys.htm HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlast-modified: Thu, 09 Oct 2025 23:51:38 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ButcAVXEs2rAY3RTjh0gJAMoJYRdxLFyOifS%2BD%2BN7jn2M74a2cThBII0hrJnqovtGZoVY2uUgrNRki55v%2FZP5MAKzU8lkDUFPONLD4OTpPnKU03UwZSZ6zkGql15F7UVVV%2B9NK%2B0rgNGlA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a44d73be79330daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15551,"size_decoded":4831,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"08fe1df23ef756d5a99f13ca21d462e8","sha1":"0c37304cc8b63b06c85c3e9762ef979fe3f00afd","sha256":"dad035341c943114d14c3993ca1ae6ec2786aab0b27639fae6be51dec6ee2502","sha512":"74a476c83415f97bc568e00947020dee4af58e290f219925ef61af081baac8454419f4bfe83024b5971efb60e194567bcc34ea6d65f95cbde3a2e80473e1b7df","ssdeep":"192:NUb0RweC1of4ACB5g42mW/BrWB10Y0edWi4YFzc92eh4Cg8h9QTi:NU2TQACBZN0idIkg92FCgk3","tlshash":"5d627399b4d1116255b3d3a9eaa29f0aff228213d30641543eec27870ff7c45c993eac","first_seen":"2026-10-03T16:50:49.312322Z","last_seen":"2026-10-03T16:52:05.568445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/logo.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.349Z","timestamp":1791046292349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/logo.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61OeJDCgK58wJYJGddte%2B%2BbF%2FlM6RyJRhntq2M4urIJ3X3t8xp1vX%2BKWCNnC2bkkskt2BALp7WAOmbcLR03THkjh0VYdKnN5jHb7PiHHtSz4fVeKoSYJ%2BIafzp%2BmmN140iITEJUPVDiaaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d73bf39500daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14460,"size_decoded":15154,"mime_type":"image/png","magic":"PNG image data, 448 x 72, 8-bit/color RGBA, non-interlaced","md5":"c3d8c544ff8f35ebfd9f419e189f0430","sha1":"9754e2b3504915de3f67839d7bddbabbfcfa1829","sha256":"c6f5d443a83ae94f4f13da4c50c38e05fbe0d34f608f346d5efe5af877e3ab58","sha512":"72e5e1af64ca67c8f30f315a1e92a70479390b4245c78991115c9a1440ec306e9115e05a7d15397a9266be09a72e7bcc9f92eca3eb675b9ce21e2ce248841d74","ssdeep":"384:DWZPJoyFSRj4EZ9CbyxVx0HALqibzykmYYBPHVgNVPKL7kxmL:CtSRjdZ9NxrJbw6HS","tlshash":"3252bf5ef2dd0c667b1a53529852338417196077318ceaee61ef62f6f083423cda17e5","first_seen":"2026-10-03T16:50:49.297995Z","last_seen":"2026-10-03T16:52:05.570643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999redsys.css","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.335Z","timestamp":1791046292335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/9999redsys.css HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUkBPGhQRkN2SvSq0H9KrhWb%2BSHfelrAofysn1NygtiRk0jj%2FhYDomGtutXl%2B3JTJimxUQvIikG%2F0wIbezvvHHNiQgJ1yu1NetSF7s%2FDvLCA%2BQoO7vP2lFFa4dLb%2FfW0R2PIIzA3QrFgdQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a44d73bf19480daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83635,"size_decoded":18684,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (492), with CRLF line terminators","md5":"ddd89ac7a56d5e03e95c76ab28db0145","sha1":"b0c6a6c4c62dcceea90153b086e4bfd27a2586f0","sha256":"1a7043e29dfdab8cd888ee3c041ecfe0aa783fb2c58d5d1c61a93b7d724c5fe7","sha512":"6e5491089650087af1ced83b20801a4e0d8a52b284edc73bab5f68d818f88931872707e9cd743cb9aed7b1acd960eeae4b023574a01824312b15fb97e4e69811","ssdeep":"768:yaRs/PwWKmc8cqvsL96EO/RozGOv/K8yIH9jOwCCvPNMQ4QcogoRAlJTNv+u9jNs:ya2rse/WLgKoGvS7iJtdCfreyE5J","tlshash":"6f83e9a9d6463c4eb323d61877f127e1be2c8062af0f5a7d75693128d3cd2582d726c8","first_seen":"2026-10-03T16:52:05.573793Z","last_seen":"2026-10-03T16:52:05.573793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/sis/graficos/logotipos/comunes/2100abrirpuntaarriba.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.708Z","timestamp":1791046292708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/2100abrirpuntaarriba.