{"report_id":"5443f67f-bd46-4b3f-a9c7-3b40592dab57","version":0,"status":"done","tags":[],"date":"2026-09-17T03:02:56Z","url":{"schema":"http","addr":"strenduslatam.com/","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"172.67.211.174","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"strenduslatam.com/","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"title":"Strendus Mexico: tu plataforma para jugar con seguridad","dom":{"size":138645,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10687)","md5":"cb9209c52bee007d49546f79fb6b8170","sha1":"f01b843f4ebee1ac2ade5ba7788f12f0d7de6140","sha256":"12967b6a97572c0204ecbb1e13cc8fa471599868207b1c0b687c8b9dd2c66c65","sha512":"d216e9a5b62c0641980e1913c77d83cfdfd15200eeedda11c42b8e0552263667e5f6d744acaa529235fd8c3f24ff2331f7be2603a81177d3e52254cd366f50f1","ssdeep":"1536:0dNU8Ar9t53g4MtKy38o/eOkTgz/EgPII6w:O+hoXbCTeE636w","tlshash":"01d3841304f23227d42391946bef2f272e658647da46ed853eac5b8cdf8af45982334d","dom_hash":"domhashee132fb40096e9ea1d40da01e375a38b","first_seen":"2026-09-17T03:03:02.098127Z","last_seen":"2026-09-17T03:03:02.098127Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"strenduslatam.com/","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"172.67.211.174","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:02:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"strenduslatam.com","ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":88,"request_count":44,"received_data":2524669,"sent_data":22365,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2026-09-15T14:27:28.413592Z","alert_count":0,"request_count":1,"received_data":22596,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":1271,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-14T00:42:22.155493Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-17T18:42:09.990948Z","times_seen":195160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e32309c1d715afe52fd7eab15249ca3","sha1":"a2dd12e4d9d3f19d8102b0470f780c2f25c725c1","sha256":"d7e2b080d2de549ac265cf2dbfc8bc19ab7ba3cedf6c733c915dfb52fb12f953","sha512":"713217a1d53c9383ec9e99f6c7b7742a3f8ea918eae2db1b6a613bb33fbc10ecfeb4ab17c2cdb90b153d6b01f5ea2f52840d9027332b3e5d84a54deaaf300c48","ssdeep":"","tlshash":"ddf08c1861e2a934f0d770cb1d8b12409814851fbb16ad9d342d2e893f662907c6827e","size":538,"data":"","first_seen":"2026-09-17T03:00:46.359975Z","last_seen":"2026-09-17T03:03:36.654365Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"strenduslatam.com/app/miao.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.065Z","timestamp":1789614145065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/miao.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvHRBk%2FkxfFGrf14E4on4YM2YOpikIFepQTVr7ZQRBTV8FONvNHNTxhLMilzDkh4rTzHuKtvkiqrqo5J5ZCc5BBaBan71jOBgGqNLXUnfT67cd292gI8eC90jMBadgIpefSEIA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-25ae2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae37b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154338,"size_decoded":153934,"mime_type":"image/png","magic":"PNG image data, 330 x 220, 8-bit/color RGBA, non-interlaced","md5":"3cd00b88f8ebbeccde18c4e9da911e6c","sha1":"df0913105da91ae69b8a60dfb45b704fede8cdea","sha256":"50ae57be6ab7321bb5107a9a24e64b10ad4e1c87d82f0661dc2a5e3120fd32bd","sha512":"a337128db5fe66d3186147ff5d9a7783f93d0565917a856a8c1a02fd7a257e7449164e0f0c005284aac79583c51407f238e5ff7fd2dcb9bc6bfa02a1c37a0d8d","ssdeep":"3072:am9SVOgsihHfsJWaJqQ3cJl6yM1oyUe16/X9hRU3ZI2w38OZsx5o6b63IGlDg:aSSge6JRsrbMS+HZFjbsg","tlshash":"22e31382a650dd7ad9fdd9c5fc334a8b12e221a16307f3147e81b360138b8cc4b96f96","first_seen":"2026-09-17T03:00:46.306829Z","last_seen":"2026-09-17T03:03:36.646983Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":975,"receive":465,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/gree.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.069Z","timestamp":1789614145069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/gree.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5itkg5WOzeU%2B3ae24OQ3j37bYcS3FkGFOnXqfbmkpSnBq%2B2Vt0c1mGVF%2FwjhnRM8%2FC%2FbXFzVVQhLiGlr%2FUOeANl9euSLc8vYb0BTayKz4cSMX8kIirK%2F05p6HeWN0nvpAspGwQ%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-30178\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be3bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196984,"size_decoded":197745,"mime_type":"image/png","magic":"PNG image data, 330 x 220, 8-bit/color RGBA, non-interlaced","md5":"2f5d63027c84e9a93ed22f5e1e3f8bf7","sha1":"d20bf30f0a82d9916985367e6d01e0fd55e5515f","sha256":"983882f5b826b7b256bfaed453adf77f7d01bb13c3f8d3ede10f7ca23a0c5343","sha512":"e85c51d26405c30f7a250b833bc8cfe832a9ccf68ff772ce48ab1e39810a1434d92085eb09c626c0ed419588392201bfe3dc61b0236eba7a8188642a38980583","ssdeep":"6144:/pyR/UUZ1kLwHQ64HPjS972IQUr5+ABDD9suG/hK:/pG/1Z14ww6cA5QU9+ABHb","tlshash":"d9141362bbbd2420b51379b17e93105b41a177f98ab7c5bf5c0c97d4ea508e240ed0bb","first_seen":"2026-09-17T03:00:46.339398Z","last_seen":"2026-09-17T03:03:36.64589Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":468,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/fahorro.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.076Z","timestamp":1789614145076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/fahorro.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKK%2B0UtTVqBHQCWFtaK5%2BkzN2cRyUXyqLeVvW1wuCJERg6eDVfFi1owmAJSToAvKJExU6gZgZLjp2KAJFk2AL0sXGmy6k7R8unCmZY1SZ%2BatUF%2Bq5JBXycZa3PxhHfJHd0%2Bkbw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-7ed\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be42b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2029,"size_decoded":2754,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"59d1a873dfeef9c689cafd8e029043db","sha1":"89053cf380491755764ff65aeb122c09c60cf234","sha256":"b534d8cca3ad01662946aeeee94068de5ee18d0774f266d0e974de7ce17a4f76","sha512":"f81dd3d7e9a9cee35a6ce7609cca524c034aee57a4f0d4e1c76660be00b266db33c53ac6fbf259002c32228a5e2e6a2bdb87b9e622989993bba6daa7ae2a4f98","ssdeep":"","tlshash":"f9412ad63b901c3dbd2436b51a2de255c49865c2dd3114597db812e42c167f818226ad","first_seen":"2026-09-17T03:00:46.341644Z","last_seen":"2026-09-17T03:03:36.631906Z","times_seen":6,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Waldos-logo.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.079Z","timestamp":1789614145079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Waldos-logo.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ya4gErQ6rAAePk0vw3nptVxlFri%2FDbiy10Pch647ZuYOPzaGWT9VoWULeP%2BM8OQciexuUKUdYgtD%2B2LfJmI9%2BaRU9MKLCh1Z76OkSLu4vvERscneqruovDgEMKYCBAnm7ngX2g%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-844\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ce44b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":2840,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"73de84221c6c975706b1405220545cd7","sha1":"5abf673b155cd5c2954f331b697850e48f618427","sha256":"ccf586d9fa9a02aa2a0f59d76f5ac2bf06c4f67715cd12bb522538bfc9d297b7","sha512":"5788c703e1b867602980b88a118e8c1ed3a709daacf4a1f7f06bbe8699c877180a1cad84c03323d3a2955bf7e15bb21428af49871f9a5a1555c9ffa3dfe8a109","ssdeep":"","tlshash":"d7413a20a91c3897c1cc133699675ae259b58c2b9aba4ccdab47220eec62c758b167c5","first_seen":"2026-09-17T03:00:46.348929Z","last_seen":"2026-09-17T03:03:36.647611Z","times_seen":6,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/btobet-casino.min.css?ver=1.06.45.9","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.816Z","timestamp":1789614144816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/btobet-casino.min.css?ver=1.06.45.9 HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ft94%2FvWLOVdghjM7O8BehVZAp2Xs09OAnMOKishF8UO5o8L30CpLeAwFCpRGWi1xLFKm24c5dHJDgKgMyVp%2Bc8%2BThE7TsM7Uj5FzGQvZU2HiJiBUOQqEpJeAa7eJT%2Fbo1u5s0w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb2-37971\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df351e1fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227697,"size_decoded":48741,"mime_type":"text/css","magic":"ASCII text, with very long lines (9909)","md5":"bdd243ef0910155d2fc7151c1e87286f","sha1":"59dadccd58639e791bcfda1663240ae5dffe6f81","sha256":"ae851282d8b5a9412de11a8adc583a95547eb5d975f6dccf414bfd32cdc76555","sha512":"f4d3c06e5749ead8ee8939e36104f5db3573b7cf640dc67809ff82e8230a56c3dd4bd6df1ae696d6bd6afeea6f0d97ab8586594e28189d758b655bb7c20b5e3b","ssdeep":"1536:eSKI6cHxzAqLk3Ez6DMjpHbFaNSwRkoWj62L6X7NvrvtvjIQY4DIiJ/PDeejStCH:elel7FavjIJtvu","tlshash":"7924b723a601327ef03bc555b0c0bf972e145497e6264bbeb82e29784749d970373f9a","first_seen":"2026-09-17T03:00:46.329547Z","last_seen":"2026-09-17T03:03:36.641483Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/cashg.