{"report_id":"ae8a1919-8083-40ef-b5fa-6b670da44bba","version":0,"status":"done","tags":["bancolombia","financial","phishing"],"date":"2026-08-22T03:22:32Z","url":{"schema":"http","addr":"finacink.com/static/media","fqdn":"finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.finacink.com/personas","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"title":"Bancolombia Sucursal Virtual Personas","dom":{"size":43623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38238)","md5":"1f45c5dafeab0b5c32c9d8dbbaff9688","sha1":"d27bf946a08e90c12606cd36d6a38817a411406b","sha256":"bfc8f74f94c057f29d121fef3cc1498706faef2497ae874a2e84355a1f86de2b","sha512":"726a17f4d10bc7a696b58cf4cf1cb7e4faa7d6eee77b3589184381c004de6123beee39f8789c0a047e30be93604491eed2957aacae944cebb486c36bc6efb569","ssdeep":"768:kpya6cpX6tRzyJFkTdKyubkqLaM3VFuQcCFLnFnCjzeSLXR1NcBzDhvO/xlle30H:krWyJFkTQ32ynFnCjzeSLXR1NcBzDhvu","tlshash":"7613a630e5d1243b423356c9e56a7b65f1f2864ad6130a1cf2fc85ee6fcacd0fa22159","dom_hash":"domhashb29ebd5378dd7391a3f6f4ecc4690d60","first_seen":"2026-08-22T03:22:38.692388Z","last_seen":"2026-08-22T03:22:38.692388Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"finacink.com/static/media","fqdn":"finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T03:22:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"api.ipquery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-16T23:03:23.649094Z","alert_count":0,"request_count":2,"received_data":74776,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":5,"received_data":36982,"sent_data":2706,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"finacink.com","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-22T03:11:21.794216Z","last_seen":"2026-08-22T03:11:21.794216Z","alert_count":6,"request_count":1,"received_data":365,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipquery.io","ip":{"addr":"104.21.86.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-05","domain_rank":0,"first_seen":"2025-07-19T01:53:47.753359Z","last_seen":"2026-08-22T02:34:36.087464Z","alert_count":1,"request_count":1,"received_data":762,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-20T02:37:52.187777Z","alert_count":0,"request_count":1,"received_data":2530,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":8,"received_data":335076,"sent_data":4618,"comment":"","tags":null,"fingerprints":null},{"fqdn":"backend-bc-09.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-13T20:01:20.315705Z","last_seen":"2026-08-22T02:34:39.404499Z","alert_count":0,"request_count":3,"received_data":1728,"sent_data":1807,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"www.finacink.com","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-08-15T22:31:28.119233Z","last_seen":"2026-08-15T22:31:28.119233Z","alert_count":180,"request_count":30,"received_data":11938250,"sent_data":15668,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@mediapipe/face_detection/face_detection.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3d5507323d90cd37d615e5ba9d6b30c","sha1":"c8b00175941a7d5a4775491f010336b60524f538","sha256":"464efd192f197f1000ab60bedde235f349b8ee2967e1443cc3a29cebf42cbce2","sha512":"dc34be71d7e8fc9e9ce9dc06fd61fdd5427f3de81ee20b93986fc3872b278ccf431a5a10840309ef358f9443cdd7d4bdc4050522dad043ca684171a6ce0d609f","ssdeep":"1536:2S2uNxxxxA1Sxzifk5pGf8Adj1QgpESnF7lv09u:3IQOdXQgiqJ","tlshash":"d553b4ac639128e1d934cae755fb20dd6036683268c4949879a1f4f05fb4fed2122f6f","size":65346,"data":"","first_seen":"2025-12-22T12:55:47.815071Z","last_seen":"2026-08-22T03:22:38.713266Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@mediapipe/camera_utils/camera_utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"739d3e7129357384082a082fdb017ab4","sha1":"2c93d83b189971b985ec62b462403b28fa3753f8","sha256":"ee14cd241f693504a9ea55fa2f2ed3b24da1f7cf804926716069d0d232434d8e","sha512":"8ff854279afb779adb439a996b3e4443aa4170a14942d759c77005d2774efb214e1a2f8c4ab383dfa8c65f3dbe33af48a901301aa93c58f2188eb666362a42ea","ssdeep":"192:IlVNJjELKOz5g1n/Ranc4xXWQJtiCdWp4hX:D5g1c1xJtBh","tlshash":"8ef1428cb5a2f4558223a6b2d13f440ff13ba979948c54acb2d4d8e06df44788a27f79","size":7881,"data":"","first_seen":"2023-10-24T19:36:08Z","last_seen":"2026-08-22T03:22:38.700786Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/main.a8ff0d64.