{"report_id":"9e05492d-5534-4c3c-9d3f-aece90cc9346","version":6,"status":"done","tags":["bancolombia","financial","phishing"],"date":"2026-04-13T03:33:48Z","url":{"schema":"http","addr":"nofxtaefa.online/","fqdn":"nofxtaefa.online","domain":"nofxtaefa.online","tld":"online"},"ip":{"addr":"52.72.49.79","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.infosegsura.com/personas","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"title":"Bancolombia Sucursal Virtual Personas","dom":{"size":73943,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65401), with no line terminators","md5":"3c8357bbb76e62bc24fc003fe0a93920","sha1":"c58306cff83a9191019f913682d587183e6173b7","sha256":"f98982734d839c061e498bdb0831c1e047322aa2eb974cfd61c79e7ce239f26f","sha512":"beb7631d6265c3b9a9a66590c291c0a63f391fa95cac4a28a3d212b70a85420acad24bddaafec8419a62659b0d9edd1b30bd316cf0f170196a65012cb4a6a73b","ssdeep":"768:lhyJFfmdKyubkqLat3VFuQcCFsfrba3frRAZ9nfP63Vk9luz499a2YqQQDjGYgcD:DyJFfmh32hyvWnHbnavQnGYgcoTWAGz","tlshash":"fb732bd0a7b4213f41d357cdff252ba9725a91fed6634688627ccaa8abc3dc4ee05440","dom_hash":"domhashaf376a2eaa4f23af653b51992befbda8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nofxtaefa.online/","fqdn":"nofxtaefa.online","domain":"nofxtaefa.online","tld":"online"},"ip":{"addr":"52.72.49.79","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T03:33:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":9}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-13T03:33:27Z","timestamp":1776051207,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45610,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-04-13T03:33:27.680873+0000\",\"flow_id\":522102197669578,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":45610,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-04-13T03:33:27.675530+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"nofxtaefa.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"nofxtaefa.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"nofxtaefa.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"nofxtaefa.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"www.infosegsura.com","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-15","domain_rank":0,"first_seen":"2026-03-17T00:16:30.425647Z","last_seen":"2026-04-12T08:25:44.35551Z","alert_count":282,"request_count":47,"received_data":4933490,"sent_data":22589,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":7,"received_data":307821,"sent_data":3928,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nofxtaefa.online","ip":{"addr":"52.72.49.79","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2026-04-11","domain_rank":0,"first_seen":"2026-04-13T03:33:51.790565Z","last_seen":"2026-04-13T03:33:51.790565Z","alert_count":4,"request_count":1,"received_data":1972,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-04-06T11:59:43.380237Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"backend-bc02-three.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":602,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":5,"received_data":36991,"sent_data":2336,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.bancolombia.com","ip":{"addr":"45.60.243.99","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"1997-10-09","domain_rank":31473,"first_seen":"2012-06-21T14:12:01Z","last_seen":"2026-04-01T00:21:32.638561Z","alert_count":0,"request_count":1,"received_data":4968,"sent_data":625,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bancolombia.com/wcm/connect/www.bancolombia.com-26918/3b127e64-3a8a-4cde-8c81-788663aed538/conavi.min.js?MOD=AJPERES\u0026CONVERT_TO=URL\u0026CACHEID=ROOTWORKSPACE.Z18_9O44G4S049MAD06H7SNS78IMS1-3b127e64-3a8a-4cde-8c81-788663aed538-pEZfpFZ","fqdn":"www.bancolombia.com","domain":"bancolombia.com","tld":"com"},"ip":{"addr":"45.60.243.99","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a75614a5f20053e59682593e0e2b4ed5","sha1":"38fb5a8e72398f0f18398764ef5227b4d81da7a1","sha256":"b0bbaf612d86751756ccfcf687ce564ecd7e816c5d9f3a9be8ddf6fcefb0c29e","sha512":"691d1fa9201bb1a1cc3933136b09dd5854b378f77bd6fbc7c7713bc043d4175d9356fece8d40bd7f5858d0bfa667405ee9e7c909acf9ef363dcc67a15625ff7a","ssdeep":"96:zCHJHQLiyw9YHQEdyCwyQq1ylAhNxzZRQyc1Tir3s3Wy1yyyTiuIC9yc1B8A2nbd:zCHJHQfw90QEUHyQqMWvRNsTir83Xhys","tlshash":"3ea1887b3ad32176002ba13c8f5f6098bf39a9035049de41395d8b606f8847626fdeed","size":4965,"data":"","first_seen":"2026-04-12T08:25:50.995739Z","last_seen":"2026-04-25T15:15:25.649674Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/main.3deda29e.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f64d2fe7a2ad2e10cb6e5432c6c4019b","sha1":"be212bdfbb0048baaaa0913aeed4a1fb289c8284","sha256":"ec228aa438fbdd97f65760eab1d2830161053cfea76ea02d6365e733e4fe1a4a","sha512":"2fedd96859b114530a8fdf37900af7d45bcf0a39ec3be456cac0c20f197010778dd00fcd58ca9a27215b96837f2eb89282c339aeb6f5bc5cc634317f2e888073","ssdeep":"24576:JuDnNgY1W7uEszpgFXKXUEpla9PEBDT32h9hD10:JonN91W7uEszpgFXKXUEpl8ADT32h9h+","tlshash":"25253ad93292f06297f610e6807b0106f3396955380d8458f26cecdb7979d8aa27bf3d","size":1041380,"data":"","first_seen":"2026-04-12T08:25:50.944085Z","last_seen":"2026-04-13T03:33:57.991067Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/156.99301818.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9eb017aec2ec4b779dbda3db5128d27","sha1":"9a95b02772f18c3ff2d5862e312aa59f26597e56","sha256":"60c8e6cbca71aa45b240dc920681a1b866a1ffc6dcc067ab87af1583ba8b6897","sha512":"f883ccae0590e1b8eddc1c66edccacffbe2b81a3aa9197c7c3b03d2db566f0273ab508d4aee1e357ae9a00925b14bac36731764b4c3603c4da742309630585ab","ssdeep":"","tlshash":"44719584b1a17eb859c285e440bf3507f02d355a30bdb060e7a1c5f071b94aab5b5ebb","size":3618,"data":"","first_seen":"2026-03-17T00:16:36.844847Z","last_seen":"2026-07-18T21:22:02.048761Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/797.4a2e4acc.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46db28f12b9ba1ec4b5c73092b4fda30","sha1":"4b29c8af3d215a648b29486de53cfb7c8b5da7a4","sha256":"0461ab122bd78d1173ef8ef1cbf58f0b2b242ef2130601eaeb5f3132363e9dca","sha512":"5f1318abe203f23b8655b5746c101203c275e25e5916d47d0f3217ce38faf5c6357cb8c88fb8fb40b7c21caad4fe7a4488c29306c0fc1b359d41db70b8b051a2","ssdeep":"768:N6lHB6MNfDgxIoer3IxXGghiOHVAOcKQ/Qdg2LW3y+tXc1PcUto1J:4f6MNzVrEXUOHqQY3y+TSc","tlshash":"b75384ca3a86b51257b202f5087f080bf33d5d65684e4d18f518e9dd7828c7e927bbb8","size":61286,"data":"","first_seen":"2026-03-17T00:16:36.857789Z","last_seen":"2026-07-18T21:22:02.030442Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/68.db6409de.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"366140221171d2287c02dc787a9e021a","sha1":"3ef923861c379cf74277cb4544c259da3e83051d","sha256":"a5b6fea4118f5de51618050f9c13c5be5c1dcb578560d8928b0c060048b3e86a","sha512":"593044d2c25e02cf633a591f9f7480b5af5b849c6e8ed12d80a809503263ff853b369c6364a97935f975a0ccecb3af1c2769a9116ad45ee9f669cc8536531fae","ssdeep":"1536:uQfGNpFOo6D9PK5rQN61pFn8t83BlxvHxre0e10XiA6wEya3dfpQBEbiwukjCK22:EpSD9PHN6Qv08QmbidK22","tlshash":"64a31989b121b1b68ae715de82b5c211b3b14c457408c8a4b1bd8d7b487dde903aeffd","size":103842,"data":"","first_seen":"2026-03-17T00:16:36.85877Z","last_seen":"2026-07-18T21:22:02.065245Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/29.63ffb040.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17d5186e41141080c103f76e6ef50f69","sha1":"51d0b63d4c8b00a16f93ca4fe3f645e6d42da1d0","sha256":"378ead1f3c372c183c239e76f25d0e293332c768458c44939ca4ea519e0f0c5d","sha512":"e2e45b40f1511e04c5e2847d127233bd66de1ba744247dd518c4b80a1c1890ecde98c638fd28b597145f86f0afc1ebd8089165352fc5280788e87fc4aebb95ef","ssdeep":"1536:F4ca3Rp3rLzQ5GBqeh/e8ym/Pf7rDo2VkCWxdF:F4ceLmIf7PKb","tlshash":"0093a745e2b0abdcb4d659cdaa1ec80c722f76acde4989b4797cac245985cc4f307bc4","size":95530,"data":"","first_seen":"2026-03-17T12:18:48.616141Z","last_seen":"2026-04-13T03:33:58.002445Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bancolombia.com/wcm/connect/www.bancolombia.com-26918/3b127e64-3a8a-4cde-8c81-788663aed538/conavi.min.js?MOD=AJPERES\u0026CONVERT_TO=URL\u0026CACHEID=ROOTWORKSPACE.Z18_9O44G4S049MAD06H7SNS78IMS1-3b127e64-3a8a-4cde-8c81-788663aed538-pEZfpFZ","fqdn":"www.bancolombia.com","domain":"bancolombia.com","tld":"com"},"ip":{"addr":"45.60.243.99","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bancolombia.com","organization":"BANCOLOMBIA S.A."