{"report_id":"89ecc33b-a10d-4eeb-a17e-a570b5b0dbff","version":0,"status":"done","tags":[],"date":"2026-06-20T20:46:01Z","url":{"schema":"http","addr":"matesanto.com/distinguishedcare/distinguishedcare.htm","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"ip":{"addr":"148.251.239.20","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"matesanto.com/distinguishedcare/distinguishedcare.htm","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"title":"Secure Document Access","dom":{"size":42803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32209)","md5":"61499c9faa12007a870897227de2e653","sha1":"c749b3a380f0ae24b3021f7f81a152008f66b1ec","sha256":"0cb3c5e4b4aeb3dbbba58db2a67557ad3f8c83d1e016aa5baf58cee319a0c6e2","sha512":"848bb65fd28ea50cee03b94dccef112231c7002aa4974b8c57336f593d99e75a66f242fd43e9a1f30c0897febd251117650ca9b57b06694396bca8ef3c0b4406","ssdeep":"384:GiGEjdaoJRYak6/7tbi44ELHrfi3/s5MdWvrj9V2x1YrJo9h:G2daoJRYakmRQELHryEv9V2koH","tlshash":"3313147cb212cc8dec23667beda82b05d1509e53f8cde6c4389d40852fa099af5547ea","dom_hash":"domhash12bc4d8cc16fb4dc93db7a768babdcf9","first_seen":"2026-05-28T23:18:55.429465Z","last_seen":"2026-06-20T20:46:01.960514Z","times_seen":13,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"matesanto.com/distinguishedcare/distinguishedcare.htm","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"ip":{"addr":"148.251.239.20","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T20:46:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"matesanto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-14T22:40:52.388947Z","alert_count":0,"request_count":2,"received_data":254095,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"95.101.10.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-06-18T23:16:48.905463Z","alert_count":0,"request_count":1,"received_data":11180,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"matesanto.com","ip":{"addr":"148.251.239.20","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-03-02","domain_rank":0,"first_seen":"2026-04-24T01:55:01.678202Z","last_seen":"2026-05-28T23:18:53.532912Z","alert_count":8,"request_count":2,"received_data":32943,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"matesanto.com/distinguishedcare/distinguishedcare.htm","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"ip":{"addr":"148.251.239.20","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cc7c72d0eb2394b6649aa540feb5d09","sha1":"b1bc18ca8d7a12952d926a77342bd50797738495","sha256":"343b7d56661448fb3c8e41e4662bc0cadd777f5ce39f355768d5ea18c7ba58c2","sha512":"48c804fd289954ab20fe7cbaee06e8a6b3e3dcc368eab8dd1d9f393807852508ae601e950861a6fe21b3f660e300cc54667c159393ab649c3e15ad205d7b9582","ssdeep":"384:miGEjdaoJRYak6/7tbi44ELHrfi3/s5MdWK:m2daoJRYakmRQELHryE6","tlshash":"d2e2593cb212cc8dec736a7beca83b15d1549e57f8cda7c4046940863fa096af1587e6","size":32209,"data":"","first_seen":"2026-06-10T01:57:44.687718Z","last_seen":"2026-06-20T20:46:01.966663Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matesanto.com/distinguishedcare/distinguishedcare.htm","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"ip":{"addr":"148.251.239.20","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"62064f5856189eb2adda41df5c9cb85f","sha1":"cfa17b9061a56740bd4748944a24420c06061ac9","sha256":"7c4b208e2e2658d1296558a8b9309e8ab5e20e514347df372fb4e5cda475f2ab","sha512":"bb4102a0fb48c8605e28b46cffb4385af0711f4e2d42a51652c9ca547dff9e4c9413ace133978ba033101ce0ac4861238015e62c047e7101ec9afef2e9de81e6","ssdeep":"","tlshash":"924144e9d0bb34a0155ba0be23b3438978611067f508cc4a3d6c86550f52f81aee3ff8","size":2432,"data":"","first_seen":"2026-06-10T01:57:44.689191Z","last_seen":"2026-06-20T20:46:01.967251Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"matesanto.com/distinguishedcare/distinguishedcare.htm","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"ip":{"addr":"148.251.239.20","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T20:45:37.240Z","timestamp":1781988337240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matesant.abakotest.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 02:18:47 GMT","end":"Sat, 22 Aug 2026 02:18:46 GMT"},"fingerprint":{"sha1":"F1:9A:42:DB:BA:13:2D:9F:FD:96:83:7A:1A:68:65:31:B7:83:06:87","sha256":"63:21:2A:96:C0:DD:DE:78:A3:6F:85:20:BB:50:1F:AC:FA:ED:E5:B5:08:A2:7E:59:F4:AD:59:16:6B:EB:DC:F2"}}},"request":{"raw":"GET /distinguishedcare/distinguishedcare.htm HTTP/1.1\r\nHost: matesanto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 20 Jun 2026 20:45:37 GMT\r\ncontent-type: text/html\r\ncontent-length: 32232\r\nlast-modified: Fri, 05 Jun 2026 11:48:40 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32232,"size_decoded":32435,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (32209), with CRLF line