{"report_id":"59403559-92ea-408f-b50c-9562ff0da3f2","version":6,"status":"done","tags":[],"date":"2026-04-07T12:14:51Z","url":{"schema":"https","addr":"bobbos.cl/solpa/lksae/","fqdn":"bobbos.cl","domain":"bobbos.cl","tld":"cl"},"ip":{"addr":"207.210.83.120","port":0,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bobbos.cl/solpa/lksae/","fqdn":"bobbos.cl","domain":"bobbos.cl","tld":"cl"},"title":"BankID - Nasjonalt ID-nummer","dom":{"size":4897,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2d39eea34fae114cc32fa20e5395be03","sha1":"a9eae2d4467ce759527029f395fc9b02e2bd051e","sha256":"199513fc3f30383bea040aced2289ac02e9014890b70973444b6b088e9075f7c","sha512":"3adf0b1b164ab1bae681a928a8aa57ee03b0ef131cf5b42958b937672b6d51aea2d44bed0b5e73d77e3a54ad9bcfe2129997c9f6573b08335bbd471958f10e0b","ssdeep":"96:doxkf3UQtey+5fiUAmiWgAUPnjsyJQ1mvZtuAR:doxq3ntey+IUAmiWgAUPnjsyJ0mvZ4AR","tlshash":"a4a1129b65e32051795394b82be6874627358403c50acd783f8d6254cf8aae19ff379c","dom_hash":"domhash278c73fae3720841234ba1b25e0f6163","first_seen":"2025-11-05T06:40:26.213149Z","last_seen":"2026-04-07T12:14:52.503348Z","times_seen":40,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bobbos.cl/solpa/lksae/","fqdn":"bobbos.cl","domain":"bobbos.cl","tld":"cl"},"ip":{"addr":"207.210.83.120","port":0,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"tags":["soteria"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-12T12:14:51Z","useragent":"Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36","referer":"soteria","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"bobbos.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"bobbos.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bobbos.cl","ip":{"addr":"207.210.83.120","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"domain_registered":"2020-08-26","domain_rank":0,"first_seen":"2026-02-26T08:08:23.06041Z","last_seen":"2026-03-18T18:00:41.042209Z","alert_count":4,"request_count":2,"received_data":6496,"sent_data":1085,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bobbos.cl/solpa/lksae/","fqdn":"bobbos.cl","domain":"bobbos.cl","tld":"cl"},"ip":{"addr":"207.210.83.120","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"40f269378a1d5859e2f8d7583d1b10ef","sha1":"973102296087073d6ec05c0b66650e62a2c604fc","sha256":"3a43e46353979cfd6e86488c547c10152020987ecb88ae24e8fd8c4fe9b52d6b","sha512":"53ae4dd6dfd875fa5a2720d3daab465a6c8c39567e44c54d4815097345399af25a2b6b6c3c38c1057fd70f297a06c58f599cc795442defaffe2ec470ca6d5f25","ssdeep":"","tlshash":"2901789e71a229750bb764b27bcb5050333248235494e068391c45451fd2e605bfbffb","size":759,"data":"","first_seen":"2025-11-05T06:40:26.245428Z","last_seen":"2026-04-07T12:14:52.511824Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bobbos.cl/solpa/lksae/","fqdn":"bobbos.cl","domain":"bobbos.cl","tld":"cl"},"ip":{"addr":"207.210.83.120","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-07T12:14:30.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobbos.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 20:40:55 GMT","end":"Thu, 11 Jun 2026 20:40:54 GMT"},"fingerprint":{"sha1":"83:3A:92:E1:4C:EB:B1:76:B5:85:9B:EF:23:76:50:B5:7F:F6:91:73","sha256":"EA:F6:F1:61:9B:68:A9:C2:B5:26:21:D0:78:BF:62:F6:2D:D0:75:58:19:FA:29:18:4B:81:AC:83:1E:C9:C9:25"}}},"request":{"raw":"GET /solpa/lksae/ HTTP/1.1\r\nHost: bobbos.cl\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 07 Apr 2026 11:16:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1262\r\ndate: Tue, 07 Apr 2026 12:14:31 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4913,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2141be76c52288a89b87d082fcdfe289","sha1":"b7ae65f00a4216fae2209e9fb12366e96fcc2860","sha256":"705fb0b84ed364feab5d209f024c8f5ad5d9c6b05848213e9e9474ea4dca4df2","sha512":"4cc7fcc6a56018113c5b2835c6e543324903aad302cd8853e32804915d9fb4622bda40c237a472753baf0c375b538eb137bf396c46d104e630ac63ee69eed5cd","ssdeep":"96:Noxkf3UQtey+5fiUAmiWgAUPnjsyJs1mvZtuANAM:Noxq3ntey+IUAmiWgAUPnjsyJImvZ4At","tlshash":"e7a1219b69e32052795394b82be6874627358403c50acd783f8d6254cfcaae19ff378c","first_seen":"2025-11-05T06:40:26.216112Z","last_seen":"2026-04-07T12:14:52.510001Z","times_seen":42,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":858,"dns":433,"connect":212,"send":0,"wait":215,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"bobbos.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"bobbos.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bobbos.cl/favicon.ico","fqdn":"bobbos.cl","domain":"bobbos.cl","tld":"cl"},"ip":{"addr":"207.210.83.120","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bobbos.cl/solpa/lksae/","date":"2026-04-07T12:14:31.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobbos.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 20:40:55 GMT","end":"Thu, 11 Jun 2026 20:40:54 GMT"},"fingerprint":{"sha1":"83:3A:92:E1:4C:EB:B1:76:B5:85:9B:EF:23:76:50:B5:7F:F6:91:73","sha256":"EA:F6:F1:61:9B:68:A9:C2:B5:26:21:D0:78:BF:62:F6:2D:D0:75:58:19:FA:29:18:4B:81:AC:83:1E:C9:C9:25"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bobbos.cl\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bobbos.cl/solpa/lksae/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Tue, 07 Apr 2026 12:14:31 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-05T04:08:52.79697Z","times_seen":53000,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"bobbos.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"bobbos.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}