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.071Z","timestamp":1789614145071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/cashg.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZOCkmZ%2B8LTQ5ZGmvInxQXD94xvs8DwUA9VSk4AhLWJr0rxR7pejakLrpB6uLGCNsmuThPUxr7YqM4M4nS6GsTV%2FuC12U64MctnDZvH8hv8DwjuEERAY5xaxg7GO0hJ6AYvMyQ%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-5a45\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be3db51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23109,"size_decoded":23695,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"568cc1e4ad33c346fdbaa398a976c3b3","sha1":"19b06bbb083a24204674873bf07fdbab505810ac","sha256":"cc09cc059388d2a1eb705067311eb806b27671bf9f37e4eb71b0949678ff033c","sha512":"213ed659aaf4733e0c2d409dc96ec660fde9a08721bc46e4ceec17a30e3974fdca1c3ea88a7a1d0467ac36e345037753e3b16c60e6d20168e69415ccc8365f8c","ssdeep":"384:Mrcw7lgzTLZplfV88ib303EFicBw7PbtqeExmveJTfkB1+lusEon:sdlgzBy8jEDeExmWK1+lu+n","tlshash":"94a2e216e57d80fe0d3a6925951f33e65b934832df095d22b08b6366e173eb8d8c60ce","first_seen":"2026-09-17T03:00:46.302799Z","last_seen":"2026-09-17T03:03:36.635363Z","times_seen":5,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Walmart-logo.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.083Z","timestamp":1789614145083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Walmart-logo.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJ0lwPZYe4QjImLful%2F9cd0phnmfln9RBE0ifVzJM6gTAGh92oHwdnIcCXbhx0uHyH3rjyyDbUtiZbxe5j4gkbVJtgFJNgbB%2BFy99koXlkYRuR643ncasuaYBRMubPFEHtrH8g%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-f8b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ce49b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3979,"size_decoded":4692,"mime_type":"image/png","magic":"PNG image data, 93 x 44, 8-bit/color RGBA, non-interlaced","md5":"3f18b26c52b44fb2c36f80fdb7e79bb6","sha1":"15a32d52a5a98c6b12500503ac50baa442b27f9b","sha256":"6194e309abd7bc5c40b7a804c6cf917d26d1e2471d26b5a5cd8bd69e9eeb9f37","sha512":"e5c6179a0bb596477b3185dfd9fbc6e58d00c936dcd35748cb6bead1661ad20ad7ca9b66017f76eea585de654b91800548fd8c6a0e6463ee493f87c6e3e015f7","ssdeep":"","tlshash":"89818dc57876e7c88a276433ab4b4df01763423231a5900db69f87be8e505041478581","first_seen":"2026-09-17T03:00:46.328564Z","last_seen":"2026-09-17T03:03:36.637572Z","times_seen":6,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/btobet-visitor.min.css","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.818Z","timestamp":1789614144818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/btobet-visitor.min.css HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPbHYAFwPhuV%2Bw6cUlxpWGdiUhHnGlPArHvnXebaaMpdi94gkhUKWTp8wOiRrMVUNB8RXjB5wmPW9v1jdZLnISDWvhLaMuzqVeBG9IykO5xFxRUdEsF072T%2BNBdKKovgcQd9kg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb2-399c7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df351e20b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235975,"size_decoded":59049,"mime_type":"text/css","magic":"ASCII text, with very long lines (30757)","md5":"8f4f71a446320fe80f3ee50cb4590442","sha1":"97e3bb67bd7d14a1b0bf41db06c2b99c24f7fbf4","sha256":"466215b603477b404ad92bcbecc30ec3a33db6637d7f3e20768161d1960245d2","sha512":"164e7e70e92dda4e16a42813b6272065ab00c29c5185851eaba91ef3b6b49ebd0d85df9fb641f68adb64ff12f960e1f214098032d30125a0d646647e429052dd","ssdeep":"6144:mS22N60sBCs3rMh1u7qGcdHbZr8v7GKUfWGwd:mS2Y60sBCs3rMh1up6KUfWGwd","tlshash":"ec3477a7e40710def337c55bf2c0bb6e2639f265c6020ea9f06f556c4ac229513a2f59","first_seen":"2026-09-17T03:00:46.351191Z","last_seen":"2026-09-17T03:03:36.62159Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":945,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/supe.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.060Z","timestamp":1789614145060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/supe.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TP63EP%2BAFa7nX17XmeK7TPY%2FHeE5TLDemb10%2B6TBbiCXOfpUitlKE1gPbviUMUw1tqezbyxXqYwWLmQv3KwsR1MHzPCkYjQk%2FU2EjUtBarh2mEQLhD%2FbjR2w%2BF1Nkq3eu2ApPw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-4f28\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae33b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20264,"size_decoded":20864,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"eaedba8209cf0810c1588a3fe5515d34","sha1":"5dee3d582f64b9b6261abd9c4746b1070e6c699e","sha256":"ea7623d24bf2b378a90381eb19beb5917b3c4952494a7782a5170c41b8aafa69","sha512":"e1dbfa04807e78f7e0a49b058a688e0fc5ba5c2a9604c16901879400075fbef322145fb97f151a9976c3a322e5cf23cdf1227c8a638b7fdb92de4070d7b84950","ssdeep":"384:Mrg8ZDHEOOWWK6I8fKBaYpFc+SPdyl+V3VuTvFKruXtWOXUqoqvCwxjJnImZp0:sJDHEOOAX8fKdpFc+SPd4+VMTvFeiFXo","tlshash":"2992e1df0d397a84db3eccbc5186252f99a5478236331a3bb828c215852ed7cec534d9","first_seen":"2026-09-17T03:00:46.331613Z","last_seen":"2026-09-17T03:03:36.625713Z","times_seen":5,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/330x220_AlicesWonderTale_EN.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.067Z","timestamp":1789614145067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/330x220_AlicesWonderTale_EN.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwqB1P9EUcoVCusTkbqkiGXsow66t%2FWYE1mKc1aqx0E1Fv%2FDoL9djw4fYBZhN6r84z3ayGLTK4W67jc3%2FTqTKaeWk3CZ4dmSFcz4K4a6chvHRrT27faTAJacuM5BxBzC6UiwQw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-37419\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae39b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226329,"size_decoded":227117,"mime_type":"image/png","magic":"PNG image data, 330 x 220, 8-bit/color RGBA, non-interlaced","md5":"45dea5675b97bb00c0a9c4584900c078","sha1":"72bb0a8967584cb24565ee690e138216d907678b","sha256":"47a5e7ca41846ebdc6a0d6508cd8e36afce8dc5451fa53cca0caa9dce2754b98","sha512":"8654be6b258a36702ef32713991ac877074f97b58b8013e766cca3ae2ad8dc56ecfb9f92e0b6ef2cf8b71923168c0d75c1de3b188df32581d945e4ed36404803","ssdeep":"6144:WWOj1kH4GrwKzjSYtoYT1pmaaimffzyaluZ9YorjN:W1eH95qYtoqpmaaimffGaQYod","tlshash":"fc2423f521ce9dbdaa4ce3b3550245dd883aa9822f18cf5c0745215cbde1b67b8b4c36","first_seen":"2026-09-17T03:00:46.352282Z","last_seen":"2026-09-17T03:03:36.64869Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":682,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/VikingsMultifireRoulette.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.068Z","timestamp":1789614145068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/VikingsMultifireRoulette.