{"report_id":"425eb146-830b-4c98-88f0-e1dd5d60244f","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2026-03-22T00:17:57Z","url":{"schema":"http","addr":"factorenergia.org","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"104.21.95.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"title":"Outlook","dom":{"size":56635,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10469)","md5":"83d5f26314d2495525dbf58f461f300e","sha1":"f0f2df024aa9c51f75b188286a4853cc74416cb0","sha256":"a75d168fae300553f03d71e3976f478de8f5da66bfdf4ab865b999443d191a96","sha512":"8d5c5462ccb9cbccfe63f641f52f7c739711430295912d9400ca07dd0a9d00b8c3a697725221e426b768a1b463c148baa996a17f53d9deef63dd46cdb9698498","ssdeep":"768:uyDwWJmtz7e05NnfvcaaD2n7kGdKV7aQblQoJmgK4e2FuzhtWQcAs4cZ:8tzK05NFaD2n7zkF5I4nFuVcecZ","tlshash":"0443af3fa9472c322867607863dbb34a3b2a8417864ed924387c175cef81d72417dbd8","dom_hash":"domhash6611a8f9436e17c78cf14f6609a6f921","first_seen":"2026-03-22T00:17:59.81205Z","last_seen":"2026-03-22T00:28:50.927367Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"factorenergia.org","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"104.21.95.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T00:17:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"factorenergia.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"owa.factorenergia.com","ip":{"addr":"194.224.117.6","port":443,"asn":3352,"as":"Telefonica De Espana S.a.u.","country":"Spain","country_code":"ES"},"domain_registered":"2001-04-06","domain_rank":0,"first_seen":"2026-03-22T00:17:57.460363Z","last_seen":"2026-03-22T00:17:57.460363Z","alert_count":0,"request_count":3,"received_data":729,"sent_data":1599,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"factorenergia.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-22","domain_rank":0,"first_seen":"2026-03-22T00:17:57.47653Z","last_seen":"2026-03-22T00:17:57.47653Z","alert_count":6,"request_count":1,"received_data":57343,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Outlook Web App:15.2.986","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e2bc1b488831cdc5841d3abfb0ba6bb","sha1":"50aed9715e2a5c3018ae336875294f64a202eaf2","sha256":"b7cd8d9758300e4190d07cfc88be4aabadff6e837e68d93eb73648dbcd89351b","sha512":"05c4c12df45551e8279a5d866076ae4febff08dfe5b389f611e7c1fc1ac20e97d70ccdc6c192d2796654a86566bb9af7dd716b7d33acd9e55a42bd1173b44c07","ssdeep":"384:/p/t8tz4HAo99QeRwiWSM7iFi5NJsl8oWGixlY:/Jmtz7e05NnfvU","tlshash":"3b52943dac9d18321973b239075fb28af3668917930cdd143c2e93a4bf40576857ead6","size":14415,"data":"","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-06-06T03:05:59.547085Z","times_seen":2909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97eb9cc59146b048bdf9f61b499bf16f","sha1":"3bcf316328c997d9768a59393894a989052e5198","sha256":"d656711ef4d2a655d04b516c9dbafbe90bc4b24b57b0c3bc3c197ef4d287b641","sha512":"68b17a6d7c9421262ea279fbec333bd928a2f9b463f1a0353220b907283ea3dec40fb54190e89aceac48fbb1ad9c6d144258b2d614a288758c336e4e9d6382da","ssdeep":"","tlshash":"7d21864ef224133778196937a7db8097b7a98e37c21ced2690ad0cbb388640e107e533","size":1393,"data":"","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-06-06T03:05:59.547674Z","times_seen":2699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25162df66169bb02d171cefb0705b9aa","sha1":"d14d0b165804e5bc0af701aab04c896206f99189","sha256":"a581e957006f4ce637991baad1381f69785a4a9f183afbf67602b22eb3ab6a7a","sha512":"4e0749423c28e47376dbb25fb7b8b501d0b655199b4faef4ea8810415045481eb0ddc7bcfe2dece015ac3cfa94ce6d4cd0d4d7b5c3f5b2fda586af7963ba2729","ssdeep":"","tlshash":"7731c76a7447092079eef63d126b678c3939c003450699003d7cd71a6f36ec7c4a9eee","size":1766,"data":"","first_seen":"2023