},"issuer":{"commonName":"GlobalSign GCC R3 EV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Mar 2026 14:01:17 GMT","end":"Mon, 05 Apr 2027 14:01:16 GMT"},"fingerprint":{"sha1":"33:29:9E:10:9E:16:8C:18:D5:00:87:1C:24:64:87:0A:7F:9A:0C:39","sha256":"E0:79:52:B5:92:7C:45:72:1D:32:15:BB:A7:FD:C9:DE:BA:62:58:AC:1E:40:5B:FB:08:8C:E0:CA:40:7E:40:C4"}}},"request":{"raw":"GET /wcm/connect/www.bancolombia.com-26918/3b127e64-3a8a-4cde-8c81-788663aed538/conavi.min.js?MOD=AJPERES\u0026CONVERT_TO=URL\u0026CACHEID=ROOTWORKSPACE.Z18_9O44G4S049MAD06H7SNS78IMS1-3b127e64-3a8a-4cde-8c81-788663aed538-pEZfpFZ HTTP/1.1\r\nHost: www.bancolombia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a75614a5f20053e59682593e0e2b4ed5","sha1":"38fb5a8e72398f0f18398764ef5227b4d81da7a1","sha256":"b0bbaf612d86751756ccfcf687ce564ecd7e816c5d9f3a9be8ddf6fcefb0c29e","sha512":"691d1fa9201bb1a1cc3933136b09dd5854b378f77bd6fbc7c7713bc043d4175d9356fece8d40bd7f5858d0bfa667405ee9e7c909acf9ef363dcc67a15625ff7a","ssdeep":"96:zCHJHQLiyw9YHQEdyCwyQq1ylAhNxzZRQyc1Tir3s3Wy1yyyTiuIC9yc1B8A2nbd:zCHJHQfw90QEUHyQqMWvRNsTir83Xhys","tlshash":"3ea1887b3ad32176002ba13c8f5f6098bf39a9035049de41395d8b606f8847626fdeed","first_seen":"2026-04-12T08:25:50.995739Z","last_seen":"2026-04-25T15:15:25.649674Z","times_seen":7,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":75,"dns":31,"connect":25,"send":0,"wait":496,"receive":23,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/logo_banca.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /logo_banca.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 238522\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_banca.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"b6c32e50eeb3ee901a82d23729d94307\"\r\nlast-modified: Fri, 10 Apr 2026 09:18:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tgrkv-1776051207223-dd2cf906458b\r\ncontent-length: 56133\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"b6c32e50eeb3ee901a82d23729d94307","sha1":"7a0c985ebb13860f6fc0a974051976399b5ae1a9","sha256":"69c3544d10f0707e39ac7cb2d8da2d218b80355a5257c7ba7e57282e1cacc4a2","sha512":"a3a401612c543564a2e3763876a34bbb3950d1d841843f70c916f91f6988754cb6731d3eb5f375003a83ae02406e3d63a277775780b1f9c3b11ce480af311036","ssdeep":"1536:iMeChkVBlnMME1OHBu6iTO6LLxrxzfE6u:UCmMMKWZilz7u","tlshash":"d743cf0ad9d532bfa2144194779334d6e6b52d3b7625cf0b0f82953e5827b20feb1c2a","first_seen":"2026-03-17T00:16:36.841426Z","last_seen":"2026-07-22T08:31:27.669479Z","times_seen":17,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/img1.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/img1.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271764\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img1.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"c0b4c85d2b81027738d2bb36cbc60f28\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vkmf8-1776051207581-91d9cf0fc092\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0b4c85d2b81027738d2bb36cbc60f28","sha1":"8805943076fccd840d0b9636e336d741a9faf7d0","sha256":"afbae679080865d66956f2bc4e5306dd73239428d80e5ec805fdae1206f94b87","sha512":"8ac8f55d72930c3c64775aae27ec7e7f57755a6c5cb0901952704d417c731bbcdd7437f440dfa052c5f1a968d562736c0933fedccd524a5362c35ca54d70f8d5","ssdeep":"","tlshash":"8f213254994400b8c2c802c00bf5b8c5533ff25f40e13db4869a35604f2ed5d5bae705","first_seen":"2026-03-17T00:16:36.874221Z","last_seen":"2026-07-18T21:22:02.042849Z","times_seen":14,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T03:33:25.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 693836\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\netag: W/\"594d28b96deb428c34416728a0a4a296\"\r\nlast-modified: Sun, 05 Apr 2026 02:15:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zp2zf-1776051206009-53fbf386904b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1751), with no line terminators","md5":"594d28b96deb428c34416728a0a4a296","sha1":"7f42f2e884082e683c9a02407ecad19ef70890ac","sha256":"1601f0d4927dc276614fc88020974f1a74570d7b0258628e97009d62300be6fe","sha512":"d0576acd053bd023eb9ca061bbd512c15618fac82aad3c9cd727d54d6ed755e9a3b1ee7bd869b8986f0bfe72252f478eb7432d6b8b792773a97236dc059d5aca","ssdeep":"","tlshash":"e831d167e841ccca263162bffa23716ec443381f9991bc6cb47224264df5be785e9912","first_seen":"2026-04-12T08:25:50.935245Z","last_seen":"2026-04-13T03:33:57.975648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/css/main.192218a1.css","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/css/main.192218a1.css HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 252816\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.192218a1.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\netag: W/\"465d5c646218239a63e7b16c0326ae70\"\r\nlast-modified: Fri, 10 Apr 2026 05:19:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5blqk-1776051206234-b04d60fa5ad8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659187,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (23713)","md5":"465d5c646218239a63e7b16c0326ae70","sha1":"4552336f4abd38a0276fb248123b943d63558332","sha256":"e05fdca3b0dace5cde2c34df04eacb812ea51e920d5437d2b223387e63bc2804","sha512":"aae924f093ab2d0c764d8570ccae7e77d3e95fd5111cd9966451ace5f9e031ce0011c0e1e4d14f37b2bee688e4880227c67d9f8efe46584fa0ef3dcce34b3ff3","ssdeep":"12288:z5I7xJm80y1ylywVr9P8PgITGEcKVgIO++k:z5I7xJm80yMywVr9PWgITXgIOe","tlshash":"a0e4c861f195347db977c427a180ffbc552ea586ea234aa9f007b36883c52c71663f8c","first_seen":"2026-03-17T00:16:36.866395Z","last_seen":"2026-04-13T03:33:57.976265Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/trazo_modal_abeja.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/trazo_modal_abeja.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 271765\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"trazo_modal_abeja.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"da7e5b8591022ee5d84a4c47f3b24d94\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ncqsv-1776051207351-3b1c56a10871\r\ncontent-length: 44902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1256 x 401, 8-bit/color RGBA, non-interlaced","md5":"da7e5b8591022ee5d84a4c47f3b24d94","sha1":"865d0d9f476560230215752505b29438a25b6385","sha256":"a72f2bebf956f05502cd6f2f57bb9b25059b874230287537c10f435a4d158393","sha512":"5f509d8288d896173b3453ef3149312022ff63bc5c72cf558557b700aac0b931b4c6d29ad455e28e9a80c51834fd84a4abf375fcc8945b66d2de8ad7cdf30902","ssdeep":"768:PESbaLNa/b5t4VLqnQJRQRBvVxomayUEKfnEy0ArHii1Eg5waW/tNYQDiPC0jTFA:8STbH4VLqnmKdxlaBOitCl72PCo9S","tlshash":"db13ce6beee030af85522548ab87f8c9d9b681e7b7508f5f5fa424720c530e4f572ca1","first_seen":"2026-03-17T00:16:36.860971Z","last_seen":"2026-04-13T03:33:57.976922Z","times_seen":11,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/logo_billete.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/logo_billete.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 76039\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_billete.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"e92aceb649deb86b7ac8441f1c066946\"\r\nlast-modified: Sun, 12 Apr 2026 06:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9dptx-1776051207311-59ee440ff24f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1133,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e92aceb649deb86b7ac8441f1c066946","sha1":"8cb5c3276587325482a352aa301867b2f5a033d3","sha256":"6e946dacafe5e56500ad066c2aa4180417383fb8fd50fbd428fc632935a56152","sha512":"2b00153c0dc5d5f5b5849e378286415f70f2e2eb039161cce1c0a51b3d8a0638c6f6efcb582ad7763eeca16f3d48e9628870762c86184c3a9a716084d77c7bd6","ssdeep":"","tlshash":"132100947bc1b3b7b808193f434138ee2256accf3c664145db813618555ec6b8da50df","first_seen":"2026-03-17T00:16:36.865369Z","last_seen":"2026-07-18T21:22:02.069699Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/img3.