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFIOMFRwVV8E%2BIxU63g4iGY39I%2Bvjun0D5FuG4eAnL4QgY3c7AVQN%2FgPoNwKj%2BRwzUYbsBDAf98R7rEw44S2qoUIpBHEXUfhN1mkwfxsdeuT%2Bgja3VZpTjpMHdZz00zVhskpnA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-4eda\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae3ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20186,"size_decoded":20722,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"deb798328c2241ed6ca3fab6444700ed","sha1":"b63fa0d746272b8804dc6530eb09eac91a0f110b","sha256":"a08051eddeef39c4ba13115feac7266c1523a470e0d56a10cac21dd440ed249b","sha512":"8ea62822d0ae0a35a8aa97f7c7f5a85abf47c1a3cd2bba59b3820ad83fd799bc656c3c058b20cf292877d00f483b4a851157fe416156adb596b40c42630fbf69","ssdeep":"384:MrgLB+Lgcww2IiYJENBPczfIaQ9r3gjpERPJ6Sfo9XqPV+x6lDGgHFvG9N:sgHVbYJEPfr3gjpuJ6XGw6lDGMO9N","tlshash":"7f92e14f568a2620af0dec75ca763469e5d672a3bf50343ce1e305a03cc4d72a6b1139","first_seen":"2026-09-17T03:00:46.353393Z","last_seen":"2026-09-17T03:03:36.649301Z","times_seen":5,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Logo-st-100.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.075Z","timestamp":1789614145075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Logo-st-100.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q34d1BcPPeK1YTi6mUzaZCN2vb5kdSoVbNNIWOP6A6sSYX3uZh4UfYrcPDGxZpDUF8id0ynjYv56%2Fjp738EZFVSliGlqI%2FU51G5%2BQb8W2217imCc52DKtyEzVbX78zozYR71AQ%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-a64\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be41b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":3369,"mime_type":"image/png","magic":"PNG image data, 100 x 49, 8-bit/color RGBA, non-interlaced","md5":"a163134cf889fb67c2c64e99c2376706","sha1":"80966e8b47ee61f3bc1f462df7d3c32bbcf38df3","sha256":"2f605172af3ed2b7da8b9b122c94ba4af0e2ac82ce45fcb3db8f6331e47e6c2a","sha512":"26308dd3bc58360202f7f585bc0186560c55f4855b6d1ca2322c8e1f246a29418d8cf062c9e7b4c60aeda90a60fcebc22be8ac4557ddd9652799757fd27cacb4","ssdeep":"","tlshash":"c0510bed56e8daa4401319242b982388bea55d835797bd7ac8d7c53c0c2dd4cf86aa90","first_seen":"2026-09-17T03:00:46.347873Z","last_seen":"2026-09-17T03:03:36.626784Z","times_seen":5,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/latam-changes.css?ver=1.0.1","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.822Z","timestamp":1789614144822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/latam-changes.css?ver=1.0.1 HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gg1KcVKY0PFOHeUq5dua4BEgrRaGY9hmyDDKJQXJ1qHVp4x9eb0Wz1%2BDSQUOBhiY%2Bh4Y3BGVfRApvuQyNDRXElV%2F7y6JDu4ikbm%2F%2BsXRt7BLQmXwqWqW3b7u9rUKbaR4ybRBLg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb0-172e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df352e22b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5934,"size_decoded":2572,"mime_type":"text/css","magic":"ASCII text","md5":"5414f429d664f4616b0760ae86f87f2c","sha1":"786daea4571785062363c314ac30d224083e067e","sha256":"83f21ca8f805875d77a7a1f4d115c1bb9218ff66ce631eb6189edcddbbd41984","sha512":"6852b442892d681a7aa01a02f63cd6375eb65941d93ed3194c62e0acca1ff439d01572be924f95f5f9f1e4c9601553575be6846652e6cc769015c0463019ca95","ssdeep":"96:PcGYn5u7b7kLcmT7+TzskCM0nTJumlIiFQFp5Q5ONf/VFVSF0OA:m5uf7E84kCMITJumiiFQFp5Q5ONf/VFb","tlshash":"66c14197aa731545f957d2982bf6b356322a5143118bdc397b8c334ccf893998b33b88","first_seen":"2026-09-17T03:00:46.334001Z","last_seen":"2026-09-17T03:03:36.648202Z","times_seen":5,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/style2.css","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.823Z","timestamp":1789614144823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/style2.css HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frqHGO1T1ggU9vHOoxHKvAHCmyRrOzWHZDSFM17LveUka3CeLee14j0yVS19FcAnG%2F0GZKdAtJ%2FZB0rA0jZeQOPO1iwaPHls0zocvwJ32LTwQgUh7mx%2FGyrGw%2BcmZ3%2BAOx27yA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb2-124d8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df352e23b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74968,"size_decoded":17926,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (9957), with CRLF line terminators","md5":"dfce55e7844c1283e05ef3de53c9a22a","sha1":"0c77d8db64f8b3351df9b52762740014a6c03adf","sha256":"70084de7b44833e6ffeed77def719d74d16252fca6ca948be79f4374c84ef8b9","sha512":"b4feafdea1f83212f35b83dac0972c049e455c9de54d7ef4df913087d55bbcbcb20d06ecd324d1aee18e7c43121259950fafec38124b2c3845fb7cac84a32d28","ssdeep":"1536:5bAIOta4EDB2przbez/6Q9K/H6lL/086Y86886N:5bFOta4EDB2przbez/6Q9K/H6l7V2kA","tlshash":"8d73d921da462019a137c2b877b217da5f657403ca02aafd7bbc6155cfee4924633f8c","first_seen":"2026-09-17T03:00:46.304121Z","last_seen":"2026-09-17T03:03:36.634573Z","times_seen":5,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/BBVA-logo.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.080Z","timestamp":1789614145080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/BBVA-logo.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMqngJYT4lCQnyFWpwFBh6ZXpTSYd8Q1zsnLs1W7Qsz%2FY08JPxy7UnxsGKHz9iz%2FORNZ%2BOqe%2BvVfsh7actuLm52udCS9XkG4VWv91E08m193ybhxlBnFAsJBMzoH5Fr7eZ0cVQ%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-7b8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ce45b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1976,"size_decoded":2674,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"e7af16fd4b5a057882c6285f5f494d8c","sha1":"2aabef8b7684a2ee5b00a08011a6f56de82246d4","sha256":"b98c4ad9651892eee30c02d6ddac6e3a4777244a475834358939af915df4012c","sha512":"93d10a9b2ae9511976338d9a8794ef22c65731fce225e63a957a3a7b24184721d463706efffe54f96c101377178f86fb4e28d7f98d5bade3ddfe7bec6b0583cc","ssdeep":"","tlshash":"aa412a98b6893c22eef39beee80f01b0247c20ec05db51867e915cb4bc08131480bbce","first_seen":"2026-09-17T03:00:46.308234Z","last_seen":"2026-09-17T03:03:36.650137Z","times_seen":6,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/VISA.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.081Z","timestamp":1789614145081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/VISA.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RWlwtynaFMk6o9FNEqxykFCZ%2F9Lm4VThoKgEdXpxWi3Tgr1PMmbyPzj9%2Fxb6Fjg4IiXD45L5pPZ%2FbiyQv%2Bbbi5VpbMk32O9q0vcDpQgNJGTP3fSLyuKE49cGdvM4i3m7LT%2F2A%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-5f9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ce46b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":2245,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"83a9254ecaf248322ef118c8165b251b","sha1":"eb5cec7dedb8754e1e2c1737a808210bda80829f","sha256":"f2214df47dad51dae727497a1022bcd001507db71ba773d0825c07a40167413a","sha512":"5728c53e68d7674c1d181c00cb55ce07e84024458d6f7bf40d8461a66fc4b6e4acd09f1b3f58d64c73a34c5a68f7c6a8c8bc6e1d253d1e6424ba4b932b86ea2f","ssdeep":"","tlshash":"d831d72317092f22c749757f37a108b863a614f2030665e758fa680e96c6a8ccae0111","first_seen":"2026-09-17T03:00:46.350109Z","last_seen":"2026-09-17T03:03:36.628113Z","times_seen":6,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/SanukOT.woff","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:26.058Z","timestamp":1789614146058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/SanukOT.woff HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/app/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:27 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\npriority: u=3,i=?0\r\netag: \"69a50eb2-788c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CpADMRMJ5GUhm1oyGXvBCZtoU7BH7Y%2BBK1%2B08thO5lbw5WRTbE5CkJNy6L9bUKfmN6uI4G%2BZt%2BlwczenAyCAZvMCCgnuLlH4M6OqMi9nXwNFbokrbmOBee8y7XLsik4iadwhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df3cdebcb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30860,"size_decoded":31560,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 30860, version 0.0","md5":"24fa96a6caa6e898a356ef5052eec867","sha1":"c3a169b853bacd15174215e37d83f16eab3bf3f4","sha256":"8cb2abd2fe02b828cc2883f39a8f57998f13910e7544e3cab96a175d770d0bb0","sha512":"abdc591edc2910e9eea26008211ff3b8908371b1a53494c0999e84a60b20d46ac938d4191453fd0bd4c65e78fcfcdb793c72af76e968929c1df747230c607278","ssdeep":"768:0HKDs6DjLYvzI0Te9Fh8xrXfqYC43iQuur6i0rcKVesH3:mKDjUz/e9FhSTCyiHCTsH3","tlshash":"5cd2f1d2b24819b4da9bc39bfee940b2dc1fd2f1aad39136bc85c60cb85e4179183154","first_seen":"2026-09-17T03:00:46.310368Z","last_seen":"2026-09-17T03:03:36.653883Z","times_seen":5,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/cropped-fav-1-192x192.