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 76\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jscvBHxaS%2FkZQIWsTmppalblqPT3j7r6lPXFc00R5uLxNsq6MOAJwVdPux%2B78njkXkQCBc1g0eEslQm%2BrAoaXxm6Yk8SpTweuiebzGQBsnJwIoRZ8YS%2BD0kNNlgd%2F3tfLjR4A7ozGVTFWg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a44d73c179b80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":849,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a2ae3eaedf7f44998f3639756a1725cc","sha1":"2616e0e695487e0f4fc5ddc18c57dcf95ce5851a","sha256":"860b53ed6ea6a0cf602fae632cfcd28dbcf637f85a8bee28d2ee9c6cc9081669","sha512":"e950a920950fde6d4786cf81516355080821cca1d59253cb46b829f99f1aed7ff2e1618c93664801f441258923199b275d8b853baa3b657861cc238f31da9391","ssdeep":"","tlshash":"2fe0728b82f20a530291002007e0b7801c0a270f0acaa22ab68d732a5fc0181c8872d8","first_seen":"2023-05-19T23:07:51Z","last_seen":"2026-10-03T17:25:02.828469Z","times_seen":529,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-mastercard.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.719Z","timestamp":1791046292719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-mastercard.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:06:06 GMT\r\netag: \"78a-659364a143320\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=158536\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 816\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1930,"size_decoded":1354,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac7ffd116406d53e757ee8f435eb010a","sha1":"895ceffc73954e27a889ee24d91836593f84ccb9","sha256":"b15da0b3abf938892d65e92a841ba286fa2993b86787adabb3f256fa14cc8179","sha512":"f115e874e9387d5ef511c045e2b1cb67460d43fa9a3548bbb471d109d170f17014b691c87d53dd523139a9686ba99e68ceb5d071a621b143877a4b94760ee6c1","ssdeep":"","tlshash":"6f4162d867a86b30e942c375f1b6a403550868b2bec3068cfd8d7574bf202e94e5d568","first_seen":"2025-12-01T21:14:42.193226Z","last_seen":"2026-10-03T16:52:05.576499Z","times_seen":77,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":16,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-dinners.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.725Z","timestamp":1791046292725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-dinners.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:05:39 GMT\r\netag: \"fda5-659364879bce4\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=158721\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 21590\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515750\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64933,"size_decoded":22131,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fa9c56ef47682b96767a793502dd655","sha1":"c4835e1ce0cb83a8ebc7f252b1eb3a19f00a49db","sha256":"5cbde033daaa44bb1aeefb2f879f2cc5d9f4c107543078dfa9911cce618ecd3b","sha512":"f8d982fa478519521a527b1b2f57433e18a396ad0374f8bd57d3a7680221ace016883877dc6f98cc0dd81e289c29f03a5a3804ca661834524577be667f7ea33c","ssdeep":"768:R4ZC9ImCEHIsJYLTRxU7/iCXrUpeiKNzchdngT8aLRQonmuWtPc821A46eqG4VDq:iZqDIMLJsRuHTBe6n0HmAJ2X","tlshash":"ca53c9f501bd97f6a6491bdc04122452fe9114ff3eb0f2e8a25beaf46f26164c484cb2","first_seen":"2025-12-01T21:14:42.255304Z","last_seen":"2026-10-03T16:52:05.577504Z","times_seen":55,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":15,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999favicon.ico","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.984Z","timestamp":1791046292984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999favicon.ico HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:06:06 GMT\r\netag: \"10be-659364a12e710\"\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=156145\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 1586\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.551575b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":2125,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"288649e7373327328f6b263fe3d1f5ba","sha1":"da841d89aa660291378f3889fc046c2923ebcdf9","sha256":"eb295977514ed21f671543c162c7c14da9e78fb6eb2cda02426d2db33264fc14","sha512":"7b96d939580058af4f0bddfbedf9dbbfbedff3b9b2c6b9ee4a8ddb5e9f705d8d501a22a66dbef8a2aa8ca14c620fca0747362edc60774626c12d0b4f3e7a2502","ssdeep":"48:9knygfuzgkJMmWWaxWkBLc3Gqn/fxPBkdQS874cow1/w6GPvv:9kyVnJMVWaxWwwj/fb8g7zow1ot/","tlshash":"1f914fc86644d05386f42369d00e66f20923ee5ce59ccc031539bd9f7bbf64a9a0327d","first_seen":"2025-12-01T21:14:42.256297Z","last_seen":"2026-10-03T16:52:05.578442Z","times_seen":106,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/discoverDiners.