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/img3.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 150660\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img3.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"2d17cb2c9ea216b12922d68bac3d272a\"\r\nlast-modified: Sat, 11 Apr 2026 09:42:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xphs6-1776051207325-800f1946d685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d17cb2c9ea216b12922d68bac3d272a","sha1":"f97ddd589964e1f8f39087d014e1430353dc475e","sha256":"4748717c0cc28852c6b52238e246764a715558d123f44501263336225262bb3b","sha512":"73bbb7d41d7c66c373c45512afec73d319fc2b212fdfdf178f724de2f597014e37f9b3e1d9801e052a93e09d2c48e072134c05837bfadbe0b99f14bac131390a","ssdeep":"96:TKfP/HgyN1bitWojPclEyljXaQCQg9+vcaUf22DH783Qzm2hR:TKfPPTbitClDaQngXaO22H8+f","tlshash":"1fa121e057c4a2e8e045e3f8a67a6964757f38f93a12cfdc87e93c50552c5ad4888c82","first_seen":"2026-03-17T00:16:36.870755Z","last_seen":"2026-07-18T21:22:02.059741Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 206479\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-22T14:28:11.20193Z","times_seen":313177,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/img2.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/img2.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271764\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img2.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"e4e6099c110f7bf6e7d6f50705c982e8\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vkmf8-1776051207585-a29aef357de4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4e6099c110f7bf6e7d6f50705c982e8","sha1":"d6ae42eba1eebf02733b0d2b021e96fe54511d6b","sha256":"15caa52a9a8704652bf5aa2d66663b27fff7f0df54aab6785382de027a4e95d1","sha512":"83c00c60db07e311314566ee3cb14f7300fb61edb95f6c25011750cf63d8723614193dd7ddcbcf83c9551eff09a085e0115a74f9ffe3374841e36049045c342e","ssdeep":"","tlshash":"5f112568a42450f9c6c803805bfab4c8133df10e40d529b8db8db8114e35e5d5fee30a","first_seen":"2026-03-17T00:16:36.856275Z","last_seen":"2026-07-18T21:22:02.076895Z","times_seen":14,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/img3.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/img3.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 150660\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img3.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"2d17cb2c9ea216b12922d68bac3d272a\"\r\nlast-modified: Sat, 11 Apr 2026 09:42:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vkmf8-1776051207612-96f7a7ea96e7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d17cb2c9ea216b12922d68bac3d272a","sha1":"f97ddd589964e1f8f39087d014e1430353dc475e","sha256":"4748717c0cc28852c6b52238e246764a715558d123f44501263336225262bb3b","sha512":"73bbb7d41d7c66c373c45512afec73d319fc2b212fdfdf178f724de2f597014e37f9b3e1d9801e052a93e09d2c48e072134c05837bfadbe0b99f14bac131390a","ssdeep":"96:TKfP/HgyN1bitWojPclEyljXaQCQg9+vcaUf22DH783Qzm2hR:TKfPPTbitClDaQngXaO22H8+f","tlshash":"1fa121e057c4a2e8e045e3f8a67a6964757f38f93a12cfdc87e93c50552c5ad4888c82","first_seen":"2026-03-17T00:16:36.870755Z","last_seen":"2026-07-18T21:22:02.059741Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/imagemed.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/imagemed.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imagemed.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"2418295e31fae64d5fdbab64401affc1\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b9k47-1776051207613-66b7c07f4d80\r\ncontent-length: 1159020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 919 x 999, 8-bit/color RGBA, non-interlaced","md5":"6849cae216d4da6433a73afbfcf563d4","sha1":"303d78e3274d4aa02a8dfc936736253dec647ca3","sha256":"4b578ca237636a7d160a3362b0cde2e788c5ef9b7bc0c36161cbb25737194954","sha512":"c4f99e6dabe93234b5bbafe95b0e31aeb7e7129a24a2eff438cc7972d7436dcb4bc4eb90c70747cd79ff0e36fae5510b18096529f8ce90b2e78f212c45299770","ssdeep":"24576:2AwnJg8Jm8DraAi6YZSonIA++vYCmA8i+2uMisy:DwJrJD29wG82PTy","tlshash":"5c253372a21536dcf155a0b4cc1c9561ab7c932d78f3854b30e39183ca1bdce7b9a8da","first_seen":"2026-03-17T00:16:36.868999Z","last_seen":"2026-07-18T21:22:02.050497Z","times_seen":14,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/main.3deda29e.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/js/main.3deda29e.js HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.3deda29e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\netag: W/\"f64d2fe7a2ad2e10cb6e5432c6c4019b\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zp2zf-1776051206233-3fdbc8b9317a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1041380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"f64d2fe7a2ad2e10cb6e5432c6c4019b","sha1":"be212bdfbb0048baaaa0913aeed4a1fb289c8284","sha256":"ec228aa438fbdd97f65760eab1d2830161053cfea76ea02d6365e733e4fe1a4a","sha512":"2fedd96859b114530a8fdf37900af7d45bcf0a39ec3be456cac0c20f197010778dd00fcd58ca9a27215b96837f2eb89282c339aeb6f5bc5cc634317f2e888073","ssdeep":"24576:JuDnNgY1W7uEszpgFXKXUEpla9PEBDT32h9hD10:JonN91W7uEszpgFXKXUEpl8ADT32h9h+","tlshash":"25253ad93292f06297f610e6807b0106f3396955380d8458f26cecdb7979d8aa27bf3d","first_seen":"2026-04-12T08:25:50.944085Z","last_seen":"2026-04-13T03:33:57.991067Z","times_seen":3,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/abrazos.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/abrazos.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/candado.webp","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/candado.webp HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"candado.webp\"\r\ncontent-type: image/webp\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"a7f3bd49e432ee5bb6d69a04c4a59c80\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqlz4-1776051207613-57e89f7045ff\r\ncontent-length: 3626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7f3bd49e432ee5bb6d69a04c4a59c80","sha1":"474362ed37d3b43da1988b54d2ef40607020ed17","sha256":"4b2065800c099f24cfc1921bff3b2e1a30a71c32b4152d8c4f68f690027c10be","sha512":"f5e1fed70ba717b0ba06c3ce160db98a261963f2a48fb6c31aec58878e3db8b6aa40fcc71e73d10233824cd4cbfae29c1a0cceaafc2fdbeebff2eaff60a28f96","ssdeep":"","tlshash":"43715c61332d161dda03677021cc77c1ff3d5ab7995cdaad86ca812e2b1986145fca83","first_seen":"2026-03-17T00:16:36.836593Z","last_seen":"2026-07-18T21:22:02.077783Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/img2.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/img2.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271764\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img2.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"e4e6099c110f7bf6e7d6f50705c982e8\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vmmlt-1776051207324-bf62b655481d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4e6099c110f7bf6e7d6f50705c982e8","sha1":"d6ae42eba1eebf02733b0d2b021e96fe54511d6b","sha256":"15caa52a9a8704652bf5aa2d66663b27fff7f0df54aab6785382de027a4e95d1","sha512":"83c00c60db07e311314566ee3cb14f7300fb61edb95f6c25011750cf63d8723614193dd7ddcbcf83c9551eff09a085e0115a74f9ffe3374841e36049045c342e","ssdeep":"","tlshash":"5f112568a42450f9c6c803805bfab4c8133df10e40d529b8db8db8114e35e5d5fee30a","first_seen":"2026-03-17T00:16:36.856275Z","last_seen":"2026-07-18T21:22:02.076895Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/img_pantalla1/imgi_17_logo_vigilado.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/img_pantalla1/imgi_17_logo_vigilado.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 150660\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imgi_17_logo_vigilado.