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:27.031Z","timestamp":1789614147031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/cropped-fav-1-192x192.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RZX7%2BgG1l6LBaP6thbz2jO2lfuYuNjQpKma2h7xzkUp3a3%2FjoIic%2Fx3JZbDQxw4IcsJEOSCXd5r9pLHhCYtsiamLP8sJ2DEkbR2lBMAiPjFjIr67leyWGYrCMJcuStpuoO1pA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\netag: W/\"69a50eb0-150d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df42fef0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5389,"size_decoded":6113,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8545b12f3ea63ee43e6ff271840c2603","sha1":"1f6f083a52f9d06f11ffa44cff2e239699cdbe2d","sha256":"841b80ad8ec314de748e7dbc2b7e94e6250cb2278feb73cb65d2ec138998104a","sha512":"6b436dc894b721fda69e5927d93996e916842b84c4a2e2b43ce25cc5b8de8b4f0f85786d4e58c00ad9c4fedaa291bf9e027d8946ebf132904f3c319b3eef8d71","ssdeep":"96:1lmprVKMZqwPkyluJ1LbQU8PP20Gu+sdMmB9jyfFbXEc391yXoeV0/m4Uye:1odVzqbyS1p8n2C+Ah9jGDt1yXoeGUb","tlshash":"fab16c42561a2cabc87e66b6e72ee89890a4c5609df2ec461978d6538ccca16464c5cc","first_seen":"2026-09-17T03:00:46.309267Z","last_seen":"2026-09-17T03:03:36.652056Z","times_seen":5,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/btocasino.min.css?ver=1.0","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.802Z","timestamp":1789614144802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/btocasino.min.css?ver=1.0 HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcLA1LAq91ORKTFoDixTiLAkAojB%2BJol%2F0rGURlUpKEPqY6ZXWyuo%2BXyoyJuqpttU5cGoxq%2Fj5esOaROE%2FBZpUH3gXDMzzxEJMJx%2FhRikSiIOMpNZnF8ULyY4qKjDFWD%2FhmnSQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb0-1c6d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df350e1ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7277,"size_decoded":2049,"mime_type":"text/css","magic":"ASCII text, with very long lines (374)","md5":"d49f910c22fb8c6221aa35140e83f897","sha1":"eefca733548684ec1453cd69aa8276e1a4bd62d6","sha256":"ae5a828009324c1df7895792ccdea66110b33f16ec1d18d558c3a907db45f1af","sha512":"cfe85fd30ca04056a55874e3180ca67220215b122a073e0c1fb28e4942b3b16a48e3fc8e6e62716521be73b10806f5ec7ece3534a41eb3c35bb6abc9fac32f8d","ssdeep":"96:O8KlycmQ0gumQD+73PWTQz5xak2BBHg6EJpx//qvdmk:O8pcm7gumf3PWTQz5xak2c6Wpp/Idmk","tlshash":"f6e1cdf7916f11a59340ea90234327031788b269d9807c79e25eed8cf6e261a93c73fc","first_seen":"2025-01-01T07:39:40.023533Z","last_seen":"2026-09-17T03:03:36.652618Z","times_seen":141,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/extra.min.css?ver=0.13.18","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.805Z","timestamp":1789614144805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/extra.min.css?ver=0.13.18 HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BWqkgpeA51W3TNydJGm7nIa3ykOkZTrXJrGAHAmknA1W%2BbV9iYPFCuOFVGTrfi6TSeoHegqsTqTBtR4qCemO8ybypU%2FCjHZjdAMXIstilz6VWrnrhle7AYm5J4%2FCXJtslvIdA%3D%3D\"}]}\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69a50eb0-32f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3c4df350e1bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":1047,"mime_type":"text/css","magic":"ASCII text, with very long lines (815), with no line terminators","md5":"27fa14302689f7f32e20359095766e4d","sha1":"1f3db901d6f8746008838a7e5f2be30feeaeef83","sha256":"968ab8ae6f33119ee267a11ce60920934e0d5e9d4714a3eb6b47cb9f05e42a0f","sha512":"72a1731e0b1280ab92fc988a67aa54d1f44874fe5d3be8eb7333e0f17bfec6951058928cb40a3419a47950b82b851c3cf18e9f6cb84e0765656ff4263d4baeec","ssdeep":"","tlshash":"5b0104f12d1a12bcc1a6a309bd98d2bc73a66435ddd2c806e33e953dc18b72625f6464","first_seen":"2023-04-06T10:08:02Z","last_seen":"2026-09-17T08:35:34.933716Z","times_seen":6969,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/style.css","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.820Z","timestamp":1789614144820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/style.css HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpPOP%2FTYjGY0PI%2BIRCatP6cacTeW6zvOPYnjwPbDXrSpHtuXew7b3Ira7Z%2FXcM26dZ9Hrhe8l9%2BtNZc%2FBxOB9oYpcoisjVEZgFemhGLlhkLa3d0YcMdchqlCUkpkeK0zPeY9Pw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb0-5bd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df352e21b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":972,"mime_type":"text/css","magic":"ASCII text","md5":"3d935da6111243b7ce990815e6442064","sha1":"230e1ff485c5fa86dc4754749b8d42dc87a9c928","sha256":"e851e3bfd766b8d0c4ff6d56dd1335c3bd6ea4dda197f01d069d084f05c29e4b","sha512":"7d9a00ec9a66b655264d93624a1c403692bd2b7cbac6d06d64de9d4387a8b371f3dc3ad88c97ea29db2dd750e05b0efc13dbfaa7cb01610ec74e0a849c55fa50","ssdeep":"","tlshash":"65314df0e8e735336176686f63db4aa4494f300f100ba416bb2d29945f6bb29c295f7c","first_seen":"2026-09-17T03:00:46.326105Z","last_seen":"2026-09-17T03:03:36.63837Z","times_seen":5,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/rush.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.061Z","timestamp":1789614145061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/rush.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrCArPKsoFiEQUcTNUrgdFEuGqCZ8g4ZbLWRnIK%2B4%2F8Itr1V93cjkJFRJXCbgGCXi87ISaBE6f6fKFMyi2OJXPGezFa7mif%2FHRn%2FBlP%2BXnWBtTAWDI1GIx9U09jnRifKAUSV3A%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-315e0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae34b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202208,"size_decoded":202892,"mime_type":"image/png","magic":"PNG image data, 330 x 220, 8-bit/color RGBA, non-interlaced","md5":"402944d1e284096e800ce21da813b6bf","sha1":"838518afb103129a160f15ff9fbd505120e9f860","sha256":"251d11b584ec560fbda46a87e730a1d5b0bca1fe7eafd951ff20fce5d9549260","sha512":"d0bd1fa3a32cc781ddbc1830c1c2e074f2f87663cb32a46de7884e1f17b4be1fd9f48b523d08df15b5ceba46434fece3de72b7fdc138d5fe0160c311b60b2516","ssdeep":"6144:NOOIjt0uFpiqWSPWhAHh2pZvlO6xI3NV+:gOIjt0J+POAHhkU6CV+","tlshash":"e914236337c28b1c892bc8d91537991820c9af4eddef8098e06f54e507a819f57f19fa","first_seen":"2026-09-17T03:00:46.305599Z","last_seen":"2026-09-17T03:03:36.644455Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":944,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Sovereign_Lion.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.070Z","timestamp":1789614145070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Sovereign_Lion.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTNBiGts9nP23udk9bsx7fiZmy2aNVvKpeMAuQQtlJQYLflO0G0wjKgXQU2iTh6pfHyHHIlIVQgbU98R1V3qgz1e8KR1wcgkRpyIH%2BxZn9MaKbq3pI20paXpEZboC6OHfG9z3A%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-e2cd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be3cb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58061,"size_decoded":58045,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 330x220, components 3","md5":"1d3a822f308fe7d004daf197fef1716a","sha1":"0d0d982eda23a63cc6b6e6cb9d3a617f3332de96","sha256":"a5bb67b3633d1c432429de46626d367c14d65bbb31d7944e2586b7116c00bfb9","sha512":"eb605f2c2730db10f8b753f5fbdf5480d4cf25e129f41fe12877d9bac4e384d55b6909427027d40c41f36010f806ce29c30933d393f0e093268e3fa69814819a","ssdeep":"1536:/vZ/EfbVwrkFwttSiSg8RoFlcgf/aes2Jk:/vJqbVukFOJSg8gZE2Jk","tlshash":"4143f14ae5440faae5f7db3ca6f829e38992c8056fb7674c744cd8383dd90c6da0d640","first_seen":"2026-09-17T03:00:46.327273Z","last_seen":"2026-09-17T03:03:36.629215Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":965,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/SPEI-logo.