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.359Z","timestamp":1791046292359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/discoverDiners.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nT7Igx7wychMs8UQM6FY2VoosgkuVs7zqSJ0bYBxhuEo1OXPL7VIur1rGB7WfvBpaYFErzTGMtFokEFttmMcqKqYQsDiGDep4ISl8YqNoy7KxZedqt4%2Fbs6XEW9a0G3IGM8HCCelpty1aQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d73bf495b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4669\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4669,"size_decoded":5352,"mime_type":"image/png","magic":"PNG image data, 89 x 51, 8-bit/color RGBA, non-interlaced","md5":"4d1a8880e6797782eb27ead53a89bc0b","sha1":"55bb379fedcd629b817d4f11e29c545a4f69e18a","sha256":"6953382db60534203eb1c9c663ebb5bb2730ce31e08c70ae85aefb600d2a2164","sha512":"8bd29bb697c6d082091e02e98ebfde6a5509cedfd4304dc969c0e45ccd641f1d4c7c0750c4010b27f79f8b466d5f3f4b4de568d7d58b5b78a1927aa8736cde6a","ssdeep":"96:yYnj1NzWhuQgZJ3b3/GJX0XHuCqNaI6iIvGKn2ljoA:xnhR2CZJDGEuUjVn2lEA","tlshash":"25a16d65fb09d07db2588940522245e4abbb8dac4e00fb6ec82c5f1738951882251dbb","first_seen":"2024-08-19T15:15:25.999176Z","last_seen":"2026-10-03T16:52:05.579274Z","times_seen":58,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-upi.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.728Z","timestamp":1791046292728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-upi.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:05:39 GMT\r\netag: \"4ac9-65936487a16be\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=161096\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 8151\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.551572a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19145,"size_decoded":8691,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a0bbd7c64798260d075ff21f10dea0a","sha1":"226931e65930ebeabce39f77a873b12dced588ad","sha256":"9aaf93e89274fe2ff690c2c4af79d23fbdffa63e2f3391ee8724ced2b96bb32a","sha512":"078b9a708a45f944e89dfda241ef4fa6ca75911ac924fe40839ee3e70ccf79204018cbfb868f95bd54832f75a6fd38928ac991698582ca75a81ce0009febe555","ssdeep":"384:NQDJ/zvG5QZA28VWhSsyxY2q0M/zalqElD:NQDJ/zvyQG28k4jqhacM","tlshash":"2a82f9dc12bc93fdb6466be4901768527a9128fa7f50634cd0b55ad82b371e8c4a8cb3","first_seen":"2025-12-01T21:14:42.224333Z","last_seen":"2026-10-03T16:52:05.580105Z","times_seen":52,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/MastercardSecureCodeLearnMore4.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.353Z","timestamp":1791046292353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/MastercardSecureCodeLearnMore4.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2gKVtpUpWs47blCixoRptcJKAYGQSp5Q2gVlkUtcR5sOQb2%2F87qxHAAnP%2BsAgtYq6pq4Qa4otQJme1EKiqEtMv0zmzwz9NI3WqQH8OTantnxV3iU0eNWs1N5QscXoIqvig07843nwBVePQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d73bf39530daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 991\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":991,"size_decoded":1675,"mime_type":"image/png","magic":"PNG image data, 98 x 18, 8-bit