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"3e1ce43e4d724166d470cf10f7cd4e33\"\r\nlast-modified: Sat, 11 Apr 2026 09:42:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vkmf8-1776051207621-061a3e792f94\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21845,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e1ce43e4d724166d470cf10f7cd4e33","sha1":"76fac0935608f9dab6ea2d8e92ffbe84446e9205","sha256":"742d34da4182de7f212fedebdb3ca6d65fffda567e2012cd23ddcfed877c1901","sha512":"1662d04450a867534c88858c77023f8f07dd40b5c6a6d175884be70d9f15de262ba63521ef2d4dc4b94f9520b525e961633e4e1e114a0147793b1ffc3befd470","ssdeep":"384:jhNjLPomaUkQeoebK3qME938d8GqTmuOC3UENoBq6SmrfHpATol:vjbEhQp3E9ZPTmuOYNoBhfpKol","tlshash":"cda288fa5b98dae0d806a3fad61e01e5752b6cfdbb95cb80c3a02d48795147d8c0cdd1","first_seen":"2023-06-19T07:01:15Z","last_seen":"2026-07-18T15:37:25.577037Z","times_seen":85,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 206479\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-22T14:28:11.20193Z","times_seen":313177,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":106,"dns":0,"connect":15,"send":0,"wait":18,"receive":21,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nofxtaefa.online/","fqdn":"nofxtaefa.online","domain":"nofxtaefa.online","tld":"online"},"ip":{"addr":"52.72.49.79","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T03:33:25.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nofxtaefa.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:35:31 GMT","end":"Fri, 10 Jul 2026 02:35:30 GMT"},"fingerprint":{"sha1":"3E:24:68:E5:76:5D:DF:52:38:35:15:46:33:D3:45:DC:51:66:D4:C8","sha256":"3D:D9:58:89:FC:4A:BD:1B:20:A0:E3:D2:12:2B:9F:47:22:22:D5:19:16:6D:D0:34:7E:9F:BA:05:7B:40:6D:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nofxtaefa.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 13 Apr 2026 03:33:25 GMT\r\nlocation: http://www.infosegsura.com/\r\ncontent-length: 0\r\nengine: Rebrandly.redirect, version 2.1\r\nstrict-transport-security: max-age=15552000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":1226,"timings":{"blocked":564,"dns":358,"connect":94,"send":0,"wait":98,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"nofxtaefa.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"nofxtaefa.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"nofxtaefa.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"nofxtaefa.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/797.4a2e4acc.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/js/797.4a2e4acc.chunk.js HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 238522\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"797.4a2e4acc.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"46db28f12b9ba1ec4b5c73092b4fda30\"\r\nlast-modified: Fri, 10 Apr 2026 09:18:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9dptx-1776051207058-ed36045eaea8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":61286,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (61163)","md5":"46db28f12b9ba1ec4b5c73092b4fda30","sha1":"4b29c8af3d215a648b29486de53cfb7c8b5da7a4","sha256":"0461ab122bd78d1173ef8ef1cbf58f0b2b242ef2130601eaeb5f3132363e9dca","sha512":"5f1318abe203f23b8655b5746c101203c275e25e5916d47d0f3217ce38faf5c6357cb8c88fb8fb40b7c21caad4fe7a4488c29306c0fc1b359d41db70b8b051a2","ssdeep":"768:N6lHB6MNfDgxIoer3IxXGghiOHVAOcKQ/Qdg2LW3y+tXc1PcUto1J:4f6MNzVrEXUOHqQY3y+TSc","tlshash":"b75384ca3a86b51257b202f5087f080bf33d5d65684e4d18f518e9dd7828c7e927bbb8","first_seen":"2026-03-17T00:16:36.857789Z","last_seen":"2026-07-18T21:22:02.030442Z","times_seen":14,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/logo_banca.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /logo_banca.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 238522\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_banca.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"b6c32e50eeb3ee901a82d23729d94307\"\r\nlast-modified: Fri, 10 Apr 2026 09:18:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8x5ln-1776051207223-210f513e6609\r\ncontent-length: 56133\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":56133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"b6c32e50eeb3ee901a82d23729d94307","sha1":"7a0c985ebb13860f6fc0a974051976399b5ae1a9","sha256":"69c3544d10f0707e39ac7cb2d8da2d218b80355a5257c7ba7e57282e1cacc4a2","sha512":"a3a401612c543564a2e3763876a34bbb3950d1d841843f70c916f91f6988754cb6731d3eb5f375003a83ae02406e3d63a277775780b1f9c3b11ce480af311036","ssdeep":"1536:iMeChkVBlnMME1OHBu6iTO6LLxrxzfE6u:UCmMMKWZilz7u","tlshash":"d743cf0ad9d532bfa2144194779334d6e6b52d3b7625cf0b0f82953e5827b20feb1c2a","first_seen":"2026-03-17T00:16:36.841426Z","last_seen":"2026-07-22T08:31:27.669479Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/candado.webp","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/candado.webp HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/img_pantalla1/imgi_17_logo_vigilado.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/img_pantalla1/imgi_17_logo_vigilado.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 150660\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imgi_17_logo_vigilado.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"3e1ce43e4d724166d470cf10f7cd4e33\"\r\nlast-modified: Sat, 11 Apr 2026 09:42:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xphs6-1776051207334-ef099ae983c1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21845,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e1ce43e4d724166d470cf10f7cd4e33","sha1":"76fac0935608f9dab6ea2d8e92ffbe84446e9205","sha256":"742d34da4182de7f212fedebdb3ca6d65fffda567e2012cd23ddcfed877c1901","sha512":"1662d04450a867534c88858c77023f8f07dd40b5c6a6d175884be70d9f15de262ba63521ef2d4dc4b94f9520b525e961633e4e1e114a0147793b1ffc3befd470","ssdeep":"384:jhNjLPomaUkQeoebK3qME938d8GqTmuOC3UENoBq6SmrfHpATol:vjbEhQp3E9ZPTmuOYNoBhfpKol","tlshash":"cda288fa5b98dae0d806a3fad61e01e5752b6cfdbb95cb80c3a02d48795147d8c0cdd1","first_seen":"2023-06-19T07:01:15Z","last_seen":"2026-07-18T15:37:25.577037Z","times_seen":85,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/logo_salud.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/logo_salud.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/persons.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/persons.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/atencion.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/atencion.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51912\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 01:39:55 GMT\r\nexpires: Fri, 09 Apr 2027 01:39:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352412\r\nlast-modified: Mon, 15 Sep 2025 16:30:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51912, version 1.0","md5":"fe5ed0fcd60f2d8214c86cbdd0c88b8b","sha1":"c9c1cbb6cead905fdf1e19faca071d09ca2b65f8","sha256":"a093b888254afd7deb8e37cccfd434e7d06ed47d22cfed9621631d80e1e81554","sha512":"854fc977679e9f512f776a16748f8b756f11c28ded7f1c32a4d57b8ef8728c536f6cceb948a491cb555e22110acda52f619d072dd02351eb7ce514cc8e63d0f1","ssdeep":"1536:iCrpjxLjTpmNyGGqE6TYPvW7PNhLzMEz0HiH:fpHmNhE/5E6a","tlshash":"e533f13905ae37e2c1a48334ddb82db45bb775277a39af9812e5005e82339762f7a305","first_seen":"2025-09-17T03:21:31.197712Z","last_seen":"2026-07-22T14:57:34.15058Z","times_seen":11870,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/trazo_modal_abeja.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/trazo_modal_abeja.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 271765\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"trazo_modal_abeja.