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.085Z","timestamp":1789614145085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/SPEI-logo.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPRaBhYx6N4%2FrsuQkXESi0BjtHdCYbmQOJs7j3D%2FcBTVaMhys1Lg0Lhsoxjd6JW79kBf7ClYdMZsMXUH2%2FPRaF6KJxDo6lWNair1niMRafHjTyvDQKgem2%2FypPqIm48p3efSsg%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-688\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ce4bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1672,"size_decoded":2400,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"99459e31462a07eda3eec6ff6ffdcf12","sha1":"5daded14e2dfb20f8d69c9305721f31144be8a36","sha256":"ddb4625f6c40b53db01f9a837a72ff00d3158a962ca2864ae578208b55cdc1ea","sha512":"2cf4237993f215604b536716981e9d780d9fda4d3f8c61a8c96bd083cb3efab51d1259c05e62d074a331d0aadcc6140d87258a2b070a8025406fc0f72a7c73af","ssdeep":"","tlshash":"8d315c1140ed04d0ca496eb7a93fffe018f02085ff1868481eca42b103c78a26ead43c","first_seen":"2026-09-17T03:00:46.319636Z","last_seen":"2026-09-17T03:03:36.623793Z","times_seen":6,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/SanukOT-Medium.woff","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:26.060Z","timestamp":1789614146060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/SanukOT-Medium.woff HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/app/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\npriority: u=3,i=?0\r\netag: \"69a50eb2-7838\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSdfV%2FwXT7d%2FtzftLEnDzuFAkmK63ujLW%2B01KlETut4IYC8oxXrskirYIU6XVrnCuc6QY8t7P8kWPHk5CEWKD6ZhmpSGS3Yj3jQki6aSFflmfpB3%2Bk1Co8ztEZxDCEIlmA2THg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df3ceebdb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30776,"size_decoded":31476,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 30776, version 0.0","md5":"aabe24e0952ed9a6456ad251706a7b7d","sha1":"cb7dc1aff92b0447857b52694ee727b27510b11f","sha256":"a59fdef6cf025fbba3d6c5f5fcd0539e4a153f0f94218633ead9e46574f94afe","sha512":"816f432a5719313794614816acc6a4af0dd2c3fc348bbf4283770c58fbdf767c69af8e674eaa37c5cf7cb2926d28e5bc1a2ff955e79809f1f9bab788404ad9cd","ssdeep":"768:cT+3Teog7D0EVMBC6eH1UivBF0RZjQuur6ifHo+3l:cT+Dtgv0Dk6U1UivByRlHKl","tlshash":"9ad2e1e28f180e2449a74f6097c456d691cbd89c4ed3cc5acdcde6563c0bb9128eb03a","first_seen":"2026-09-17T03:00:46.336722Z","last_seen":"2026-09-17T03:03:36.629993Z","times_seen":5,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/SanukOT-Bold.woff","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:26.062Z","timestamp":1789614146062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/SanukOT-Bold.woff HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/app/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\npriority: u=3,i=?0\r\netag: \"69a50eb2-784c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrzRBz3wvPYQlZjbqG1YamPld3ZuJUtLIypSov8gMpl0CpN%2FaOn2pAWMT4vflnaD6kc1YOyZFr3IDQPPZy7m1BqCCtUvklzi4DrtQL2wYd%2Bu2s%2B4YU6ZYNaXa98M8s7VfUc46g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df3ceebeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30796,"size_decoded":31494,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 30796, version 0.0","md5":"9929f41244a1af4c316ef940d34c7f7c","sha1":"93d48d68591e633354725d959bba4405f8ca3a0f","sha256":"01e8cd4f26a81b0c624360894d553b0c0aa9f4ba0ad9e3a2fae801f781c52bbe","sha512":"f0c163ef6d8ae594acbf488c527a44a5c4bf9fcf9c47fe06a5dc0caf05f5a3f57552be006f1acc863083ac85270323f894d303f8c60b515963d84c108535a41d","ssdeep":"768:KbvenkWMpLAa1kIg+X2h48vjSYd6RFJRtdQuur6iO6rDr:KreoT1TCtve3RFJBHOnr","tlshash":"24d2e0ba6e465394c01fef176b164baf1672d5f41194c07e3ba60182306c3a3eefda25","first_seen":"2026-09-17T03:00:46.311413Z","last_seen":"2026-09-17T03:03:36.650751Z","times_seen":5,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":925,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/custom.css?ver=2.0.14","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.814Z","timestamp":1789614144814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/custom.css?ver=2.0.14 HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlQeCEOTUUt6%2BCL8V77KCnQA1zGgQrCG2vXdCawf6g8s9NBvMRX%2BVfdYK94QDGuEmLo%2FfNAQMGFx1Su3QhA2gb0Y0uaDKQMURr7gprqUKpRzQ8dxX6jslZziZbHSc%2BVZh6kbyA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb0-260a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df351e1eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9738,"size_decoded":3356,"mime_type":"text/css","magic":"ASCII text","md5":"1bde1d96154d127a2c2e745e906e8d0c","sha1":"a47a50fedb2e7ac1bac87e33806365570ed072fc","sha256":"dea4e313c22ea2d08d2e3a798180088757b700625ac25481f07b8a1e3dbea4c8","sha512":"d23cf67a07cd3946086a377cbcec2cf1a9cbc08bfffb5c185192f167437ae9a5bc4fdd444020cc7c7d6b28b347e8c18f7bc3d97fce707cea6533d67b73d9a809","ssdeep":"192:wx6noxP4jm9WY3AW4y1WV8RCEJ+GP6SwSOYfxyR0YSMBYi/clCaiFRTx6J7KOPeC:e6GPyc1lP6SwSOYfxyR0YSMBYi/cJeC","tlshash":"3712fd664ca91c5a82ffc16f75ee7f71c25e81b39809a9ccb5f8015dcbc826450edba0","first_seen":"2026-09-17T03:00:46.3129Z","last_seen":"2026-09-17T03:03:36.631236Z","times_seen":5,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/An%CC%83o-Nuevo-1366-x-200.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.056Z","timestamp":1789614145056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/An%CC%83o-Nuevo-1366-x-200.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 20 Jul 2026 12:33:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXRkykxtvsj%2F2CmsxJJ4p2gzjBkLCXrAVWvWL4X7Lj1m4IlY5S%2FafVz%2BgCn7yVYGXFVSFx1168y4%2B5Qh83rDOFYnnhokZcUUC7qt71O5rgsiUNGPFWoYhPjODyUFkCdlDm9%2Flw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a5e15a8-47b90\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df369e30b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293776,"size_decoded":291981,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1366x200, components 3","md5":"ddab85a7bcefba7f0830f465b9f6f671","sha1":"328636ffcadfc56bd1e54c4520897dc38a51eaf4","sha256":"1f231bd6c036ee3abf6acec9872d0982eda41ec953ab43a2ff30397e65ffb3d0","sha512":"652d02bc6f7fe0457f4505c8958b051f02be0fa978c295e83f7179cffbf8d35483a7311945d97c251c83543ce075b6e95802dc8ca138ce7584ba79238fd618ea","ssdeep":"6144:M8g9Qt5RgeCIPSALQ84hMfypvPnl/7eeVFAw5Hy1/8EV5pcu:MD4TKALQ8VAvPnxeeVFAwFy1/PCu","tlshash":"de542395fdf33454695ceb2117e41c6837ab009a427f8c38fb1a0c9df99c8a482e5a9d","first_seen":"2026-09-17T03:00:46.320799Z","last_seen":"2026-09-17T03:03:36.653265Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":965,"receive":696,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/MHRamses.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.059Z","timestamp":1789614145059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/MHRamses.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfkO5jHW3bOGdoBHzeGzkSyE%2FlVNbLTKhgvlqMnNFYUIUAv0eR4sOR8S3dZqFqjggv5g5xFkt%2FcHpyBkBTvoXFrtQKluWGC%2FLqXweMTjWiJh76V0j2hnm5vVYDFrX9PTUqPR2g%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-4f31\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae32b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20273,"size_decoded":20860,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"8ab3efdda0b021f19b9a62c4ef9a6679","sha1":"b423f373716b3a79784cce3f7d06abc3d6e828b9","sha256":"4900a41813baee7f80d6a37650c6c3d9cb5ba4ef85291d625b08226c69e1608e","sha512":"27848419f3a33f0cf9a1a98fede00efbfd5a485f754dd4bdd304cf28284c4009890c9f8ce99ae9c1eaba7f72fa175baebd33638e3f879b894a70eb65bb34ba96","ssdeep":"384:Mr1Fyzlq5SVgRufiKTgCjxsic6S+5ZW4Jt4ua2utb732NhJrzk4sMd:s1F2o5SVgAqKTN91SUt4zOvlk4n","tlshash":"ee92e0848bb103989f3908924e8234e785187707f49423b9f7d44397ab9aef8b4fc758","first_seen":"2026-09-17T03:00:46.34472Z","last_seen":"2026-09-17T03:03:36.639888Z","times_seen":5,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":934,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/wols.