{"report_id":"9e34f56a-a4cd-44b3-965b-12f9b5b25826","version":0,"status":"done","tags":[],"date":"2026-09-27T14:48:05Z","url":{"schema":"http","addr":"clicaca.oportunidadesypromocionesweb.com/","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":0,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"title":"Banca en línea - Únete a los Gennials | Banco Falabella","dom":{"size":17677,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"de447e79ac21dd727d1404edd2b1711a","sha1":"eb96be3fdc84ce281f0bf40f5249233c14d3d5c7","sha256":"b62659e8bc821e7d238c7f4036fd731e53f84e7bd3288ce85aef09cc0c092dbc","sha512":"abc0884e2b072fb613d49858ffe17b28d34f665b916c3d8a1de21e0d5a8c6436880756246c8f8df5ff82a972631b962e837eeb7a53a2cf8fcf2d3f9cbc04c905","ssdeep":"192:Moc/A/bnDU2jZkV2Ee4Cv/edPQIBIW0ildhQP8i4lqMBKmY5:MoWwU2jZUUeamlaPe5Zg","tlshash":"388251058df8083209a3e07c5fc7aa66f19494176501c98a3e9e834d4fc6f95caadbde","dom_hash":"domhashe1a1835559224537ef26daf1f3cc6ee9","first_seen":"2026-09-27T12:46:48.18317Z","last_seen":"2026-09-27T14:52:39.468092Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clicaca.oportunidadesypromocionesweb.com/","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":0,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T14:48:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"clicaca.oportunidadesypromocionesweb.com","ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"domain_registered":"2026-09-23","domain_rank":0,"first_seen":"2026-09-27T14:48:05.986767Z","last_seen":"2026-09-27T14:48:06.785927Z","alert_count":32,"request_count":8,"received_data":373801,"sent_data":4310,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ws-us2.pusher.com","ip":{"addr":"52.14.67.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1997-06-03","domain_rank":73488,"first_seen":"2017-06-21T17:32:58Z","last_seen":"2026-09-27T12:46:44.392745Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":678,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"js.pusher.com","ip":{"addr":"143.204.246.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1997-06-03","domain_rank":153087,"first_seen":"2012-07-26T12:54:46Z","last_seen":"2026-09-27T12:46:57.231972Z","alert_count":0,"request_count":1,"received_data":70973,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"js.pusher.com/7.2/pusher.min.js","fqdn":"js.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"143.204.246.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99f7f95a02d32c6b8587afa7e7440d3f","sha1":"f33ae974331d5a95e050b03b23e16a79d458ce0b","sha256":"b39f0b274992d4d7c19b5ce5b56e9020dd1666ad1ee7fc4a378d26679efc6029","sha512":"c0d49d0255c174ef2217a0a3dd101142eea79dfdb9a3f5b5a5a90ad9d941d0a3da69a7936ea3a02be83474a595e63a04c07dd486eed20312d843dd5e3da550c8","ssdeep":"1536:6h86W3nY8zK7+lGUtbLdsOrkZWDi29b79zxS:84LdsOrkZWDiw9zg","tlshash":"4863d7c8f991b06143a77171452f150ea33e296cb40ac0bcbb64d9e5ac7528da23bf7d","size":70393,"data":"","first_seen":"2023-03-10T03:35:34Z","last_seen":"2026-09-27T14:52:39.475327Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/js/jquery-3.7.1.min.js","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-27T21:20:32.203195Z","times_seen":32229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cba68150dc315c9304df9f6f4e0957e","sha1":"30535b352ee89a74423fecc988ee45deedfa525d","sha256":"05985ea9425d801fdadced7332440097db5d408b0f64a0be8736e10a88d16b63","sha512":"6180e6a7ff4b37750ed6782465fad0f4ad65cd84a42547fd8e362252d917adb5cd98992e7090c67cbb42cb43481fad87e14db7f918ab850339017f126271cea7","ssdeep":"192:aU2jZkV2Ee4Cv/edPQIBIW0ildhQP8i4lqMBKmYo:aU2jZUUeamlaPe5ZJ","tlshash":"0a520e049db8087209e7e47d1fcbb9a6f19454173540c98a3e9e830d0fc6ba5c7adbda","size":14403,"data":"","first_seen":"2026-09-27T12:46:48.194217Z","last_seen":"2026-09-27T14:52:39.478705Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error obteniendo IP:NetworkError when attempting to fetch