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"da7e5b8591022ee5d84a4c47f3b24d94\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5z5cl-1776051207621-2f197881b5de\r\ncontent-length: 44902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":44902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1256 x 401, 8-bit/color RGBA, non-interlaced","md5":"da7e5b8591022ee5d84a4c47f3b24d94","sha1":"865d0d9f476560230215752505b29438a25b6385","sha256":"a72f2bebf956f05502cd6f2f57bb9b25059b874230287537c10f435a4d158393","sha512":"5f509d8288d896173b3453ef3149312022ff63bc5c72cf558557b700aac0b931b4c6d29ad455e28e9a80c51834fd84a4abf375fcc8945b66d2de8ad7cdf30902","ssdeep":"768:PESbaLNa/b5t4VLqnQJRQRBvVxomayUEKfnEy0ArHii1Eg5waW/tNYQDiPC0jTFA:8STbH4VLqnmKdxlaBOitCl72PCo9S","tlshash":"db13ce6beee030af85522548ab87f8c9d9b681e7b7508f5f5fa424720c530e4f572ca1","first_seen":"2026-03-17T00:16:36.860971Z","last_seen":"2026-04-13T03:33:57.976922Z","times_seen":11,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 16:45:18 GMT","end":"Sat, 30 May 2026 17:45:14 GMT"},"fingerprint":{"sha1":"EF:8D:ED:C7:B3:46:8A:91:47:71:92:F2:D9:B0:67:EA:C1:FC:5B:89","sha256":"01:CA:DB:EB:79:61:2D:B3:FE:2B:09:FE:44:84:EA:5B:6E:C1:3B:81:A1:0F:8C:9F:DE:2E:16:1E:59:45:06:D9"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.infosegsura.com/\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9eb768d018e5a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":90,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/media/OpenSans-Regular.77e375664049d0670469.woff","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/media/OpenSans-Regular.77e375664049d0670469.woff HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/static/css/main.192218a1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 271765\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"OpenSans-Regular.77e375664049d0670469.woff\"\r\ncontent-type: font/woff\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"a5c8152106f5fb792ab6bef239f7b0bd\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207799-6e6300fa843c\r\ncontent-length: 67540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":67540,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67540, version 1.10","md5":"a5c8152106f5fb792ab6bef239f7b0bd","sha1":"d40c40c9ad55bee2959cbb43a256a8e11eb61d9d","sha256":"eb3e750c6fab3976f69f16b4f398de3d44e8fb7d596235c25a28df5ddacf48f7","sha512":"00fe4941903e93c2e754ea2d07ce9aff7c857fb4e78f527e4e427d7766d6a17cd6f9761eaa765637b442f68d04eee82322aa5e5ed7cb048bdaa73629c7a063d6","ssdeep":"1536:Klsp+Zxz8HN2jCuYf24p20cSXgIrDPlkl+:ssp+ZxQHYCVf2JIrZkl+","tlshash":"d1630278e15c912ecf8c49e43185c2cd4e0eb1acce1254be57bf80996ac627b9e9583d","first_seen":"2023-04-27T18:04:19Z","last_seen":"2026-07-18T21:22:02.055967Z","times_seen":95,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/wcm/connect/www.bancolombia.com-26918/27942862-efd8-4995-8ef6-79557d8ba5a7/bee_conavi.min.css?MOD=AJPERES\u0026CACHEID=ROOTWORKSPACE.Z18_9O44G4S049MAD06H7SNS78IMS1-27942862-efd8-4995-8ef6-79557d8ba5a7-pFKpE5z","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /wcm/connect/www.bancolombia.com-26918/27942862-efd8-4995-8ef6-79557d8ba5a7/bee_conavi.min.css?MOD=AJPERES\u0026CACHEID=ROOTWORKSPACE.Z18_9O44G4S049MAD06H7SNS78IMS1-27942862-efd8-4995-8ef6-79557d8ba5a7-pFKpE5z HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 682851\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\netag: W/\"594d28b96deb428c34416728a0a4a296\"\r\nlast-modified: Sun, 05 Apr 2026 05:52:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5blqk-1776051206224-866b1c8b3c64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1751), with no line terminators","md5":"594d28b96deb428c34416728a0a4a296","sha1":"7f42f2e884082e683c9a02407ecad19ef70890ac","sha256":"1601f0d4927dc276614fc88020974f1a74570d7b0258628e97009d62300be6fe","sha512":"d0576acd053bd023eb9ca061bbd512c15618fac82aad3c9cd727d54d6ed755e9a3b1ee7bd869b8986f0bfe72252f478eb7432d6b8b792773a97236dc059d5aca","ssdeep":"","tlshash":"e831d167e841ccca263162bffa23716ec443381f9991bc6cb47224264df5be785e9912","first_seen":"2026-04-12T08:25:50.935245Z","last_seen":"2026-04-13T03:33:57.975648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/29.63ffb040.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/js/29.63ffb040.chunk.js HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 182135\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"29.63ffb040.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"17d5186e41141080c103f76e6ef50f69\"\r\nlast-modified: Sat, 11 Apr 2026 00:57:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tgrkv-1776051207094-e0474d20b87f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":95530,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"17d5186e41141080c103f76e6ef50f69","sha1":"51d0b63d4c8b00a16f93ca4fe3f645e6d42da1d0","sha256":"378ead1f3c372c183c239e76f25d0e293332c768458c44939ca4ea519e0f0c5d","sha512":"e2e45b40f1511e04c5e2847d127233bd66de1ba744247dd518c4b80a1c1890ecde98c638fd28b597145f86f0afc1ebd8089165352fc5280788e87fc4aebb95ef","ssdeep":"1536:F4ca3Rp3rLzQ5GBqeh/e8ym/Pf7rDo2VkCWxdF:F4ceLmIf7PKb","tlshash":"0093a745e2b0abdcb4d659cdaa1ec80c722f76acde4989b4797cac245985cc4f307bc4","first_seen":"2026-03-17T12:18:48.616141Z","last_seen":"2026-04-13T03:33:58.002445Z","times_seen":7,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"backend-bc02-three.vercel.app/api/v1/","fqdn":"backend-bc02-three.vercel.app","domain":"backend-bc02-three.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/ HTTP/1.1\r\nHost: backend-bc02-three.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.infosegsura.com\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:28 GMT\r\netag: W/\"37-iS3BKLbeeCFa/wi+14cb758aMrg\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::j5mtj-1776051207775-90375209fc67\r\ncontent-length: 55\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8ac28bae5e308b1922a6e9240c31603d","sha1":"892dc128b6de78215aff08bed7871bef9f1a32b8","sha256":"408edc2c0fc35e6238e197e3f07f876e39989eb990f596dc1b39a4c56ffcdfa1","sha512":"0af69f355fb5929608a8c984a9812e84108b6d758e2c2fe1ab2713580ce1aeb2b3e3bee1680fbeef70f2281f44ebd58be252603fef29b043a80d44fe16e8afaa","ssdeep":"","tlshash":"19900202d70568365f920d06389a95502ba865d680665d81341d691c1511458a557614","first_seen":"2026-03-17T00:16:36.848364Z","last_seen":"2026-04-13T03:33:58.002985Z","times_seen":12,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":23,"dns":3,"connect":1,"send":0,"wait":340,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/logo_dinero.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/logo_dinero.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 03:33:26 GMT\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c44287f0f16d1dfdb229e4f3a978a843","sha1":"85fe3209d8a677ae9007a3f09e6157ce57b1aaa5","sha256":"f060c1e5d87c1417e3fe3d2167ef36dcc7b0768f21537c81f948fe9ad85b642a","sha512":"32a65f7507a40344eafc65247e5bbd9c0ea268fccca8e2a28634fced684574a2f6f73af9a15e568300e01a2bf80ec885e3306e2ee7dd687b02f271d3f919f754","ssdeep":"","tlshash":"f6017b58aa565505a1550c43330f3f225e19451b394ad8beaf460d0c9efe8770385b0f","first_seen":"2026-04-10T20:41:49.095129Z","last_seen":"2026-04-15T20:23:51.142277Z","times_seen":109,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":104,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 206479\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-22T14:28:11.20193Z","times_seen":313177,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/media/CIBFontSansBold.defa8c534cefdb7febe3.woff","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/media/CIBFontSansBold.defa8c534cefdb7febe3.woff HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/static/css/main.192218a1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 103536\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"CIBFontSansBold.defa8c534cefdb7febe3.woff\"\r\ncontent-type: font/woff\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"c919f08162bd6dc4a439231b875a5943\"\r\nlast-modified: Sat, 11 Apr 2026 22:47:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vkmf8-1776051207451-284937db3235\r\ncontent-length: 30364\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30364,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 30364, version 1.0","md5":"c919f08162bd6dc4a439231b875a5943","sha1":"b46b1248e613aa4c8e5698716e73bfb0a1e75b2e","sha256":"f88c4dc6207ceffff275be7dfa0cf743d62f8d3beb7b1620387a70bd16e957b0","sha512":"0d58f26ac90e7f459f32554c3c0cc9d9c53267fb658a4b398c14ca91a38435774e7e96b0228e70876a1650512dd628642447f81cfbcdde6bc15684ca7bef951b","ssdeep":"768:cST0yriCsHQijGUoAjYANcKW+LAGEmStaqoaIBrDwBb0q:5tJTiNpFNcKWg2daqoaKr7q","tlshash":"40d2f1e86b31b334c072f5356dbae3066f26346e2a5a101e5642231f2de6100fcdebd1","first_seen":"2023-04-27T18:04:19Z","last_seen":"2026-07-18T21:22:02.053679Z","times_seen":95,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/img_pantalla1/logo-bancolombia-black.