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.063Z","timestamp":1789614145063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/wols.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEA9MNK%2F7vMDyF61OzWeOoOVe%2BvOmGj36ta828Brjy618hOZMpKXXZs1jYUqkKrj5X0hkchcnGe98lnDQOjzDl9DbVCSWI6ZItzaKxNwPVb3HzZnZchZqRRQYRBqRnYjkLyyJQ%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-30925\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae35b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198949,"size_decoded":199725,"mime_type":"image/png","magic":"PNG image data, 330 x 220, 8-bit/color RGBA, non-interlaced","md5":"3b156aeece0754f99d8a8f6fbfe00d52","sha1":"5629659e221ca5731aab3211e2565469a23b2cf9","sha256":"bea8540d072476460e0b8a29bc711c48342e1132dfbc6b83a04bf832bd83d902","sha512":"fa0c29e6c8eca350ca27184fdc07f5968172074fa1a1b3506876c078b88cbc39a0b8290257b0086f36ef882069ce11c66b3f3c4ab563a20a4c0137e360a2cad7","ssdeep":"6144:c/NHVnVBS6Szi2+L2Jhvl5wk3g/2hxtyP4p:MHS6SzdPhvlyBQ6PQ","tlshash":"db14220ea8e4054cbb1a65d0a22d130c549f47f9156ada27fe85bd4eb2332c7cbee464","first_seen":"2026-09-17T03:00:46.358261Z","last_seen":"2026-09-17T03:03:36.632429Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/aztc.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.074Z","timestamp":1789614145074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/aztc.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Esg7JcJGGpKnhKFXBJVaHi7LkdY1gqJSoJrri%2BEdqheKNuAGRg4EuwbTyNRXYDOPfNQ1RuJvG7a3si4VnCiOP9PNINxH7addTlTD%2FyZIE3dwDhUIC8ghFywjTghnW%2BLr%2B28w%2Bg%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-648a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be40b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25738,"size_decoded":26336,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"f5dfc5ebebfdec0d3235172e5105c110","sha1":"508d2220ecc0e2505ffdd8ec640abea80d5b040b","sha256":"1180ab80ab3e29aaeafc4617f49246d76a40d5c1f5980401661087d8b436acac","sha512":"6cd712e11d321ce5af09261287d83451fb45360bf52475478f6c2ce2d638cf6fdd1a8da527aa64df7025161896fe995bc76f881c1b41bb489fbed6e7845e8d7c","ssdeep":"768:sQ7eEir5DwPjpn+LIMfnIKHeYV066GJbnBaYM:sQ7ezsPjpnSbPH+YV+G9BaT","tlshash":"70c2df7e28fce2859fad93ee8004239711a8cdd52b8075e32e2752e0a98fd3dc65c614","first_seen":"2026-09-17T03:00:46.335409Z","last_seen":"2026-09-17T03:03:36.636082Z","times_seen":5,"resource_available":false,"data":null}},"time_used":943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":943,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/MasterCard-card.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.084Z","timestamp":1789614145084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/MasterCard-card.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rAQtHN7dSRMQsEGszWQX9YD5YKYCzO9uQAvPzuxcM3Orz%2BN7YmizOCpr8kJG%2FcBDMqW29%2B43tTXNrKu5P6idAg4FqbrH71lB%2BwSPYOSTyAKOtMZgKsxPJHHw8MgefHKgdH7ZFg%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-806\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ce4ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2054,"size_decoded":2777,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"e57dde54e51aa95ae38eabe62d5708a1","sha1":"12ce0689d3bc521bb45561efd1b9140a596d4daf","sha256":"8e2d479a298b01799d06d2c0e90d60ca1fcfcd2836011cee080c593668b10640","sha512":"5c19b3bec6b6da22810622dc68186bae5fa03e8007bf18d95d7a3cbea10295e9ef4f6da45398a80302f15737b6fe25652a78187e0c7b80da635e4032897e79ce","ssdeep":"","tlshash":"72411875475c9f18e94185b85e2f1ea90920c39248341b080b9af176ef8bbae680e867","first_seen":"2026-09-17T03:00:46.355734Z","last_seen":"2026-09-17T03:03:36.640361Z","times_seen":6,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/SanukOT-Light.woff","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:26.063Z","timestamp":1789614146063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/SanukOT-Light.woff HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/app/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:27 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\npriority: u=3,i=?0\r\netag: \"69a50eb2-7980\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaVyixV6YLRk8WGP%2BR%2BXj72ywTuvvHPcSICG%2BYIctcC4z%2Beck2RJMg9tNatWjhwvJttcSLJlK6%2FYk6DoKraqnrBspygErphI0LvsUW6JK5ZvpRl%2F6kw5jWYMs%2BjoFxaYUTu1qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df3ceebfb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31104\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31104,"size_decoded":31810,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31104, version 0.0","md5":"489417113830816b57ada65073143cab","sha1":"f4d3b6be7e0f1268d0ffe02576d95598f26c4db1","sha256":"a00eab424dfebc0db3af03dabf897aa54adb5eeff8a486597a8bfe509f80577c","sha512":"e3d80ce451e651f8c568b4bc1712f9c84f61c2facff82079c3c818661fc4b0dfa4f5c92920912e1d35588803bcfc4a6f7d245a6c141dfa51f5432ac0dd623342","ssdeep":"768:GsXbnBj7lf1HacDbxcCXX2wkmDlSQuur6iiVkg7l:/tjRf16cvHIHKal","tlshash":"03d2e17e3600d7fce3dcda260bcc99493c5996f88651135dbd96ec8b9025d21ad4832f","first_seen":"2026-09-17T03:00:46.324749Z","last_seen":"2026-09-17T03:03:36.651382Z","times_seen":5,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":960,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.045Z","timestamp":1789614145045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: gzip\r\netag: \"1f9e9d1a5a1d347d945ef4b7727f2ea0\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 756\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 01/26/2026 19:03:12\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c0368ffe41bf56385aa9ecd03b1545ce\r\ncdn-cache: HIT\r\nage: 3479000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3c4df36a9a62678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21658,"size_decoded":5177,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with very long lines (305)","md5":"1f9e9d1a5a1d347d945ef4b7727f2ea0","sha1":"2a8eccf4ac288eb99979b62dcc1cc1036d8ff8fa","sha256":"3083e8d3b21ddc3f0e6d65ec3580aa6edfaadca5d9737d9caa27e6a233e1ccf3","sha512":"c67c0c483bfb36fe499976f8f20283e44c553a75c06cda415950174e8f41256449472806f27c1023cd68e5b61ef26c9cf6488417faa13063e3912b05d3a8721c","ssdeep":"192:bq+lW/OvbgA6f20Mc2SBvipVZ6AFatEUISIDLvnkvMa+0k9YT/nod1B2RNbYImDu:Jv3Sd81wEVSIDLvnkDyYTQBrlk","tlshash":"76a242ece5bf18809395e0c17386a330bb3db72d9c4a6d9cd2a2799cb5c1654c6863cd","first_seen":"2023-04-05T09:47:25Z","last_seen":"2026-09-17T16:01:05.178772Z","times_seen":4651,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Olympus%20Storm%20Connectify%20Pays%20Power%20Combo.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.058Z","timestamp":1789614145058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Olympus%20Storm%20Connectify%20Pays%20Power%20Combo.