{"report_id":"84e3f5db-95fd-4fc3-ab64-12f212c0e4c2","version":6,"status":"done","tags":[],"date":"2026-04-11T16:50:57Z","url":{"schema":"http","addr":"recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"3.129.133.95","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"title":"recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","dom":{"size":20611,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e7b8b74f29e9ef2b9bf17dda52b7b1be","sha1":"7ceb7a799d468bb7091c93fd8586e4d2f1330f45","sha256":"202eb1199e44d6af498e936b57f8ef6ffbe3387ede0073f692b9ea59a3ffe3b0","sha512":"c930998437b0755e79b29c25ea06bb4bf484729a6d7dfb986078e5a92244039afa538cc9c841fa487eb02d2dd0cbd4ee2d8265598db24d86950ab4b2035b761a","ssdeep":"192:TN9qPtLThAPjGE/FJlGFlFOa6WMfkTqNSPhAWK9Z8L9qBkRkCuD8saNRyX4U+JiS:5oXrF3OtWLRra8sNXgR/th9XPhWs/","tlshash":"af92242556f310276953b0bc2be39a163661d503d50ece283e9d43849fcae94edb3b9c","dom_hash":"domhashfab99f018f8cdd043061a930458d9a5d","first_seen":"2026-04-11T16:50:58.117116Z","last_seen":"2026-04-11T16:50:58.117116Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"3.129.133.95","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-16T16:50:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"recaudos-postpago.com","ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-30","domain_rank":0,"first_seen":"2026-03-21T18:48:00.798594Z","last_seen":"2026-04-11T01:17:53.662069Z","alert_count":21,"request_count":7,"received_data":114795,"sent_data":3556,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-05T23:57:55.191025Z","alert_count":0,"request_count":2,"received_data":185424,"sent_data":968,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b7639b42c3ae30dc28051252c0fedbb","sha1":"1231748c39e54b551c5039c2ab4d7613816a5de6","sha256":"6eb2db2883c805c8569b1496f903293a7e678824481d5bfc09a4e75342e7dac5","sha512":"f0fe27ae10076d4ecee21dee342079034c80f4d6142ccb3ff03aa7b470c0be7acb8e471a3f5a628bc7c9f33325107411430ee0f9fc104cc7b776a687510e682d","ssdeep":"192:eCuD8saNRyX4U+JioVk87YY2Q/th9XPhWseSn6:Fa8sNXgR/th9XPhWs0","tlshash":"0e121f2923b3202b86b3707e17c7a81534629457a108de047d5d83886fd9fb8b9b5fed","size":9289,"data":"","first_seen":"2025-08-06T00:20:46.352134Z","last_seen":"2026-04-11T16:50:58.124221Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"recaudos-postpago.com/assets/ExitBancolombia.svg","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:35.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /assets/ExitBancolombia.svg HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 621\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 19 Dec 2025 22:24:56 GMT\r\netag: \"26d-646558c0b9e00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ca56addd3c8dbf381758ff8f23722bb","sha1":"49dc7d21f217cd109c8ced7ffd15c56243dfc0e5","sha256":"c1e686e269e9f8f087fa7f381fe9781be957635283261fc3313a537f6e362f16","sha512":"fb11dd7c1b67efc6310057c9173de0b0e88ba50616c5fd516618362ffb3dd8588e46cde6d4a1ae8e1b38c4dc5407982075de59906bf5d8e15df518df51516dd3","ssdeep":"","tlshash":"cbf00293c184dec1a843c3f8b81808f47a3238f6a52cd79c8da239007e495381d8d564","first_seen":"2025-08-06T00:19:59.682873Z","last_seen":"2026-04-11T16:50:58.118486Z","times_seen":116,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaudos-postpago.com/assets/vigilado.svg","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:36.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /assets/vigilado.svg HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 19665\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 19 Dec 2025 22:24:56 GMT\r\netag: \"4cd1-646558c0b9e00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19665,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"760b792bcbc86635468964a497da6f59","sha1":"a716f3a848df98275a43a651d336b6d443bb4dc4","sha256":"96cd80e69d56a93c0149cf700abd8386b847e880e02398065217e67af6023d32","sha512":"f864ab8243d07864b7bb68cb3420c24f2d0acde7b57ccc16306614735ee975b7a52527cb8bf3eb0c9796b6d13549a40e622fd185b56f37e725238a678957fb7d","ssdeep":"384:6QySr0yRsrgevzIQUzW4s3mGiBxc6Xdqei0U7DMR:9QxJzu6m7xc6gei0YDMR","tlshash":"8e92b7f467b693e8a503df7aed3354a1ae0f28f4afc582b9c2a1a85454650e0cd94ce1","first_seen":"2025-08-06T00:19:59.663506Z","last_seen":"2026-04-11T16:50:58.11911Z","times_seen":118,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-11T16:50:35.