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/img_pantalla1/logo-bancolombia-black.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271765\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-bancolombia-black.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"dee23705b2aebc4551d51b0d66f387b9\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tgrkv-1776051207263-9314526add1b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6974,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dee23705b2aebc4551d51b0d66f387b9","sha1":"09860e16f80bc739f6c959b1597139193f727749","sha256":"5fe37dcdd77b9c5224aa244a69b8a2faffa11306d5dcfc2480edfa146d8daf5b","sha512":"8431906729b1cb6e4e2479fb985ab5f8c6aad3eb9168292ed919b33618220c850ab1f41413a822a1a2d4775731dbcf738238a68d8c251af69842e6f0c92bd8ab","ssdeep":"96:2Ai0rp45IklgWEHeH9jM1LwiZgubQpzR4toLc91KoPqQqTBQ5SM1y0e8XP1lbEoV:210rHDheWbQpt4rPNy2Vlb4hLXeXVXP/","tlshash":"56e194d427358598e584a2fdeb2e11ad3c5aacee3201c42ec7e42d19d5c922f4c64deb","first_seen":"2023-05-09T07:03:35Z","last_seen":"2026-07-18T21:22:02.075974Z","times_seen":99,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/abrazos.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/abrazos.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"abrazos.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"a84860dd37a083f9cade0957e3b0ae66\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207578-88edb35baa5d\r\ncontent-length: 220621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":220621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 558 x 273, 8-bit/color RGBA, non-interlaced","md5":"a84860dd37a083f9cade0957e3b0ae66","sha1":"aafba6316d74d8c7b37d04fc65e80f62a6cc3082","sha256":"5f6553d4c52651862a7ea563cc8fc73fce73a6a2f0bd6bb590133ea5a2ba9d82","sha512":"dd1987a71a5b2f726c8e87ccadc626a93283e3e59e36b9e6ab29f0f037821ffd918b2a1fc20c83ac95c742e1cccbb1e74fef990036f8ece8813524d5f38672be","ssdeep":"6144:HTXLgI1RFIstD7Nn+VmTEHLAEh7nQZg0HLcW6biBfdi+Jfn:zUMLRnIfKZg0HL36sf","tlshash":"e124122fd74d5af579065398a275033023172d99fff753a2a2a0292ef416b2c7032a5f","first_seen":"2026-03-17T00:16:36.850332Z","last_seen":"2026-07-18T21:22:02.07417Z","times_seen":14,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 03:33:27 GMT\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24056,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"da2f9a1f3b41840d93c338c4b248ad8e","sha1":"a7deb30ce7fb0d075da5e9faf1d1b229cc776d07","sha256":"1334350a42e985e91b20ac233fdd44142bc77a0d61079a5f26fee4f915044119","sha512":"42401c8b1c459ea43d2bb3818da94a91a9c10a5dcae0ed2405061a87f1c60efd1a501e4f76fb60a08db0b3abd7daaacc90363d4cf480eb646756c6315216206a","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw9:6SqqY49t5qY4yf/qY45uOqY4P","tlshash":"89b21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:19:30.069328Z","last_seen":"2026-07-22T14:49:16.596816Z","times_seen":12382,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/imgi_3_Salud+y+vida.webp","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/imgi_3_Salud+y+vida.webp HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 01:38:30 GMT\r\nexpires: Fri, 09 Apr 2027 01:38:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352497\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-07-22T13:26:23.183558Z","times_seen":42373,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/persons.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/persons.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"persons.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"b1c25fb413e5af6c73e6bc2fc24a30aa\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207614-d036083734d6\r\ncontent-length: 6109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b1c25fb413e5af6c73e6bc2fc24a30aa","sha1":"f6e19fa7a3a371ad169cb6e1970f6c2244a93286","sha256":"012e4814448681a903ebb21aca4980c8ced6570b5362810d7d3ce1b579d233a4","sha512":"f72e8cbf42754212379cd22c5633177eb8be4c75c0d5c495d2f4bf56684b14fd60ead5d45b7459666900f720b305c58ad92b786f5f3a3d4ddded4f1d81b37569","ssdeep":"96:2N73aTNjsgxsPlzxcZF7lZj7rAU7J1SzLOKKI36GbWMLy2AS:2UTNjs/9zx0jXbJ1SzLkobWMLkS","tlshash":"bac19f5a324c9d20d48ee6086983b841fff8794090f1b8cb126df1de632775e6561393","first_seen":"2026-03-17T00:16:36.847322Z","last_seen":"2026-07-18T21:22:02.060975Z","times_seen":14,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/css/29.ecb88564.chunk.css","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/css/29.ecb88564.chunk.css HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271766\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"29.ecb88564.chunk.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"25c1f40b7e3d73ee11d5fec27bb9a031\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9dptx-1776051207083-d43546319788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":66485,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"25705332b11d5d93d319731b784b9951","sha1":"bb8d37173fdaf0866171f6aed19ca78df4713ba5","sha256":"6f84ba6897edf3b9012a83d3226f314f50cfe588184c0b841e0079c24f01645e","sha512":"fd7560189cfb0f5a37eb734f82af3e363aedb1bbaea9a08c20a560998bb82f2339a8862d6be4d424698ee190361686b71964ffd558737f5171604608e3726b3d","ssdeep":"768:FZX2jx2PcdJn9yskitFTQXqlbkx8kful4cQLF1sqJFgtJJDwTNJmI789:FItkCTQalbkbU4xLF1s04JDQNM","tlshash":"3553a3216710602db1278975f9d1ebadf138c403e2a35bede945a529c9cb1f7137bb08","first_seen":"2026-03-17T12:18:48.612701Z","last_seen":"2026-04-13T03:33:58.008193Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 01:38:30 GMT\r\nexpires: Fri, 09 Apr 2027 01:38:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352497\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-07-22T13:26:23.183558Z","times_seen":42373,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/logo_salud.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/logo_salud.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_salud.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"a5f23526dea72d0833c99d70f9476b05\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207570-686a7afae914\r\ncontent-length: 285831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":285831,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 707 x 716, 8-bit/color RGBA, non-interlaced","md5":"a5f23526dea72d0833c99d70f9476b05","sha1":"e515db4bad18aa37d56cf25e09cab2ca8f270e4a","sha256":"420aae9a4f2d968094e843243579fb73eb5a52d56fb70f792c6220aa65110fea","sha512":"101a34d56b2ce7a7ccb932251b5cd8e985904f8f08d3d6d5ffd90c6bf8153c477d45f30edfd32debaad8eb1657ade17896798fdb0bf6016a9a2f381d96cb7cfb","ssdeep":"6144:GWeF1g5pg3ab9NJ7DbQitHzyIMmjovZ+jeFz/Lm0DA01GROkbq:GWXbxDbQ0TmegZ+OLK0E01bkW","tlshash":"cb54f170ebc7e666c7132278403d2da39b2a2ac191e6050e40f79c897b81f6651b737f","first_seen":"2026-03-17T00:16:36.855009Z","last_seen":"2026-07-18T21:22:02.073112Z","times_seen":14,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/logo_dinero.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/logo_dinero.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_dinero.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"3a9434d41c0382a3351f9baeaa19f922\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207555-0bf7cc68f107\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a9434d41c0382a3351f9baeaa19f922","sha1":"2404560d9415cfd98a732cc41fd8dc172c31e89c","sha256":"93396cbc82a35d473aa3d7350c59b96db1eb761b5e5c4338535601d99551d12f","sha512":"32dd2beb4f198edeb653f3b691d621de784e5a16623096138a4496cb51d2d579075ef8449d1a6c01a6f8e31fc83b5fc57f5cd0b8b51db4dcfc6fc0a1f6889433","ssdeep":"","tlshash":"6731f0c23264d7bde000a57d532a51f538e26ccf2555189ac7a12e2768cc71d0ddd8de","first_seen":"2026-03-17T00:16:36.84246Z","last_seen":"2026-07-18T21:22:02.04178Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/logo_billete.