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a4b033e514b2165967a7a96bea18be","sha1":"4af8c85a28c67bec1e6f66ca0d51866964a35ba2","sha256":"66efd9e5156a1a60f46b97d49a46a73eb92306ae5b3a30bc5df7863a300cd0ae","sha512":"a3e8060cc552262dab3218eb206f1436414b4acda67143cdbdf60e36580918be51b59650ff427c423dc70b8c3ce92ae749fb04da9bc560ee7e239bfd7a6a4e5e","ssdeep":"24576:jayirK2wCyb2Wmsxzq2N4p5b+PvwBbbAY7vb:jnirLwCyb2Wmsxzq2N4p5b+PYBbbAY7T","tlshash":"81253ad93292f06297f610e6807b0107f3396955380d8458f26cecdb797998aa27bf3d","size":1043934,"data":"","first_seen":"2026-08-15T22:31:33.984869Z","last_seen":"2026-08-22T03:22:38.735969Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/156.99301818.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9eb017aec2ec4b779dbda3db5128d27","sha1":"9a95b02772f18c3ff2d5862e312aa59f26597e56","sha256":"60c8e6cbca71aa45b240dc920681a1b866a1ffc6dcc067ab87af1583ba8b6897","sha512":"f883ccae0590e1b8eddc1c66edccacffbe2b81a3aa9197c7c3b03d2db566f0273ab508d4aee1e357ae9a00925b14bac36731764b4c3603c4da742309630585ab","ssdeep":"","tlshash":"44719584b1a17eb859c285e440bf3507f02d355a30bdb060e7a1c5f071b94aab5b5ebb","size":3618,"data":"","first_seen":"2026-03-17T00:16:36.844847Z","last_seen":"2026-08-22T03:22:38.714793Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/797.4a2e4acc.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46db28f12b9ba1ec4b5c73092b4fda30","sha1":"4b29c8af3d215a648b29486de53cfb7c8b5da7a4","sha256":"0461ab122bd78d1173ef8ef1cbf58f0b2b242ef2130601eaeb5f3132363e9dca","sha512":"5f1318abe203f23b8655b5746c101203c275e25e5916d47d0f3217ce38faf5c6357cb8c88fb8fb40b7c21caad4fe7a4488c29306c0fc1b359d41db70b8b051a2","ssdeep":"768:N6lHB6MNfDgxIoer3IxXGghiOHVAOcKQ/Qdg2LW3y+tXc1PcUto1J:4f6MNzVrEXUOHqQY3y+TSc","tlshash":"b75384ca3a86b51257b202f5087f080bf33d5d65684e4d18f518e9dd7828c7e927bbb8","size":61286,"data":"","first_seen":"2026-03-17T00:16:36.857789Z","last_seen":"2026-08-22T03:22:38.740288Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/68.db6409de.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"366140221171d2287c02dc787a9e021a","sha1":"3ef923861c379cf74277cb4544c259da3e83051d","sha256":"a5b6fea4118f5de51618050f9c13c5be5c1dcb578560d8928b0c060048b3e86a","sha512":"593044d2c25e02cf633a591f9f7480b5af5b849c6e8ed12d80a809503263ff853b369c6364a97935f975a0ccecb3af1c2769a9116ad45ee9f669cc8536531fae","ssdeep":"1536:uQfGNpFOo6D9PK5rQN61pFn8t83BlxvHxre0e10XiA6wEya3dfpQBEbiwukjCK22:EpSD9PHN6Qv08QmbidK22","tlshash":"64a31989b121b1b68ae715de82b5c211b3b14c457408c8a4b1bd8d7b487dde903aeffd","size":103842,"data":"","first_seen":"2026-03-17T00:16:36.85877Z","last_seen":"2026-08-22T03:22:38.740915Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/942.905d173f.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a3a83e3449d82e575a0e8975593428","sha1":"5219f232aa12d10d7dd001837cbdf9fa38dcbcc3","sha256":"dcd2c85a853f613f0217fa1aaf01a514e18544e626f4412ab30123d4cf33fadc","sha512":"80ad425c8dd34836d772373e00382422ad9e3b654f16da4d5066101b0a5013b039f5492450e4ec9544fc3dc4f1239e7ca73e191baf5c3a7ef1616f02de60ea29","ssdeep":"768:eFdn9q0QLvTAc8z54eME0voeGAxs3ZHA3cPooIUIXrj58pxyDnqOGOL+hUCPwPZy:kqdQys3ZHrPyPDnqOGZkQ","tlshash":"09430105e195bfedb4aa58cc651ed40cb12b7a4cde4d89b4b97c6c351e888c4b343bca","size":60542,"data":"","first_seen":"2026-08-15T22:31:33.986608Z","last_seen":"2026-08-22T03:22:38.702571Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🛡️ AntiDebugging iniciado (PROD)","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":351735},{"level":"log","text":"Geo guardado:map[actor:server1.conn0.watcher17.