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxxZOhTDsaKXz%2B3owVlbEUH4PgUHyj2Ewyx9pc7Tm2hs2if%2FodCZJCL6fVS4HgreVATXeZshAPDF6cC0i591uzpHGN1t1Ul163AW8jGv63YJ2%2BXjj9rp%2BGXJL0l43ei%2BYRVQHA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-53fc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae31b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21500,"size_decoded":22101,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"6a4df8e4e67a4f90f010452c40135a2a","sha1":"094e957b49ee283d9024bdccaadbf327d177be33","sha256":"1b07116adebd8db60c9c1dc407511cf86d4707faccd6de69c07cbbb96becd4de","sha512":"d24ace7d8f19a01d7495e18ce8f99896da55535d82d7ea782511595b823a8b07ac11ccfca19ed7564bdfd7b22738c86a3e4a7fab8c155aa7950462b3da110dfe","ssdeep":"384:MrHYgzUNqkV460e6xTCdrrKxyqQQFhgCfKpO3qdseHvJ8AUABYs:s4a8z0Za6QqhLzfwO660qEYs","tlshash":"e9a2e119a0bf07da0f314eb64e1a1396dac709132f922a31637427f90753f27e946bc9","first_seen":"2026-09-17T03:00:46.314446Z","last_seen":"2026-09-17T03:03:36.642096Z","times_seen":5,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/JewelsQuest2_icon_330x220.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.066Z","timestamp":1789614145066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/JewelsQuest2_icon_330x220.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQ%2BJohi1cJG2UYtYLC00wJad4b9H%2BLB8Qz4mgsD8RboBlFM1bRRbhRWOtfiRznyNeXwsg07a5iaUlEf%2BZS1yK4f0szV90a33J1YPAPFmsvhEYaHyYqq7zLGmYbkW%2B4YWHv9tFg%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-4b90\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae38b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19344,"size_decoded":19940,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"12e2006be6df27ea0ed07655a94de696","sha1":"cd4d637ecc7b0eb4ab5e9f232e538a6ff7f40e2f","sha256":"9b5b7740efc9bd0713a60f27a8346bc60dd71e4ed67461003662d9f950dec210","sha512":"59529b2bf7d2e223d13c3fe6e41c6e7ac19a09db879d34b9542dde4c641a56f226cdda7be450a3c27a84ca12e1e8b78189b02e6361beaf170ccb0a373da4b50a","ssdeep":"384:Mr5FFAIK1nJ+cZjdk3r/pBeN7t3ANotT/B0OgyrQQZWedvm2hEA:sFTiMQjdk3r/Xez3ANGT/B0OgyUQZWeB","tlshash":"ff92c087e26087f107753badb7640e7fc1c821a3209a42e89d8fc4467d05e756a972cb","first_seen":"2026-09-17T03:00:46.34584Z","last_seen":"2026-09-17T03:03:36.622718Z","times_seen":5,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":930,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Cryptomania_Bingo.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.072Z","timestamp":1789614145072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Cryptomania_Bingo.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnlF%2BMG2fB5Fpi2TI10DQg3WHLmIfESlFIo7J9y25U8XyyDPssF8WBvMvxlS6QOdUnDMzIJBnibKSx%2F9kjRs2PA%2FOUtMV8pbCRaE%2BDauowAiooaL3fKAqL7XFFsZ%2BiGbDJgS%2BA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-564b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be3fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22091,"size_decoded":22689,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"09250b898b037b2e4cc43ca1ec0f0419","sha1":"e8d4b91ed0dd2a7d220aa5610e2560552a8a40df","sha256":"0fcba00ba1d95212378fc03498b09d189edea5434f1238cc50d5032cb048433d","sha512":"942c4bd7bd2cdb1964ae22cc18b6fbc978f3351fe9db537f81118d1a906146c0378fb7ae33dd18ec5f66208c926e494d39f91d2995ed2fd23be7b0feb5e305e8","ssdeep":"384:MrDO/oh1JNgnC7itbcGA9LMSort3fmzOd3jlXTqfjIj0GaBSdbiqm0qnalcZTwSq:sDO/6+C7itbDigrtOzOdJGfjB8CqcZTM","tlshash":"5fa2e07e8b4273e354b2a82e4f40744e71a9a7d8ff8889356d87ad042ec1cb6c09d0c7","first_seen":"2026-09-17T03:00:46.340595Z","last_seen":"2026-09-17T03:03:36.642617Z","times_seen":5,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Lotus%20Dynasty.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.073Z","timestamp":1789614145073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Lotus%20Dynasty.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpTtpvoZcrmWcqwARZ%2FYo6vLtHaJ9sfPnl47iyI2UYjqOkrMJMkd3duw148ITQpukpgNLDp4hmp5Ohld9uoKYZJDFrZn8HpcABNfWTWv4lsniloZjrnEklgCLVqKnzw%2Bqzrt6g%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-47dd\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be3eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18397,"size_decoded":18978,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"014744beb84902de4c478a3734340082","sha1":"50208eab5abd56d80316a61dd7dd65e94c565ce0","sha256":"998d4d48277dd0e03f7fcff8f05089fb7b3a16e0a8f15b5a63bbaac879fd04e1","sha512":"545aeb65e6d54df984b84210cfc55e47694c97fd033a6af70ef81850d5942425703205e80a25061958f67de79e60fbcd572da256bc7a2b5833b940227bef0f3f","ssdeep":"384:Mr3R88s5JuR1wCd6I3/1BzrLExtzEtDlwxpubCD97t:s3R8DioCUI3/DMREgeu5B","tlshash":"5582d0600de023ae2b1d7bea29f242271f322d9b5846db35dcc1e8d5f52ae6648c8125","first_seen":"2026-09-17T03:00:46.354619Z","last_seen":"2026-09-17T03:03:36.643206Z","times_seen":5,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:02:23.646Z","timestamp":1789614143646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 20 Jul 2026 12:49:10 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8e7VJ9R%2F3XDdpnNGW8DpMDaa2uykqZkqlZP4lE%2FGYlbJG78wiXVSBkQFOlD5Wh9HhTVKmqZrAUmW4NmJ5RE0WgXi0K%2BL2seIZmJSOid9%2Fyee%2FyjusZTY95VnFFKWZUZFz9hLdw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3c4df2dfdd6b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":174990,"size_decoded":15815,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10687), with CRLF line terminators","md5":"33c48da265d8bbdd6157637ed0737fcc","sha1":"e80d09e37faff3b668b273d8a72fd8e5a37d0f42","sha256":"19b2ba15c908cbcdbcf4ad5b98450d65c63bda73967447434e6eab7ff32d91a1","sha512":"333c93c240251f8c4e6064383f3f8b65f6fbf8f2c673ed4458d7d1ec9864a2397d72e60ebe3658f8a1d9a95caab5f45ab9ce3055934fe856e55e7ae32bd46a04","ssdeep":"768:aUvdNU/i9HmInpGZNaI1+cU8l69NgSu8Kr9UwWOrA8olA3aW:PdNU69HmEpGZNaI1+z8+aSArKOrAUaW","tlshash":"0204411304c12127903383949f6b2b2eff554147eb4255893aec679bafbaf079463b8d","first_seen":"2026-09-17T03:03:02.224066Z","last_seen":"2026-09-17T03:03:02.224066Z","times_seen":1,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":0,"dns":5,"connect":18,"send":0,"wait":953,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/captainup.css?ver=2.0.14","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.812Z","timestamp":1789614144812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/captainup.css?ver=2.0.14 HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uh6TbR39WrmZ2G0p9kV%2Bv2Jupe4FWfKN7pGTMyNfrvjhs3sDNGFBz6xYyvYCpe3SJ%2Bbh3K3HR0QzX5ba2pcBun9OZJoOXgTwLjteZOVewFcAJwkP%2BJlXzn3H2JAuTxagzdXJIw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb2-cb6b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df351e1db51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52075,"size_decoded":11960,"mime_type":"text/css","magic":"ASCII text","md5":"9631e7f183d41c27dcf5e074aedf34c1","sha1":"c2e55a3385251762bee76f85e0760666f33a5ba4","sha256":"608b285e28b47ce23edcf4cb86c6231e7a61627aa5f64b3bfd8c50c0a15cee75","sha512":"453bc07fc77b838d75dcc4caadc5ace3178270284507df1172a30e94d929a4b1b5bd8932820b72839acce55894a5f473977b99b7cc95c11241783e4ab1e10c09","ssdeep":"1536:70lKl+7eZhnMFf1Qaf049IOflOiZYaniWbkza3qJAJwE4+urxcBvswcphYHcXj1T:qUm048aiKKAJwnNuD1MI4","tlshash":"0d33a52a2d541c05921fe09d7de89b95cb2e8091da0f6ddea076296cc38e1d409bffcd","first_seen":"2026-09-17T03:00:46.315766Z","last_seen":"2026-09-17T03:03:36.63358Z","times_seen":5,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Logo.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.055Z","timestamp":1789614145055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Logo.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxMhoywJ2JJM2sFBFelZuBgHGU1IPGQWbGqzNq6nvQQ2kwWwfBNuubfm%2Bm%2Bj6cwsPbofpgKU%2Bn3cyPZggHoGJfGBXn9%2FvJwvpawI3UdmEJhlwDJAhpvKep5hjNkA16nBFU5HqA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-1206\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df369e2fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4614,"size_decoded":5082,"mime_type":"image/png","magic":"PNG image data, 164 x 80, 8-bit/color RGBA, non-interlaced","md5":"32fbde9bcebe2e8cd8939148d2f283f9","sha1":"33ca1ec56be3e0f5c9a8c3765e5e8d92dedd6063","sha256":"c3a43cf31f9e4bd079e6d6401c2d9f5276fbee0c2f1fe6ae99491d236a826d78","sha512":"9eb16b6dcac4f4ead92ddf7926ea69e405a27000b6f0227b239fb82a6ce77808eec7ca0a7e346fc642e029992b49aae0f0a3be18e6e8c0c4993d046bbdfda008","ssdeep":"96:VSl2+xms/XPZEQ2226zY68RHjjcKT+XFJh6kPRgiWPPmjZp:wxmsSQ2F6zY68dcKT+fh64Rg9kZp","tlshash":"c4914d06b81404c0d47add940ae1e51f9e8748d5e0efbd26678bd4a21df23be942e1e1","first_seen":"2026-09-17T03:00:46.317498Z","last_seen":"2026-09-17T03:03:36.622175Z","times_seen":8,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/711-logo.