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/logo_billete.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 76039\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_billete.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"e92aceb649deb86b7ac8441f1c066946\"\r\nlast-modified: Sun, 12 Apr 2026 06:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207559-2ab6c3e145f8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1133,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e92aceb649deb86b7ac8441f1c066946","sha1":"8cb5c3276587325482a352aa301867b2f5a033d3","sha256":"6e946dacafe5e56500ad066c2aa4180417383fb8fd50fbd428fc632935a56152","sha512":"2b00153c0dc5d5f5b5849e378286415f70f2e2eb039161cce1c0a51b3d8a0638c6f6efcb582ad7763eeca16f3d48e9628870762c86184c3a9a716084d77c7bd6","ssdeep":"","tlshash":"132100947bc1b3b7b808193f434138ee2256accf3c664145db813618555ec6b8da50df","first_seen":"2026-03-17T00:16:36.865369Z","last_seen":"2026-07-18T21:22:02.069699Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/atencion.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/atencion.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"atencion.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"d6937f7dfadff1c5c5cb7da3b9dc8ab6\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207625-907175dabb7c\r\ncontent-length: 224590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":224590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"d6937f7dfadff1c5c5cb7da3b9dc8ab6","sha1":"e25e71802af49df4597b4a2193d5fa01f4cc20c0","sha256":"0065f63a02f9c28d960cd691ef1465771c815265434e0a6885e5af0b72021177","sha512":"e5ce5deded41ae898b5356d132bcad461bd5ed08cee5b4a8dc64d0626367b928787de3f497541bdbce6aaff777ba8d61a769d07569160b19e51c5dd6d7ff65eb","ssdeep":"3072:v0Ng7M8UVcIexMiHOf0qHNMo4OCkV5IEFcQhqA9EPk4lB1JQLsOfmzOlozw:vwg7M8genH4UO5Ve1c9pWAf1","tlshash":"2524f1baf7e7e345c743a9be962c2d7a17b038d385a5004b02676c452b98f75062723f","first_seen":"2026-03-17T00:16:36.873047Z","last_seen":"2026-07-18T21:22:02.061792Z","times_seen":14,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.infosegsura.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51912\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 01:39:55 GMT\r\nexpires: Fri, 09 Apr 2027 01:39:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352412\r\nlast-modified: Mon, 15 Sep 2025 16:30:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51912, version 1.0","md5":"fe5ed0fcd60f2d8214c86cbdd0c88b8b","sha1":"c9c1cbb6cead905fdf1e19faca071d09ca2b65f8","sha256":"a093b888254afd7deb8e37cccfd434e7d06ed47d22cfed9621631d80e1e81554","sha512":"854fc977679e9f512f776a16748f8b756f11c28ded7f1c32a4d57b8ef8728c536f6cceb948a491cb555e22110acda52f619d072dd02351eb7ce514cc8e63d0f1","ssdeep":"1536:iCrpjxLjTpmNyGGqE6TYPvW7PNhLzMEz0HiH:fpHmNhE/5E6a","tlshash":"e533f13905ae37e2c1a48334ddb82db45bb775277a39af9812e5005e82339762f7a305","first_seen":"2025-09-17T03:21:31.197712Z","last_seen":"2026-07-22T14:57:34.15058Z","times_seen":11870,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/img1.svg","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/img1.svg HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271764\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img1.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"c0b4c85d2b81027738d2bb36cbc60f28\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5blqk-1776051207320-6ef6b710a40d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0b4c85d2b81027738d2bb36cbc60f28","sha1":"8805943076fccd840d0b9636e336d741a9faf7d0","sha256":"afbae679080865d66956f2bc4e5306dd73239428d80e5ec805fdae1206f94b87","sha512":"8ac8f55d72930c3c64775aae27ec7e7f57755a6c5cb0901952704d417c731bbcdd7437f440dfa052c5f1a968d562736c0933fedccd524a5362c35ca54d70f8d5","ssdeep":"","tlshash":"8f213254994400b8c2c802c00bf5b8c5533ff25f40e13db4869a35604f2ed5d5bae705","first_seen":"2026-03-17T00:16:36.874221Z","last_seen":"2026-07-18T21:22:02.042849Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 03:33:26 GMT\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-07-22T14:28:31.71398Z","times_seen":55409,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":119,"dns":1,"connect":22,"send":0,"wait":31,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 03:33:26 GMT\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-07-22T13:13:38.062472Z","times_seen":8404,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":59,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/156.99301818.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/js/156.99301818.chunk.js HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 271767\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"156.99301818.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"a9eb017aec2ec4b779dbda3db5128d27\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9dptx-1776051207080-eb3a0fdd4183\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3618,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3571)","md5":"a9eb017aec2ec4b779dbda3db5128d27","sha1":"9a95b02772f18c3ff2d5862e312aa59f26597e56","sha256":"60c8e6cbca71aa45b240dc920681a1b866a1ffc6dcc067ab87af1583ba8b6897","sha512":"f883ccae0590e1b8eddc1c66edccacffbe2b81a3aa9197c7c3b03d2db566f0273ab508d4aee1e357ae9a00925b14bac36731764b4c3603c4da742309630585ab","ssdeep":"","tlshash":"44719584b1a17eb859c285e440bf3507f02d355a30bdb060e7a1c5f071b94aab5b5ebb","first_seen":"2026-03-17T00:16:36.844847Z","last_seen":"2026-07-18T21:22:02.048761Z","times_seen":14,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/js/68.db6409de.chunk.js","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/js/68.db6409de.chunk.js HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 238522\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"68.db6409de.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: W/\"366140221171d2287c02dc787a9e021a\"\r\nlast-modified: Fri, 10 Apr 2026 09:18:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8x5ln-1776051207082-0d68b0e3edeb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":103842,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"366140221171d2287c02dc787a9e021a","sha1":"3ef923861c379cf74277cb4544c259da3e83051d","sha256":"a5b6fea4118f5de51618050f9c13c5be5c1dcb578560d8928b0c060048b3e86a","sha512":"593044d2c25e02cf633a591f9f7480b5af5b849c6e8ed12d80a809503263ff853b369c6364a97935f975a0ccecb3af1c2769a9116ad45ee9f669cc8536531fae","ssdeep":"1536:uQfGNpFOo6D9PK5rQN61pFn8t83BlxvHxre0e10XiA6wEya3dfpQBEbiwukjCK22:EpSD9PHN6Qv08QmbidK22","tlshash":"64a31989b121b1b68ae715de82b5c211b3b14c457408c8a4b1bd8d7b487dde903aeffd","first_seen":"2026-03-17T00:16:36.85877Z","last_seen":"2026-07-18T21:22:02.065245Z","times_seen":14,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/imgi_3_Salud+y+vida.webp","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/imgi_3_Salud+y+vida.webp HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imgi_3_Salud+y+vida.webp\"\r\ncontent-type: image/webp\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"282a48fe4cd6288598879b5d1f85f1f7\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsfdq-1776051207363-aa8e664d5e53\r\ncontent-length: 147590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":147590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"282a48fe4cd6288598879b5d1f85f1f7","sha1":"631fabff57e167ae34a3cb0594ffd869d6f0adbe","sha256":"4b9925a5bf744f4dad73ffc0702e4286838c59e38e344df18fd78c6de6fc4b13","sha512":"b5060d3cd9815ceea62489b98557217276d5c0f856df61933646efc970120c769af64aec9dc6ba6a8c965bc26de188c0a4ee2106dd940433a2e3f0799d6b50e6","ssdeep":"3072:Z2enfgpIp7QKwOT8FerXvYJfITwiUn3jiQCmwSeLiPllYrJi+pbgiVWYCJK:Z9USQKwOT8FerXvU9pTNCdLsli8+pbaI","tlshash":"25e312a0655ca4b1cb270dfbb4c933931ffe1be219bf96090b165893f2424dca692467","first_seen":"2026-03-17T00:16:36.853766Z","last_seen":"2026-07-18T21:22:02.035549Z","times_seen":14,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/media/CIBFontSansLight.edadde25c98d57fec0af.woff","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/media/CIBFontSansLight.edadde25c98d57fec0af.woff HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/static/css/main.192218a1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"CIBFontSansLight.edadde25c98d57fec0af.woff\"\r\ncontent-type: font/woff\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"0a809f264a6e2ccf6cb413f7bc69f70a\"\r\nlast-modified: Mon, 13 Apr 2026 03:33:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ncqsv-1776051207445-db8b218aef77\r\ncontent-length: 31988\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31988,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31988, version 1.0","md5":"0a809f264a6e2ccf6cb413f7bc69f70a","sha1":"bfd6c669845973749a672e29bc8e6085d272e17f","sha256":"5b01bc0f83e7c1180ebf87d15e86c7033cad30a3a09eb3e9e376948c2ddead8d","sha512":"20a88f0a23c4915d0b1a064111e9c51db16b681d11320fb8f8a198c5e61f9f7d01a2208892f273810ac76d3050369401ec48a416237bf1b81f7d6e0d89d4d96a","ssdeep":"384:lvfwa8wWdgMSc/s5daAsNE7zE5mutRid764Omj9fqSsn/0v6qyo1hPkywd60FHUv:hIOc/KMZKh64ZpCEyKkdA0iv1knxwTvT","tlshash":"9de2f1fae7ec1878ee2fdcf203ba275d9115d5a2a9d704d33449bd2520de10b8684d4e","first_seen":"2023-04-27T18:04:19Z","last_seen":"2026-07-18T21:22:02.075098Z","times_seen":86,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/static/media/OpenSans-SemiBold.ce5dcc9d306b4c266f6a.woff","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /static/media/OpenSans-SemiBold.ce5dcc9d306b4c266f6a.woff HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/static/css/main.192218a1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 150655\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"OpenSans-SemiBold.ce5dcc9d306b4c266f6a.woff\"\r\ncontent-type: font/woff\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"b9b7bbbaf0b24fbae6f95a1fae6a5d0d\"\r\nlast-modified: Sat, 11 Apr 2026 09:42:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqlz4-1776051207839-b62ae193c6ad\r\ncontent-length: 69884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69884,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 69884, version 1.10","md5":"b9b7bbbaf0b24fbae6f95a1fae6a5d0d","sha1":"fdeb4798f5eb1c3d5c3581aa47bd8611e292b61c","sha256":"bae04241433922b6e3a7c2ca047f2544df0e6b604fd47ec5839f1cefe28cbb4d","sha512":"9e7fef4a5d5e7327a700da28692afaad0183c913e3fc55467d52fc54ce58c29c323bc146d0e26ba857d3c24d7735d8c41ae98626e1cb0183ff35a21f7925d10c","ssdeep":"1536:p0xeiJWBUUrv4ZNp5+gmeyt8Cn8NWgYYXkvLGG8ljlw:aWmUrv4fpAte+8CdgFUDOjlw","tlshash":"6f63026dde82d3a70fdcda264ce027029e4632069a1036ee3f6d977e9fd430125e499d","first_seen":"2023-04-27T18:04:19Z","last_seen":"2026-07-18T21:22:02.054633Z","times_seen":89,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Rounded","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:26.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Rounded HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 03:33:26 GMT\r\ndate: Mon, 13 Apr 2026 03:33:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":687,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3c3e166edcf3e7ae7b754b19c2f8b8e4","sha1":"f32f81458babfea75fbcd550de567a0688e52722","sha256":"24917e13bc3e7dea9b0be9f7d2f6be0652f181bfa9125f8ce0ac235a694a107b","sha512":"5bc4ee18e20c2407494e61e8acdf406b0de64a6fef838722877da774a37be373d57f95968234724d8e8cd70132d4d0201582d082f622e21bd93a95b7ff369415","ssdeep":"","tlshash":"84019e68be12495db0510c62334e7f320d18441f250acabd9b510d0c9dfe87b134630f","first_seen":"2026-04-11T02:04:49.379094Z","last_seen":"2026-04-13T03:33:58.018188Z","times_seen":5,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":124,"dns":0,"connect":22,"send":0,"wait":32,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/SURA2.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/SURA2.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 271765\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"SURA2.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"74fa703209ac3ef6bf73a27e8961a2ff\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tgrkv-1776051207270-85e8981bf235\r\ncontent-length: 179588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":179588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1247 x 344, 8-bit/color RGBA, non-interlaced","md5":"74fa703209ac3ef6bf73a27e8961a2ff","sha1":"f80d6e272d18519400d9b35a387edd591b5eb49d","sha256":"6734e59a70ba1f85e15fe6c590b3ad858850952074d5c199e9f3dc53ca736dbc","sha512":"897155e7152293398f913ebea6b7efa01250207cb2b6abd926a6d694fd6979988cd846d9c7bb815cbc33f9b99d29ed7c02457e1ded8518301174178d26872f1c","ssdeep":"3072:OUhV4q12tOSBsPoauN5Mlu/Tcnx8P4NLsY+QZD3pcbAPF0N0dCevpo/mjENa:7V4q9S+PoVN56K+e42Y/ZyEWNQ/m/0EA","tlshash":"990412d27226e84efd9e2138ce759fec3902057dd5591dded282a8b84442f6731f06c9","first_seen":"2026-03-17T00:16:36.868032Z","last_seen":"2026-07-18T21:22:02.058783Z","times_seen":14,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/imagemed.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/imagemed.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.infosegsura.com/assets/images/seguros/SURA2.png","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.infosegsura.com/","date":"2026-04-13T03:33:27.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.infosegsura.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 01:17:04 GMT","end":"Sat, 13 Jun 2026 01:17:03 GMT"},"fingerprint":{"sha1":"7B:12:80:E0:95:1E:AA:E4:B8:85:13:AC:36:39:1D:2C:AD:79:94:8E","sha256":"88:5C:19:50:28:24:C4:65:8C:8C:AD:5B:CE:08:D1:6D:05:D4:3F:9B:08:6B:12:68:3F:E8:B9:39:1D:C7:3E:B4"}}},"request":{"raw":"GET /assets/images/seguros/SURA2.png HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.infosegsura.com/personas\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 271765\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"SURA2.png\"\r\ncontent-type: image/png\r\ndate: Mon, 13 Apr 2026 03:33:27 GMT\r\netag: \"74fa703209ac3ef6bf73a27e8961a2ff\"\r\nlast-modified: Fri, 10 Apr 2026 00:04:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ncqsv-1776051207362-f09342cc354c\r\ncontent-length: 179588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1247 x 344, 8-bit/color RGBA, non-interlaced","md5":"74fa703209ac3ef6bf73a27e8961a2ff","sha1":"f80d6e272d18519400d9b35a387edd591b5eb49d","sha256":"6734e59a70ba1f85e15fe6c590b3ad858850952074d5c199e9f3dc53ca736dbc","sha512":"897155e7152293398f913ebea6b7efa01250207cb2b6abd926a6d694fd6979988cd846d9c7bb815cbc33f9b99d29ed7c02457e1ded8518301174178d26872f1c","ssdeep":"3072:OUhV4q12tOSBsPoauN5Mlu/Tcnx8P4NLsY+QZD3pcbAPF0N0dCevpo/mjENa:7V4q9S+PoVN56K+e42Y/ZyEWNQ/m/0EA","tlshash":"990412d27226e84efd9e2138ce759fec3902057dd5591dded282a8b84442f6731f06c9","first_seen":"2026-03-17T00:16:36.868032Z","last_seen":"2026-07-18T21:22:02.058783Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"www.infosegsura.com/","fqdn":"www.infosegsura.com","domain":"infosegsura.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T03:33:25.910Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.infosegsura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 308 Permanent Redirect\r\nContent-Type: text/plain\r\nLocation: https://www.infosegsura.com/\r\nRefresh: 0;url=https://www.infosegsura.com/\r\nserver: Vercel\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1751), with no line terminators","md5":"594d28b96deb428c34416728a0a4a296","sha1":"7f42f2e884082e683c9a02407ecad19ef70890ac","sha256":"1601f0d4927dc276614fc88020974f1a74570d7b0258628e97009d62300be6fe","sha512":"d0576acd053bd023eb9ca061bbd512c15618fac82aad3c9cd727d54d6ed755e9a3b1ee7bd869b8986f0bfe72252f478eb7432d6b8b792773a97236dc059d5aca","ssdeep":"","tlshash":"e831d167e841ccca263162bffa23716ec443381f9991bc6cb47224264df5be785e9912","first_seen":"2026-04-12T08:25:50.935245Z","last_seen":"2026-04-13T03:33:57.975648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":39,"dns":40,"connect":1,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.infosegsura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.infosegsura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}}]}