terminators","md5":"7499fe2df69216762c7b0a50cf0b9691","sha1":"3c02c743e542819e06efd6d2cc0292026998eff7","sha256":"0c69cc7465747d7459350b15b1d178feabe20eee9e8f920ba01c0324c09ea849","sha512":"fb5d1485f59747f1cc5a18b405e80cd11738b72b40de019f6199a7ed37023d5018f7eca64942d6e89dedf935fe67f798a79bdf74eaf67307a2c4cc55135da1f7","ssdeep":"384:iiGEjdaoJRYak6/7tbi44ELHrfi3/s5MdWk:i2daoJRYakmRQELHryE0","tlshash":"d9e2693cb212cc8dec736a7beca83b15d1549e57f8cda7c4046940863fa096af1587e6","first_seen":"2026-05-28T23:18:55.434111Z","last_seen":"2026-06-20T20:46:01.962259Z","times_seen":13,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":121,"connect":34,"send":0,"wait":67,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"matesanto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://matesanto.com/distinguishedcare/distinguishedcare.htm","date":"2026-06-20T20:45:38.021Z","timestamp":1781988338021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matesanto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 20 Jun 2026 20:45:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 14208\r\nexpires: Thu, 10 Jun 2027 20:45:38 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbqucqYolenx9RiiEonvQX%2FRNYLNEK9ur%2F8vCIkucxt5ZYKPgOm18jPN9hXuTODIPJzaWDMqd9yO%2BbwgGNgLdi3nu1gV6paKDwS8i8porlrwFcUKyl7AXQ0COJ9S%2FaN9sjdyaWrV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0ed9e48bee65695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":19727,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-03T23:19:51.471271Z","times_seen":59008,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/4726/4726010.png","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"95.101.10.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matesanto.com/distinguishedcare/distinguishedcare.htm","date":"2026-06-20T20:45:38.031Z","timestamp":1781988338031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 07:09:24 GMT","end":"Thu, 27 Aug 2026 07:09:23 GMT"},"fingerprint":{"sha1":"3F:C9:F2:2C:B9:3D:5A:B8:5C:51:20:99:4A:C7:F4:FD:B5:63:CE:B3","sha256":"48:B1:A6:08:9F:69:B3:F5:90:BB:AD:4A:A5:2D:34:F3:29:98:74:97:08:A8:63:F0:CC:8B:1F:82:E6:40:F8:E6"}}},"request":{"raw":"GET /512/4726/4726010.png HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matesanto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 10645\r\netag: \"dedce39251ef755a9d9a2db9fc890baa\"\r\nlast-modified: Fri, 25 Apr 2025 17:30:12 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 20:45:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1781988338060_1600457270_47510315_92_1107_1_22_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":10645,"size_decoded":11180,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"dedce39251ef755a9d9a2db9fc890baa","sha1":"381b307106a0b1daa30902010e6bfb789496c77c","sha256":"9d453ce7da958b3b237ce1c2fc9a23a366cc61d724da0cd46d4537c1f49b3573","sha512":"8550d3ac051bbc217321286b92d82fa75c90fac78a117f98ccca8c1051548e9bdd8bf2613ff426398a3c5ccd677cad6a7d78a360c0d5803ef6c63ce1b6a75e2d","ssdeep":"192:wBBfnK/uun0uS56zA6oE9xOEunWqMk1AayEJhxbbbN:yK/tnz+EXOsqv1RyEp5","tlshash":"7c227e14a3e6a57ad8045e6317fb79952e1125da50f0ebc0a8e2ed3e004ef817f53cb5","first_seen":"2025-06-25T10:53:44.722633Z","last_seen":"2026-07-25T13:07:31.186038Z","times_seen":34,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matesanto.com/favicon.ico","fqdn":"matesanto.com","domain":"matesanto.com","tld":"com"},"ip":{"addr":"148.251.239.20","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://matesanto.com/distinguishedcare/distinguishedcare.htm","date":"2026-06-20T20:45:38.108Z","timestamp":1781988338108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matesant.abakotest.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 02:18:47 GMT","end":"Sat, 22 Aug 2026 02:18:46 GMT"},"fingerprint":{"sha1":"F1:9A:42:DB:BA:13:2D:9F:FD:96:83:7A:1A:68:65:31:B7:83:06:87","sha256":"63:21:2A:96:C0:DD:DE:78:A3:6F:85:20:BB:50:1F:AC:FA:ED:E5:B5:08:A2:7E:59:F4:AD:59:16:6B:EB:DC:F2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: matesanto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://matesanto.com/distinguishedcare/distinguishedcare.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 20 Jun 2026 20:45:38 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 355\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":508,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-03T23:25:48.715897Z","times_seen":53786,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"matesanto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"matesanto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://matesanto.com/distinguishedcare/distinguishedcare.htm","date":"2026-06-20T20:45:38.146Z","timestamp":1781988338146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://matesanto.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 20 Jun 2026 20:45:38 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=5,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 11016\r\nexpires: Thu, 10 Jun 2027 20:45:38 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xa2T%2BBTV%2BDYWg4i5eoW2FCVxHBBJJFplPpxrM1hDayPXuNB2GQmWjhD1PQJ3KbOZtc8e3IYBPIZ9mKlUhPMlomzhN7S4lTPV8E%2Fbb18wzvvbyH3Znr3yaQ%2BX9MXKXmOO%2Bsa4Vm3v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0ed9e497a0123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151095,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-03T23:19:51.476206Z","times_seen":44612,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}