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[country:map[configurable:true enumerable:true value:NO writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":1042240},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262},{"level":"log","text":"","filename":"https://www.finacink.com/static/js/main.a8ff0d64.js","line_number":2,"column_number":352262}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.430Z","timestamp":1787368922430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223903\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-22T06:24:45.228666Z","times_seen":331802,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.497Z","timestamp":1787368922497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223903\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-22T06:24:45.228666Z","times_seen":331802,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-bc-09.vercel.app/api/v1/validated-block","fqdn":"backend-bc-09.vercel.app","domain":"backend-bc-09.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.507Z","timestamp":1787368922507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"POST /api/v1/validated-block HTTP/1.1\r\nHost: backend-bc-09.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nContent-Type: application/json\r\nContent-Length: 33\r\nOrigin: https://www.finacink.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":33,"data":"{\"data\":{\"attributes\":{\"ip\":\"\"}}}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.finacink.com\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:11 GMT\r\netag: W/\"3e-3HMYO0vIx7VM5YzXuwWNJncZeEg\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fwmp4-1787368922814-b297472312ee\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":62,"size_decoded":596,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd8671652c0633ebe899c4311d6bac52","sha1":"dc73183b4bc8c7b54ce58cd7bb058d2677197848","sha256":"df447fb19de0788c7d0baff43f93764ba850f3fc955a968fdc94deb41145d1f4","sha512":"968588fa39c67bad46a452060ede27ebb55b693423c1b3aaa34268494139bb5a17aef23ae645d9c4fb19c65f733c9166a58b1f3cc1415a7be9e00cc3f16f8c33","ssdeep":"","tlshash":"cfa0220f003002c002808200000e00b032c00c80300208c8c38c023c0cc23c0e0a2033","first_seen":"2026-07-18T15:37:25.612866Z","last_seen":"2026-08-22T03:22:38.698263Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8832,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":8805,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/persons.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.540Z","timestamp":1787368922540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/persons.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702896\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"persons.png\"\r\ncontent-type: image/png\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"b1c25fb413e5af6c73e6bc2fc24a30aa\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922545-277bcd31afe3\r\ncontent-length: 6109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6109,"size_decoded":6622,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b1c25fb413e5af6c73e6bc2fc24a30aa","sha1":"f6e19fa7a3a371ad169cb6e1970f6c2244a93286","sha256":"012e4814448681a903ebb21aca4980c8ced6570b5362810d7d3ce1b579d233a4","sha512":"f72e8cbf42754212379cd22c5633177eb8be4c75c0d5c495d2f4bf56684b14fd60ead5d45b7459666900f720b305c58ad92b786f5f3a3d4ddded4f1d81b37569","ssdeep":"96:2N73aTNjsgxsPlzxcZF7lZj7rAU7J1SzLOKKI36GbWMLy2AS:2UTNjs/9zx0jXbJ1SzLkobWMLkS","tlshash":"bac19f5a324c9d20d48ee6086983b841fff8794090f1b8cb126df1de632775e6561393","first_seen":"2026-03-17T00:16:36.847322Z","last_seen":"2026-08-22T03:22:38.699557Z","times_seen":35,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@mediapipe/camera_utils/camera_utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.972Z","timestamp":1787368921972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@mediapipe/camera_utils/camera_utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.1675466862\r\nx-jsd-version-type: version\r\netag: W/\"1ec9-LJPYOxiZcbmF7GK0YkA7KPo3U/g\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\nage: 11004\r\nx-served-by: cache-fra-eddf8230047-FRA, cache-bma-essb1270068-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3130\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7881,"size_decoded":3914,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (585)","md5":"739d3e7129357384082a082fdb017ab4","sha1":"2c93d83b189971b985ec62b462403b28fa3753f8","sha256":"ee14cd241f693504a9ea55fa2f2ed3b24da1f7cf804926716069d0d232434d8e","sha512":"8ff854279afb779adb439a996b3e4443aa4170a14942d759c77005d2774efb214e1a2f8c4ab383dfa8c65f3dbe33af48a901301aa93c58f2188eb666362a42ea","ssdeep":"192:IlVNJjELKOz5g1n/Ranc4xXWQJtiCdWp4hX:D5g1c1xJtBh","tlshash":"8ef1428cb5a2f4558223a6b2d13f440ff13ba979948c54acb2d4d8e06df44788a27f79","first_seen":"2023-10-24T19:36:08Z","last_seen":"2026-08-22T03:22:38.700786Z","times_seen":88,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/942.905d173f.