resource.","filename":"https://clicaca.oportunidadesypromocionesweb.com/","line_number":102,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/css/style.css","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.252Z","timestamp":1790520456252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Sep 2026 00:41:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2565\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12695,"size_decoded":2885,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (482)","md5":"423377f406e2671203fe41a0b652d147","sha1":"dc45bc322d6f39e2b980f05e163de3b0b2b95c39","sha256":"fb5a598bd89f0e3373ea00aca56611f3545e2de26e954f9f8034044ae3faf8c9","sha512":"4eaa9e1c4bc92984a7e46899b572b38c3eb148e119700b9703e802a7345a67dd0a12e86481c15c105f99ce116bd08a0b4e9f5486985898f72067db3909f32ac6","ssdeep":"192:yKQhCYhkoti/pCbmaqcwYKFus7/rCxhHLf/6mmZ3V5Fh2wsQdgO70OQBwsQdgO7E:dJCYvWl4WlJ","tlshash":"e14241bb695349417d07da683ffe5f9513381043610ad8bbbbc1224c8fc6299d9e2b9c","first_seen":"2026-09-27T12:46:48.188741Z","last_seen":"2026-09-27T14:52:39.476754Z","times_seen":4,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/img/puntos.png","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.258Z","timestamp":1790520456258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /img/puntos.png HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 27 Sep 2026 00:41:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129766\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129766,"size_decoded":130051,"mime_type":"image/png","magic":"PNG image data, 681 x 994, 8-bit colormap, non-interlaced","md5":"090f555740ad20b0be659128b5d3e803","sha1":"ea4993c38347b9e4067a13ba517e08757ca1ff7d","sha256":"388a9638f7173b8f4423268005e6dc488f0c5f2240e960649f8184873843f75f","sha512":"5157fe27914987d0a84f38d5b540bf0398d6c64e66940a433ff526a2104dc817c1540ee2596e08ad07af76098a22807210b2527ee04143b7a3d7ff3e277d432c","ssdeep":"3072:siNfZ6a4grPORGZGYFgxDIl1qqZoGyEUKs/3YXQYh8d:siNfUoG/oQDImBoA1d","tlshash":"d7c3122253b9283ead51ea051eaf72dcdca2b70fe21f6fd45d758c80db4524ac96032d","first_seen":"2026-09-27T12:46:48.1902Z","last_seen":"2026-09-27T14:52:39.478089Z","times_seen":4,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":411,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/font/font.ttf","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.480Z","timestamp":1790520456480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /font/font.ttf HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 27 Sep 2026 00:41:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 46420\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87548,"size_decoded":46741,"mime_type":"font/ttf","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 28 names, Microsoft, language 0x409","md5":"ec09431f0fbb20d0992ca678378e4ec7","sha1":"208e313d56289241d099bcb7a4ec1c9660029aad","sha256":"13cb803e9cdfac74c66a02175b96040bd470ae61e7b68db3095a5956d534a733","sha512":"0a78c48cf52ba64ea9607c06afc0ef78393e1709f0715bd2c2b265e3438c4099a61cc88df8a8dd49332b559ab2402133e0daea30692fc60b99d9019ba38e6afc","ssdeep":"1536:KKuv8Bv9Il+6a8GpmFZIBXO+wC4ge3T8ZYz7hZSIAA9k:Hvbq4BpmFZ04g+C2nAA9k","tlshash":"538319033f66cf4bd0362ebc94a70ba42735ea549f019747c9a67d187c4b3b21d822da","first_seen":"2026-09-24T17:23:33.542173Z","last_seen":"2026-09-27T14:52:39.470465Z","times_seen":5,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/img/logo-load.svg","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.491Z","timestamp":1790520456491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /img/logo-load.svg HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Sep 2026 00:41:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 398\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":875,"size_decoded":722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3f66d6eececa82a0675209451d39aea","sha1":"85871a8d54e639b9506f54cc16c9fc385f54bedd","sha256":"d1b65f8181f7041335c1c9353808c3b8825af625dc3d4da0d10a65e3765f4cbd","sha512":"79af99cf9addd3503b5216012947e1ce5a1a5185e687a7ff50b8dfa2fc80756f3b5c8c3ef50a25fed9887a48fdebe9ae09280259fc32cae918d0110c5e8585fa","ssdeep":"","tlshash":"6f11abfa3294f6d5d407d734ca3d14e339e6a0f83165828863a02d45a61067e9cceed4","first_seen":"2023-09-18T18:33:32Z","last_seen":"2026-09-27T14:52:39.472275Z","times_seen":13,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws-us2.pusher.com/app/7a24aab10da6fa8342e1?protocol=7\u0026client=js\u0026version=7.2.0\u0026flash=false","fqdn":"ws-us2.