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /paga-ofertas/bancolombia/dinamicaMano.html HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 4713\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 19 Dec 2025 22:24:56 GMT\r\netag: \"53a8-646558c0b9e00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":21416,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b330da7c75cf6e531c67a707940ed888","sha1":"3f3449f9e5b6d3e248cfa37220c521b9ad2abe80","sha256":"c7c6795613d6111d3851eade5d5b711ae1efc4cec30c802084e7bbdad1dda6a7","sha512":"8f45d79bc80d65fef7f0c85d66b4611f6adcdd72574e3ed5d4298dad5722615c3cb10c96132a9ce3f5b39a936d0086a62ae5acf122301c1642f12300b0617366","ssdeep":"192:UvPlS6Yd6k4LgU8V/8351w9/192zz3KyZ7srNRLka+eC22qRIju/I2saM:+8h8/31Z7svLkFfqRIju/I2s7","tlshash":"bea25125969000179573a3bc9ff39a19fb528153d2068a283eec43865ff6c54e9a3fdc","first_seen":"2025-08-06T00:20:46.312543Z","last_seen":"2026-04-11T16:50:58.119737Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":488,"dns":9,"connect":105,"send":0,"wait":107,"receive":1,"ssl":367},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaudos-postpago.com/assets/terminadoLogoBancolombia.png","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:35.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /assets/terminadoLogoBancolombia.png HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 21785\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 19 Dec 2025 22:24:56 GMT\r\netag: \"5519-646558c0b9e00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 163, 8-bit/color RGBA, non-interlaced","md5":"e930fd0d018296b91db974db3e0e3c53","sha1":"469e86851a586ac2efb66530cc45ea15e5f4659c","sha256":"fb0022918fe0ed7fa82821d85814601ed270ae5f6ae3b912af92b195215bfd36","sha512":"df84344bb4016e0571e434d083a85116bd1fb4d33141d941253cad631f1e207e948bfc643b186e027e2cb91a4f5f52658757c2c16ea4390c062c0f35185ab311","ssdeep":"384:iDLCvvsx50BFYBUXgbeabclgNUwofues2ddyOgzHnD2eDmURqGSEynzU:xvvsX0BeBIgb5YKyjd9kHnD2bO8FU","tlshash":"f6a2dfd4c8bc54cab2a87012a71f6bf2b7514389929b8cd3831bc850c729d1116ad9f7","first_seen":"2025-08-06T00:19:59.615206Z","last_seen":"2026-04-11T16:50:58.12035Z","times_seen":53,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaudos-postpago.com/assets/fondoBancolombia.png","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:35.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /assets/fondoBancolombia.png HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 35443\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 19 Dec 2025 22:24:56 GMT\r\netag: \"8a73-646558c0b9e00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 459, 8-bit/color RGBA, non-interlaced","md5":"3ac7db0022b41f7654d78091b107e9ca","sha1":"f52c3943c3b8a7623a59706e9e9a8763e4835d75","sha256":"cde98a977dbd01bbb82fe1248317fdff0de8bcf61d97369217f74d319e6f9d56","sha512":"3e9890260810ad54b892edfd4cdefb3a77091e295f11c0b831ed3a26ca9d3fc6e5b29ffe331269b426e00f75734c82cefe8ad99159e68ee054b0441011bbd48b","ssdeep":"768:Jm3dynSMn98XQK9LjLsKAZcli3INJgcyfGU0mkwmk55M:Jm3d/Mn98XA1uli3gJZ2V0nIM","tlshash":"73f2e155aa63f2258e3f203072a471ff3b205c52a8c2a9727bfbc448e467456f4d57e8","first_seen":"2023-07-22T22:53:07Z","last_seen":"2026-04-11T16:50:58.121147Z","times_seen":238,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/boxicons@2.1.4/fonts/boxicons.woff2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:36.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /boxicons@2.1.4/fonts/boxicons.woff2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recaudos-postpago.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unpkg.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 115680\r\ncf-ray: 9eab7dc01cc10883-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 55984\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 16:50:36 GMT\r\nlast-modified: Sat, 22 Nov 2025 00:22:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:S4fLx08/+vCDFKXYG1Ab5vw29VPb5EbvWksp8BOLoLA=:\r\nfly-request-id: 01KAMF2CREC8DHVN4E7SDQ8R1F-fra\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 115680, version 1.0","md5":"aab73283f839e775f9ac86d642983653","sha1":"758608b6e39cd423dd99eec3980f8e8aae0d96b0","sha256":"4b87cbc74f3ffaf08314a5d81b501be6fc36f553dbe446ef5a4b29f0138ba0b0","sha512":"f4ff27e4834b385c3515dd1781489bdce67ed53017c110fba7008423c7827e25fc023f888fd2e9e5dac33c4a55feb349a2d2f1a76c852ba98e0e319cf1a4a989","ssdeep":"3072:aqdclTFC0PeMsyBt0f/OOpgsTtqNa9H0PxWSNXUOWIMBhDM:aScHC02MsQWAs9H0PcSnXMBG","tlshash":"10b312d369911b940ee52ba2376818ddd936539b390a4b3d55cd200df48aaeb3e19cc8","first_seen":"2023-05-01T16:46:39Z","last_seen":"2026-08-08T21:31:16.072069Z","times_seen":3360,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":20,"dns":1,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaudos-postpago.com/favicon.ico","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:36.