-03-07T01:34:50Z","last_seen":"2026-06-05T02:13:44.205865Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3012703a3a5c709a38f2cba896e8e5e6","sha1":"d574b12ce7043b1ee47eb6934c39f19379fcf0ec","sha256":"2c65e217804431e380651ce713d311bd5b5a5fb81cebc58392505cb35c854cdc","sha512":"7ca0891d8d30781341b26e92353fda805a4383605a93bd41a402b1724c3712b345b0b354366952c5927de326e1e075f4198c50f82085127b36e07cc6dbf3cb8a","ssdeep":"","tlshash":"59c0486a6a4206a41ab6b65d32af22013b8280435b05f88cb87de1028b10a838878f8c","size":137,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-06T03:05:59.549403Z","times_seen":5221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db8216e217de9a14420fa187142b00b5","sha1":"50f9fdaa34b7caa061db879baa23a7d75f048e9e","sha256":"ebc3102ee92075887df69ec8c18ca2c24015e728566d302598a63c06697754ed","sha512":"6f40947f7a23bee134b9d48603ae1350677e7a2017883aeb86173bb320e0b8ffc8a5755a216580fe60a93b6251baf0a5ed7dc31875d938143148818ed3c0e6a7","ssdeep":"","tlshash":"1ba0020c04af42510e1be93d2566cc4851535453a1a69715780c03469f418a485b1ad5","size":68,"data":"","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-07-25T12:18:35.549787Z","times_seen":3842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"owa.factorenergia.com/owa/auth/15.2.986/themes/resources/favicon.ico","fqdn":"owa.factorenergia.com","domain":"factorenergia.com","tld":"com"},"ip":{"addr":"194.224.117.6","port":443,"asn":3352,"as":"Telefonica De Espana S.a.u.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://factorenergia.org/","date":"2026-03-22T00:17:36.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factorenergia.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 15 Oct 2025 10:18:51 GMT","end":"Mon, 16 Nov 2026 10:18:51 GMT"},"fingerprint":{"sha1":"B3:24:63:0B:70:CE:89:73:65:4A:61:2A:90:8F:FC:E8:59:76:7D:01","sha256":"88:C8:15:68:A8:3F:4E:4E:1D:7C:4D:E8:B8:13:BE:9F:89:40:C4:70:F2:27:FA:A3:96:CD:A4:16:FA:39:E5:72"}}},"request":{"raw":"GET /owa/auth/15.2.986/themes/resources/favicon.ico HTTP/1.1\r\nHost: owa.factorenergia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://factorenergia.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 10276952-e313-4810-8f7a-fc7ba8838968\r\nx-powered-by: ASP.NET\r\ndate: Sun, 22 Mar 2026 00:17:36 GMT\r\ncontent-length: 0\r\nset-cookie: SERVERID=feexcowa02w; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T11:31:27.481734Z","times_seen":17917872,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":62,"send":0,"wait":80,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factorenergia.org/","fqdn":"factorenergia.org","domain":"factorenergia.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T00:17:35.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"factorenergia.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 20:33:46 GMT","end":"Sat, 25 Apr 2026 21:32:29 GMT"},"fingerprint":{"sha1":"05:93:9D:D1:83:27:73:F9:50:28:37:36:24:09:0D:B8:0F:D8:BF:7E","sha256":"C3:CF:B6:81:94:A2:F4:FD:4D:04:C7:C1:29:C0:01:0C:D9:47:8F:19:3D:DA:F3:5D:6B:45:0B:FB:84:E3:36:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: factorenergia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 00:17:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spwAFA5N1wfDgealgUy6EmQRS4BoBq4ezTRhtloqJLSVZp4CIO6icucMhsFyBGY4YY3L3PhTPdCbL2Tvbiloi7zXh1I%2BXGppszZZCyQVPF6J\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0103a69ba0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Outlook Web