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.078Z","timestamp":1789614145078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/711-logo.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8G5%2BU4z%2FhOPNnunphhDVEcmtc4vp%2FJG%2ByGlJQ8KQvPPdm%2B%2BVaKIxnjHuvcijri1RgEq4h0zWwcoWuS0027XtYUyS4Ebh3aIhq8a6I%2BzizyzRg3nmR9L2LLDVjSTUHqEsMFJF7A%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb0-6bc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36be43b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1724,"size_decoded":2458,"mime_type":"image/png","magic":"PNG image data, 92 x 44, 8-bit/color RGBA, non-interlaced","md5":"a3eaa1ee05bb0bdd9ec43eb224893fb8","sha1":"a960827599422cae129feddb812e58b781225423","sha256":"698d9e0c9b34be7543d5e102e0ba653968474cc66e29034161c129f208ef5af8","sha512":"df1bab1efa85dad617a43e55d0023e1b34fdbb27f13f8c8bdeb5f49954212ad26074f3a10de85a6a2b3db7da795d24fb30e78e8705d80e9c8405b8c7305168ee","ssdeep":"","tlshash":"ed3106630e4b6829cbe7acb223311ae297e49a76040810d6ce4c01f2c9a8b44d87f4b1","first_seen":"2026-09-17T03:00:46.318545Z","last_seen":"2026-09-17T03:03:36.63914Z","times_seen":6,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/cropped-fav-1-32x32.png","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:27.032Z","timestamp":1789614147032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/cropped-fav-1-32x32.png HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\npriority: u=6,i=?0\r\netag: \"69a50eb0-286\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uW4FvOlek2xJO6S1K4pzOesP%2F4UC6BZ2Ho15tLOr1euN39zwLO6BtB4CILWI91RLLgiIxafPXn9%2FowePYRSM0LlApdUe0Mw0dXX0gCSv%2BrNs7mEJxitF7JasQgm1LsvMysUQNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df42fef1b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 646\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":646,"size_decoded":1341,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8c2fd68f943138f59224d8268532d54b","sha1":"89c50139ad1000e90f5d47f243f70110a756a582","sha256":"3483199e0ad71179a871fc5484e0a94d49c53d91ce2df26b29ca7a97dc07fb78","sha512":"fbd02854b480baafd12b8e70044a6e0f158a7255372652419f83947c293a6d42ca17ae27094d4c010ca817a38ebe63b5eadf4cb3239c771c9319114efcb30555","ssdeep":"","tlshash":"7ff068ef022c85b4c2ed432c18110cb7f8727d482a12765f7197c82961efb5448df517","first_seen":"2026-09-17T03:00:46.332791Z","last_seen":"2026-09-17T03:03:36.64385Z","times_seen":5,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/style1.css","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:24.810Z","timestamp":1789614144810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/style1.css HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 04:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcs1EXxWGg1raVVz44SF8FrV9z9SlDass%2Fiw9K97FKCVeWDleRfky1aXa%2BN66ztJBM5zeXSqvoqtPRLjkFZszsGoMlLByYoIl%2FTZFuSdTThOweARf06z676%2FgeZ1VLT4hdKWoA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"69a50eb0-24c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df351e1cb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9417,"size_decoded":2511,"mime_type":"text/css","magic":"ASCII text, with very long lines (8856), with CRLF line terminators","md5":"84338ba4df60b568c4ac47160b9d0668","sha1":"53d727946a4bb4b5ccfd22f2049ea868b014be78","sha256":"613ec2650fef8287961af5935e0c6722edc5c4e906b739733bd0f89bf1a4fd43","sha512":"6751db05f369065844cd7e52b93982004f6772e6619ae23b5abd31ce03b168f5d6d01b29f33943a8b1d052a38e14c0b92ca86b4b39e24caa4d035446093269ed","ssdeep":"192:uq9rqWRXdqZsTaA+1BNslQCfEGHRmy4kWV:uur3ZdqZUaAWkWV","tlshash":"71128e71e0a541a6bf4ed7bcc1d5b339b9a8e7048d02a77630f431989a589f700fb52e","first_seen":"2026-09-17T03:00:46.357292Z","last_seen":"2026-09-17T03:03:36.630655Z","times_seen":5,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.039Z","timestamp":1789614145039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /icon?family=Material+Icons\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 03:02:25 GMT\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":587,"size_decoded":1031,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1b8397b079b50952bc1953622f19590b","sha1":"378da1f1a8f36ab00872375ddf886378a9933fbb","sha256":"ff407d40dc0713b3e03f8668bb2534de9e9c01d030d08e5cfe5b4123e78591a9","sha512":"83622c07315d488741c547a38a659bc25113bc2e47fd65e7374ea4cdc0aec4302edd29b864d03a57cabf91a7e35d114c868570f5396498bb54cc8dddf2a63601","ssdeep":"","tlshash":"36f08b68ba4a9985a6114c42374f7f165d2d401fa80ac8fe8b911d8c8cff5bb134a70f","first_seen":"2025-09-18T04:34:32.278753Z","last_seen":"2026-09-17T19:15:04.865579Z","times_seen":3212,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.047Z","timestamp":1789614145047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://strenduslatam.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 17 Sep 2026 03:02:25 GMT\r\nage: 2826923\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270028-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583362, 397248\r\nx-timer: S1789614145.085501,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-17T18:42:09.990948Z","times_seen":195160,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduslatam.com/app/Santa%20Fe%20Respin.jpg","fqdn":"strenduslatam.com","domain":"strenduslatam.com","tld":"com"},"ip":{"addr":"104.21.23.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduslatam.com/","date":"2026-09-17T03:02:25.064Z","timestamp":1789614145064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduslatam.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 04:29:59 GMT","end":"Sun, 18 Oct 2026 05:27:31 GMT"},"fingerprint":{"sha1":"E6:F6:9C:84:4C:0D:39:9B:77:88:EE:1E:90:F7:A6:79:D4:92:85:1C","sha256":"E7:2C:3B:83:B6:4B:21:D3:B8:44:86:93:03:8C:8A:AB:03:75:73:C4:09:6D:C4:0F:E3:62:85:A0:F5:35:A5:C4"}}},"request":{"raw":"GET /app/Santa%20Fe%20Respin.jpg HTTP/1.1\r\nHost: strenduslatam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strenduslatam.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:02:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 04:14:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0d5NTzCDXLT%2BNas1zOQGiXwDvOgdgYpNH3FNw%2FRAIlQIVAMxCP8WMH75pjKQLjt0NYi%2Bhto%2FbCdwLApnmH8yQG1U%2BjyVxq4qPf%2BN6%2BUfh%2F3XDvXo3tWiRQ03zy07Or%2BFIQr0A%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69a50eb2-4660\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c4df36ae36b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18016,"size_decoded":18621,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 330x220, components 3","md5":"fd86680a788002f2034d4beb8eb1be97","sha1":"67e3b127979e954ffc7f79b1e396840a8c7bd3fc","sha256":"9f12b12a28e004b78d4ea5a097c05d9a48cc2c94fb720d956575b5ccf54c9e85","sha512":"beb69c41a76d2ff559b0a47f773503e094b15059c1f718324c5caac68ebfc7494bd76191cd23a09a4774e2815166b84b1f7fd370995eaaf6efc39ad102d5456c","ssdeep":"384:MrOH0F4fI98r1IUI8ymVOmM/t4StMzSuFIkIzAIzRjOQmU/:sJFUI98xIWdM/t4StMuuFIkqA+CZk","tlshash":"bf82e1e0ec4d0b9e8acd9e20b5fc3e1750a77453aa89793b7ce404d0a9b2c7454483c5","first_seen":"2026-09-17T03:00:46.301329Z","last_seen":"2026-09-17T03:03:36.645286Z","times_seen":5,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduslatam.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