colormap, non-interlaced","md5":"405b302e86f9da2aded07df6fd912385","sha1":"d1a47ea1116bc56bc9682f567a8f5a6e09c72cd6","sha256":"c39374a7f29edeaa05826ededd19aff1ba91d4befd764f09f9005516f4fefef5","sha512":"7b26501e2992e1fd1c224173052dc2cee586ef896fb949520d411103fb8c98bac8850f09212372b7887c6b4f868f7299e67bc13e2f7d090a058477a654733957","ssdeep":"","tlshash":"211184827e449e28dc9d8cb405450635fa0ff48ce626520f482ad07a106cb5dc41d99a","first_seen":"2025-12-01T21:14:42.247166Z","last_seen":"2026-10-03T16:52:05.580939Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/font/Roboto/Roboto-Regular.ttf","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.396Z","timestamp":1791046292396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/font/Roboto/Roboto-Regular.ttf HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 75\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emv56IBtXn0s465xUNxe5Zk4qnEiOY0evGpUNWAVXOsmIdZIe5ihkfvsiw3HOUJX7hetE1P%2BB03mj7wuZDUA6Pms5gVrNb5F%2FTovbzC4Rz3SMS9NZQYKLY6E4QjXks0lEeVyth1fHr2rww%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a44d73bf79640daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":846,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a2ae3eaedf7f44998f3639756a1725cc","sha1":"2616e0e695487e0f4fc5ddc18c57dcf95ce5851a","sha256":"860b53ed6ea6a0cf602fae632cfcd28dbcf637f85a8bee28d2ee9c6cc9081669","sha512":"e950a920950fde6d4786cf81516355080821cca1d59253cb46b829f99f1aed7ff2e1618c93664801f441258923199b275d8b853baa3b657861cc238f31da9391","ssdeep":"","tlshash":"2fe0728b82f20a530291002007e0b7801c0a270f0acaa22ab68d732a5fc0181c8872d8","first_seen":"2023-05-19T23:07:51Z","last_seen":"2026-10-03T17:25:02.828469Z","times_seen":529,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-discover.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.726Z","timestamp":1791046292726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-discover.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:06:06 GMT\r\netag: \"8156-659364a1417c7\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=210079\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 18395\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33110,"size_decoded":18936,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2a951c63ccc511d9e21cae68935b395","sha1":"913f07937ee9137a9271e5de6517325093483991","sha256":"762e4e272e3c77b1c1dc66ef8d6c0c694cb9f9943b5fc7d4c10d7f39bfd53cbb","sha512":"c4ae5e2d7c24cd9f5677f83d9ffe3c0e98f4a597d890b5933e3c48c1c64f15eefedee4fc9c43e47842ec20b0f59d7dcca9aab5f3650a8b10b6765d79ed4feb4d","ssdeep":"768:VXklWtPDOLIo+PiwLTpRnTQfEjOhdEKw0/geZjK9Y:VUlWthHPXAMIEcIeJK9Y","tlshash":"e5e26ce2a4a859e4f496939990ac715d0a9e30ff7de3c3c8b2dca1967f311cc446c897","first_seen":"2025-12-01T21:14:42.194566Z","last_seen":"2026-10-03T16:52:05.581772Z","times_seen":55,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":15,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-jcb.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.727Z","timestamp":1791046292727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-jcb.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:06:06 GMT\r\netag: \"eb7-659364a142767\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=107501\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 1362\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3767,"size_decoded":1901,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87a8e7e8894c1016542e5d4ca8ff9a08","sha1":"f01d333b8ea3569ae3526383e266a2c226238016","sha256":"76e669b85595d46e0ddb2fe368580a5631e789c8cfcf78316ed2d10feb7d88c5","sha512":"2a662a9bc55b47ba0cc6e0cecfe7b098b57a31dbe46ca2f5b0217b798e8d6cbf3a00c004645190cbf9fe3995efbafea24e609d36c172b3ca66a12794507ac170","ssdeep":"","tlshash":"e97192ead0fd72fceb0083ed612d601e3e9934a37a4140adf0fe2e8c57121f54858a82","first_seen":"2025-12-01T21:14:42.223222Z","last_seen":"2026-10-03T16:52:05.58258Z","times_seen":49,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/2100.css","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.340Z","timestamp":1791046292340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/2100.css HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVdJ7b29RmZ5OZyFs2%2FNRic19MfzL1wmpyNLUSPCeFlnd%2FYZ%2FNNwU7i%2B2mCdnW5yZe0MHlHiobIBP40qFUnH8CYXqCZLhlXNV4q0LoK%2BLoq3Uhc7%2FfpkiOjuxP9gZTKovj0Y9DCRcN21rA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a44d73bf294b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2441,"size_decoded":1662,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"d501c07a12a834eac4e7a86cb9dc7dc3","sha1":"c106f6274aba39ec0c724fbd2cb3ff3cb5e22074","sha256":"45eae7f138479a8971d2f124cf2d279fd73aefc269e91f931d5a0cbee72ab73c","sha512":"884f691a87f66b687dda80c971cea5a8cedd7d9abf5c36cba6d378191c377248786b41e279adde76643492e2b9a9c5cd4441badfecda2516852ac7a97e5d2162","ssdeep":"","tlshash":"1f51f0b892c66d1a1336490f127769e37b3700a18c1d3bac7969316017dc2caaaa82c2","first_seen":"2026-10-03T16:50:49.295838Z","last_seen":"2026-10-03T16:52:05.583429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/jquery-3.6.1.min.js","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.342Z","timestamp":1791046292342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/jquery-3.6.1.min.js HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ius0TnnpzKP9h7eb%2F%2B%2BKi4nPLewRmR7oV%2FFgBIpomEYzzrnr1Lj%2Fe5qVIj9PwB0YMqetkYvfyR731kOMrPYcVAaPC2NgB%2B5zNcbcJ4NOZ1oMOOdvzQinedoer%2F2eZCslvnP3B0EtVl8Wg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a44d73bf294d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74403,"size_decoded":27909,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65535)","md5":"0e0e82c87191e88a4c6f74052f2acd0f","sha1":"6dbb24cc1ff4beaf2a7f3a15c03528f08ea41ca2","sha256":"50e66c8e2c52c07c1e3e6b214fe1b3b05ed72df044a2b1ecc70851ccfc9fa370","sha512":"9cd5964d3aae4411f6b66ebf7b3a1fc187bfd7b2d34f5ac2e2f88d150d717ae6eef111372ba57c7bc0292efd2ee821102fa578125a936f6f37ae685274cc3b48","ssdeep":"1536:gjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwC:gdeIygP3fulzcsz8jz","tlshash":"e773f8ddb2ca702257a720ba007f610bf136099d6c0d8510f269d8e9bc7ca4a427bf7d","first_seen":"2026-10-03T16:50:49.291821Z","last_seen":"2026-10-03T16:52:05.585096Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/9999verified_04.png","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.357Z","timestamp":1791046292357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/9999verified_04.png HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSpRsuH1VzLKBia4gT%2BgQkEdzw8Hucw5GZuVp5ZO%2B6ZipUNunsBW7w6fCHtHZmY6kbItE2V4%2BCXzE7pWrjwspt3OHYNa8s8xxS9kQH5QfUICWLsAoRAx%2BBe%2FtgUpKxgXxJR83KxjOh5lhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d73bf39590daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5727\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5727,"size_decoded":6418,"mime_type":"image/png","magic":"PNG image data, 73 x 51, 8-bit/color RGB, non-interlaced","md5":"e55ba7adbbde3229ddc0a980bce37c32","sha1":"15779f31ae7cce67e2efa51458ab013c9850a443","sha256":"eeed6aa0207052df7e75a49441cbc946b4f97d13f4ce828508b8bafacc771b47","sha512":"8f11ef2208b90460ac489043627ede1dfbe400ed98979fd117a33d345e8f0835b83f10955ba1c679b9edc5563efc10a5e2610530bd5e046e4eb783a0d4634103","ssdeep":"96:p2XlAYgpoUYO2uqreryAXeQje0kzj3fCwCc9TUN6HruFadIWp0ol:AAYco14yAXTXCawCc9QNECodIWum","tlshash":"94c19e42fa90eb0659bcd1c515f30965452b2395db9be9e9d06fcd01042f3de8a83cc6","first_seen":"2025-12-01T21:14:42.181211Z","last_seen":"2026-10-03T16:52:05.586816Z","times_seen":51,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:51:31.880Z","timestamp":1791046291880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:31 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlast-modified: Thu, 17 Sep 2026 15:24:21 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9ivCq8exVnkZAfsZuJuzFQCCmkH4WzbqIrezH%2BVE5nASW1f9aRMiWBb4MrBknQmifPDRqYNX6ywHxPUN2aYJ%2FSNyjtEGUH57nWsILlysPNQ5nercWbGzXCpnOdy6NLsEuJRYpe0xIMBVQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a44d73bc78bf0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T20:32:31.651125Z","times_seen":18807218,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys_files/VerifiedByVisaLearnMore4.gif","fqdn":"redsys-transactions.sbs","domain":"redsys-transactions.sbs","tld":"sbs"},"ip":{"addr":"104.21.73.