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"52.14.67.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.515Z","timestamp":1790520456515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 21 Sep 2026 00:00:00 GMT","end":"Tue, 06 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"30:2A:85:88:6D:D8:6E:FA:40:8C:2E:0F:72:3D:8E:2C:4A:B4:C4:79","sha256":"82:4C:47:73:04:E0:1D:72:CD:05:3E:26:5E:02:42:E8:7B:BC:61:7A:EC:A0:4C:10:46:42:A8:14:8B:42:0F:E4"}}},"request":{"raw":"GET /app/7a24aab10da6fa8342e1?protocol=7\u0026client=js\u0026version=7.2.0\u0026flash=false HTTP/1.1\r\nHost: ws-us2.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://clicaca.oportunidadesypromocionesweb.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1D3LYVwza/C6N8j3CN0+8w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 27 Sep 2026 14:47:37 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ylhX5BGgxRiAa8zFGzXqq+Rng2c=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":268,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T21:46:31.540354Z","times_seen":18695517,"resource_available":true,"data":null}},"time_used":1083,"timings":{"blocked":0,"dns":329,"connect":432,"send":0,"wait":108,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/favicon.ico","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.855Z","timestamp":1790520456855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 27 Sep 2026 00:40:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2287\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15086,"size_decoded":2611,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2f4b3a2431c2aeb35470a317585cf9ac","sha1":"7e7cd10dc7baefa38625876310f49048f25c5882","sha256":"4860fd2f8ee83fda65a7fc5124da54125b31e7967539c3efc80cb6f1443b286c","sha512":"3d0d8a8aca1fd5192aeece56971f70278b332df08e649fa7975de77daea44ef63b59cd046fcae490d9a5fb65942c20690f69bd402b23b29da12c17e28e3154b6","ssdeep":"96:jiIkVYoH1dMiGfTA+7gieA70CRuvsGplI1W3UlO+wSziANj/M3z/5q4:j2vXMicA+7LeKmpcW3UbwII/Y4","tlshash":"936246cc4b4e4898c051b5b02c73d601fdbc7ea7aacbc699a84e55531db27e3523606f","first_seen":"2023-09-18T18:33:32Z","last_seen":"2026-09-27T14:52:39.473751Z","times_seen":29,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:47:35.434Z","timestamp":1790520455434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3972\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sun, 27 Sep 2026 14:47:35 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17675,"size_decoded":4239,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1033baea6d0f0e87c3cca13ca04b7c73","sha1":"a0b29ecf096a6b9aba583b434304af925a58e659","sha256":"0a2975ac352fe3e7c5980b092724cef12719b6bad5f07de2cb83a17284a2850e","sha512":"d6d90a89498545dc6f634a9b241b4cc08b096baee7c3d0aba477e26c9c42e5afde8398c177d46b2ea076d18df11066714ce11a0c91d97fb3348820db03ed18cc","ssdeep":"192:vodxI2nDU2jZkV2Ee4Cv/edPQIBIW0ildhQP8i4lqMBKmY9:vod5U2jZUUeamlaPe5Zg","tlshash":"ac8252058df8083209a3e07c5fc7aa66f19494176501c98a3e9e834d4fc6f95caadbde","first_seen":"2026-09-27T12:46:48.187593Z","last_seen":"2026-09-27T14:52:39.474557Z","times_seen":4,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":25,"connect":140,"send":0,"wait":151,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.pusher.com/7.2/pusher.min.js","fqdn":"js.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"143.204.246.