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 283\r\nserver: Apache/2.4.52 (Ubuntu)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"9c4ee04d869dcd59c39f88cfeacb69d2","sha1":"104a7c413f7b38a7b484d7e5d5e1e33558223848","sha256":"b518124fc46004e9bcb8b8dd5705e34085f0688c88715aeb3bbe14f74766972d","sha512":"f03e25d6a3868f9b83ccf21ea181737eacb7e3fc32a6eebe1c92439bb1af62460825c872f5f2f7678d0e1c8a584acf4fa00abdc7d0b1ae4868a7c228f9ad060c","ssdeep":"","tlshash":"3ad0eb9e5043a28b8d1200a038c110c6268c13f6a03a8ae83d82d48b82985becd8aa8c","first_seen":"2026-04-11T01:18:00.245662Z","last_seen":"2026-04-11T16:50:58.122301Z","times_seen":5,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/boxicons@2.1.4/css/boxicons.min.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:35.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /boxicons@2.1.4/css/boxicons.min.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: text/css\r\ncf-ray: 9eab7dbf19e90883-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KFH75J04A7GNS4NCF30KVZ9W-fra\r\naccess-control-allow-origin: *\r\nage: 619575\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 16:50:36 GMT\r\nlast-modified: Wed, 21 Jan 2026 21:25:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:Yg7qJLDO4djMg5XIDylc8ue2+rliSTwmtJqNQrY6Tck=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":68028,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"886ed8dd06c506c77cf226f4506b3c00","sha1":"207fcedcbff6a05bb21711b173d879fc0416cd2d","sha256":"620eea24b0cee1d8cc8395c80f295cf2e7b6fab962493c26b49a8d42b63a4dc9","sha512":"727d7a430f26cd304aa6ed3c5f47f08534afd3690afc5a238cd2f3d1bc29db12781fec9a970cd7285c3fe5c2f3b81642c4658803ef795f8b24cefa3c49336d4a","ssdeep":"1536:iYKTLiBm3+avY/Ys0ya9EtAAu92jneUa69jAXdMm3CYlsTMu7knbU:idw7iU","tlshash":"96633cf5e59944c93b32e447c784f74c20aaf931da421d62f26f941e6ed0a250bc6fb8","first_seen":"2023-04-05T09:10:20Z","last_seen":"2026-08-08T21:31:16.105626Z","times_seen":4646,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":26,"dns":6,"connect":3,"send":0,"wait":25,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaudos-postpago.com/assets/logoBancolombia.png","fqdn":"recaudos-postpago.com","domain":"recaudos-postpago.com","tld":"com"},"ip":{"addr":"18.190.204.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html","date":"2026-04-11T16:50:35.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recaudos-postpago.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 30 Jan 2026 00:00:00 GMT","end":"Sun, 28 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1F:AB:99:CC:50:0C:A0:9B:F7:0C:36:88:73:4D:FC:9A:22:F3:20:B6","sha256":"BF:39:10:D7:12:42:96:B0:90:C6:15:1A:2E:96:8F:10:7E:D7:BC:28:B2:D3:15:40:00:7E:EC:5F:F9:00:97:8F"}}},"request":{"raw":"GET /assets/logoBancolombia.png HTTP/1.1\r\nHost: recaudos-postpago.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recaudos-postpago.com/paga-ofertas/bancolombia/dinamicaMano.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 16:50:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 13847\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 19 Dec 2025 22:24:56 GMT\r\netag: \"3617-646558c0b9e00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 459 x 108, 8-bit/color RGBA, non-interlaced","md5":"bf82652458b2fa57d76c20e4c30b98f4","sha1":"c2fdfbe8cb15391f9c1b00cad175aad836b16809","sha256":"d017de7c6935c3c5b2c701f3007a179f4b25e369d12442804cbece450b4af822","sha512":"73e296b10f955c204e665ae3c5413db406f5310d7624cdf92eb499715a789d8730a180812762fc726d71a5c5bae6159075e7bfdc75eca7dc092a836d334826db","ssdeep":"384:FygHTpuWpAEdjnIDYi9vUxlXeu7+bx6Z6WedY:F/PpxlaYuvy4lAq6","tlshash":"9552c07660401bcee7631e65a01b5166a913315402bd9b37ee38a0f5d0e57415f6be3c","first_seen":"2023-07-29T00:38:32Z","last_seen":"2026-04-11T16:50:58.123678Z","times_seen":120,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"recaudos-postpago.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"recaudos-postpago.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