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.351Z","timestamp":1791046292351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redsys-transactions.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:42:51 GMT","end":"Wed, 30 Dec 2026 16:42:50 GMT"},"fingerprint":{"sha1":"85:6F:39:2C:A4:91:7E:B6:07:FA:31:82:F3:2A:7F:97:F9:97:27:90","sha256":"FA:2A:30:00:17:92:66:70:5F:BE:BD:55:79:4F:CA:50:37:82:01:C7:D5:F7:C2:0A:F9:07:01:74:57:FD:68:48"}}},"request":{"raw":"GET /shop/Pantalla%20de%20pago%20Redsys_files/VerifiedByVisaLearnMore4.gif HTTP/1.1\r\nHost: redsys-transactions.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 09 Oct 2025 23:49:28 GMT\r\nage: 76\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIgf74hDoxQY39Jjz3GLqGc%2BfDEZ%2FJP2NPhswxHQgGogtsqw31RD4YCQ6MHpLZNdm53FgqdfmfJgyhTGEcRDToa3BjLv9EfxnVd9uauwjfzDvUG2LoZucAPhFSSbmNtG0TCqOXXy%2Fl2g4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d73bf39510daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3727\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3727,"size_decoded":4414,"mime_type":"image/gif","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"4f13c48c6b886417719036073e107cae","sha1":"60641c7a49d0b20b051b30691c9785b29cf74bb1","sha256":"386dbe22d43d7fa3edf67764076f8da8a8a167151b08b4cc5af99ae5e261fe6a","sha512":"6939513ed45401d7ab47746649d7e4e0d85316e08c38de595a88f69134e59feaf19a9b68bff68383638c05876478bb308cf159c0f2b52083fab9583fbc8ae2e5","ssdeep":"","tlshash":"2b713d5f7040e8418249a62200e5f43b44076e40e2f8e57ef7c6ed1a09746fb8a54ee3","first_seen":"2025-12-01T21:14:42.277238Z","last_seen":"2026-10-03T16:52:05.588495Z","times_seen":80,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"redsys-transactions.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redsys-transactions.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sis.redsys.es/sis/graficos/logotipos/comunes/9999minicon-americanexpress.svg","fqdn":"sis.redsys.es","domain":"redsys.es","tld":"es"},"ip":{"addr":"2.22.225.80","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redsys-transactions.sbs/shop/Pantalla%20de%20pago%20Redsys.htm","date":"2026-10-03T16:51:32.723Z","timestamp":1791046292723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sis.redsys.es","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:63:EB:BD:E3:EC:F0:CF:37:0A:4A:BA:45:79:E8:DA:0A:96:CB:2A","sha256":"8C:0C:D2:A6:D7:43:78:53:54:2B:97:3B:74:49:24:10:DF:CA:CC:68:FD:9D:E5:CA:FC:76:87:76:1B:13:83:42"}}},"request":{"raw":"GET /sis/graficos/logotipos/comunes/9999minicon-americanexpress.svg HTTP/1.1\r\nHost: sis.redsys.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redsys-transactions.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 17 Aug 2026 04:06:06 GMT\r\netag: \"68e-659364a13f886\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=170951\r\ndate: Sat, 03 Oct 2026 16:51:32 GMT\r\ncontent-length: 680\r\nakamai-cache-status: Hit from child\r\nakamai-grn: 0.37e11602.1791046292.5515753\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1678,"size_decoded":1218,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c15fe62c4ac9cd44442ceb584fafd44","sha1":"74120cd54493c89ddd78e31958f2926ee502a6ba","sha256":"d33946127fb916bfe4e3bcd39f14e7dec59d87852f6fae49828ef80668b3306d","sha512":"3dec89252b8c06dfa48a97b4f61e21117026431a4fb3add636207bcbe01499ce92de8ea1b9a8e5c377c3957f9b43e7e5f4a8d2805caa99919cf026c44688279b","ssdeep":"","tlshash":"a7318cabeaed829eae18535215f2402f38e534a479517a92e0fe2d891b21e65010f4f3","first_seen":"2026-03-17T13:42:17.502076Z","last_seen":"2026-10-03T16:52:05.589295Z","times_seen":30,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":15,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}