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.248Z","timestamp":1790520456248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 11 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4D:E2:04:99:F3:D9:DD:BE:BF:DC:78:21:97:93:68:C1:49:69:FE:48","sha256":"B1:10:C0:59:51:08:19:D4:32:05:E8:17:DD:96:06:B4:C4:D3:3E:6C:3F:AB:E0:90:53:F4:A1:19:E8:0E:63:62"}}},"request":{"raw":"GET /7.2/pusher.min.js HTTP/1.1\r\nHost: js.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Fri, 15 Jul 2022 13:45:32 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Fri, 04 Sep 2026 01:01:14 GMT\r\ncache-control: max-age=2592000\r\netag: W/\"99f7f95a02d32c6b8587afa7e7440d3f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 217e7e1681602f97edd05a1be6d5e5bc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: AVF5O3EPiyJDokuvSVmkQ42D8Vr32oik9fsXnq8o8BkNyRfJIuuK3w==\r\nage: 2494059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":70393,"size_decoded":19755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65405)","md5":"99f7f95a02d32c6b8587afa7e7440d3f","sha1":"f33ae974331d5a95e050b03b23e16a79d458ce0b","sha256":"b39f0b274992d4d7c19b5ce5b56e9020dd1666ad1ee7fc4a378d26679efc6029","sha512":"c0d49d0255c174ef2217a0a3dd101142eea79dfdb9a3f5b5a5a90ad9d941d0a3da69a7936ea3a02be83474a595e63a04c07dd486eed20312d843dd5e3da550c8","ssdeep":"1536:6h86W3nY8zK7+lGUtbLdsOrkZWDi29b79zxS:84LdsOrkZWDiw9zg","tlshash":"4863d7c8f991b06143a77171452f150ea33e296cb40ac0bcbb64d9e5ac7528da23bf7d","first_seen":"2023-03-10T03:35:34Z","last_seen":"2026-09-27T14:52:39.475327Z","times_seen":216,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":13,"connect":8,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/js/jquery-3.7.1.min.js","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.251Z","timestamp":1790520456251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 27 Sep 2026 00:41:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29737\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87532,"size_decoded":30130,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-27T21:20:32.203195Z","times_seen":32229,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clicaca.oportunidadesypromocionesweb.com/img/logo.svg","fqdn":"clicaca.oportunidadesypromocionesweb.com","domain":"oportunidadesypromocionesweb.com","tld":"com"},"ip":{"addr":"190.92.174.33","port":443,"asn":199404,"as":"WHG Hosting Services Ltd","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clicaca.oportunidadesypromocionesweb.com/","date":"2026-09-27T14:47:36.257Z","timestamp":1790520456257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.clicaqui.oportunidadesypromocionesweb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 21:20:18 GMT","end":"Thu, 24 Dec 2026 21:20:17 GMT"},"fingerprint":{"sha1":"1B:10:CC:03:F1:D4:0F:4D:9D:73:48:66:90:74:E2:39:13:06:07:E3","sha256":"0F:59:DF:B9:D2:74:4F:21:ED:FC:34:4B:DD:A5:BF:96:9B:4B:8B:03:07:0A:F5:84:C5:34:D7:69:CE:AE:84:3F"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: clicaca.oportunidadesypromocionesweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clicaca.oportunidadesypromocionesweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 14:47:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Sep 2026 00:41:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 8154\r\ndate: Sun, 27 Sep 2026 14:47:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20065,"size_decoded":8479,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d485a4a34f88c7ff62080eed2b80797","sha1":"cf8506aaa69610ed0568609b3bcc1ee208c53618","sha256":"d77ef526d3abbceca8b1ff25bcab9bd2491c25ce4060c6b350bd6c933e436f1f","sha512":"81634d00c949b9304b0fb5f9f7549eb4b6fa0c4cfded9ab94180b7da4234454613232b5a4bfec6981ccbcbec756df236b98670aff9798705a924bbc43314a31b","ssdeep":"384:5cxT4mjs4d4teehyANcHsrreQF2YOnRfWAZ57//oFlp96:5cx0mjdOH4C+sr6QF2YORxZ5EL96","tlshash":"cc92c7c9776693fcf146f7f8c93659a8be9a6cf83b819979c3a01c42982205d9941cc3","first_seen":"2023-09-18T18:33:32Z","last_seen":"2026-09-27T14:52:39.477397Z","times_seen":90,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"clicaca.oportunidadesypromocionesweb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}