App:15.2.986","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":56749,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10471)","md5":"739971fcf8868d7c1ea714d47ba153a1","sha1":"b8d9fabc5681cbd3a89aa3465c1d4b7a13a768a5","sha256":"56f88f5ebf3589d44f8a75ffb3a57a21c832a22622bae991dd05de9ed8fd4e50","sha512":"28b25240f8928a593cc5077f19be21e52a27b2f37c7367f992c0f4c4f59afacf4eb96880ac060537cd78f1138dbaa894cd66bd24c490dddc48a2c8f23c11e71b","ssdeep":"768:xyDwWJmtz7e05NnfvcaaD2nBkvdKV7aQblfoJmgK4e2FuzGO/ocoVwcA:HtzK05NFaD2nB6kF5b4nFuIcDcA","tlshash":"2543af3fa9472c322867607863dbb38a7b2a8417864ed924387c175cef81d76417dbd8","first_seen":"2026-03-22T00:17:59.824967Z","last_seen":"2026-03-22T00:28:50.929286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":53,"dns":32,"connect":2,"send":0,"wait":223,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"factorenergia.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"factorenergia.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"owa.factorenergia.com/owa/auth/15.2.986/themes/resources/segoeui-semilight.ttf","fqdn":"owa.factorenergia.com","domain":"factorenergia.com","tld":"com"},"ip":{"addr":"194.224.117.6","port":443,"asn":3352,"as":"Telefonica De Espana S.a.u.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://factorenergia.org/","date":"2026-03-22T00:17:36.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factorenergia.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 15 Oct 2025 10:18:51 GMT","end":"Mon, 16 Nov 2026 10:18:51 GMT"},"fingerprint":{"sha1":"B3:24:63:0B:70:CE:89:73:65:4A:61:2A:90:8F:FC:E8:59:76:7D:01","sha256":"88:C8:15:68:A8:3F:4E:4E:1D:7C:4D:E8:B8:13:BE:9F:89:40:C4:70:F2:27:FA:A3:96:CD:A4:16:FA:39:E5:72"}}},"request":{"raw":"GET /owa/auth/15.2.986/themes/resources/segoeui-semilight.ttf HTTP/1.1\r\nHost: owa.factorenergia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://factorenergia.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://factorenergia.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 3d0a10a6-290d-4958-b67d-53e1ecf15772\r\nx-powered-by: ASP.NET\r\ndate: Sun, 22 Mar 2026 00:17:36 GMT\r\ncontent-length: 0\r\nset-cookie: SERVERID=feexcowa02w; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"font/ttf","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T11:31:27.481734Z","times_seen":17917872,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":291,"dns":0,"connect":65,"send":0,"wait":83,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owa.factorenergia.com/owa/auth/15.2.986/themes/resources/segoeui-regular.ttf","fqdn":"owa.factorenergia.com","domain":"factorenergia.com","tld":"com"},"ip":{"addr":"194.224.117.6","port":443,"asn":3352,"as":"Telefonica De Espana S.a.u.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://factorenergia.org/","date":"2026-03-22T00:17:36.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factorenergia.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 15 Oct 2025 10:18:51 GMT","end":"Mon, 16 Nov 2026 10:18:51 GMT"},"fingerprint":{"sha1":"B3:24:63:0B:70:CE:89:73:65:4A:61:2A:90:8F:FC:E8:59:76:7D:01","sha256":"88:C8:15:68:A8:3F:4E:4E:1D:7C:4D:E8:B8:13:BE:9F:89:40:C4:70:F2:27:FA:A3:96:CD:A4:16:FA:39:E5:72"}}},"request":{"raw":"GET /owa/auth/15.2.986/themes/resources/segoeui-regular.ttf HTTP/1.1\r\nHost: owa.factorenergia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://factorenergia.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://factorenergia.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: a3a49aaf-56c5-433a-9f6b-abe7686900f8\r\nx-powered-by: ASP.NET\r\ndate: Sun, 22 Mar 2026 00:17:36 GMT\r\ncontent-length: 0\r\nset-cookie: SERVERID=feexcowa02w; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"font/ttf","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T11:31:27.481734Z","times_seen":17917872,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":296,"dns":24,"connect":62,"send":0,"wait":83,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}