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.356Z","timestamp":1787368922356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/js/942.905d173f.chunk.js HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"942.905d173f.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"76a3a83e3449d82e575a0e8975593428\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bs2c7-1787368922359-5c9971a03266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":60542,"size_decoded":13275,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60495)","md5":"76a3a83e3449d82e575a0e8975593428","sha1":"5219f232aa12d10d7dd001837cbdf9fa38dcbcc3","sha256":"dcd2c85a853f613f0217fa1aaf01a514e18544e626f4412ab30123d4cf33fadc","sha512":"80ad425c8dd34836d772373e00382422ad9e3b654f16da4d5066101b0a5013b039f5492450e4ec9544fc3dc4f1239e7ca73e191baf5c3a7ef1616f02de60ea29","ssdeep":"768:eFdn9q0QLvTAc8z54eME0voeGAxs3ZHA3cPooIUIXrj58pxyDnqOGOL+hUCPwPZy:kqdQys3ZHrPyPDnqOGZkQ","tlshash":"09430105e195bfedb4aa58cc651ed40cb12b7a4cde4d89b4b97c6c351e888c4b343bca","first_seen":"2026-08-15T22:31:33.986608Z","last_seen":"2026-08-22T03:22:38.702571Z","times_seen":11,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.496Z","timestamp":1787368922496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223903\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-22T06:24:45.228666Z","times_seen":331802,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.498Z","timestamp":1787368922498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223903\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":27409,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-08-22T05:37:22.152853Z","times_seen":47565,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.502Z","timestamp":1787368922502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223903\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":27409,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-08-22T05:37:22.152853Z","times_seen":47565,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-bc-09.vercel.app/api/v1/validated-block","fqdn":"backend-bc-09.vercel.app","domain":"backend-bc-09.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.508Z","timestamp":1787368922508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"OPTIONS /api/v1/validated-block HTTP/1.1\r\nHost: backend-bc-09.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.finacink.com/\r\nOrigin: https://www.finacink.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,Accept\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://www.finacink.com\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::c98w5-1787368922588-126c020304b2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":566,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T06:26:49.928163Z","times_seen":18029198,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":1,"dns":28,"connect":1,"send":0,"wait":212,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/imagemed.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.544Z","timestamp":1787368922544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/imagemed.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imagemed.png\"\r\ncontent-type: image/png\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"2418295e31fae64d5fdbab64401affc1\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r4jfr-1787368922548-026f8b51eb4e\r\ncontent-length: 1159020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1159020,"size_decoded":1159537,"mime_type":"image/png","magic":"PNG image data, 919 x 999, 8-bit/color RGBA, non-interlaced","md5":"6849cae216d4da6433a73afbfcf563d4","sha1":"303d78e3274d4aa02a8dfc936736253dec647ca3","sha256":"4b578ca237636a7d160a3362b0cde2e788c5ef9b7bc0c36161cbb25737194954","sha512":"c4f99e6dabe93234b5bbafe95b0e31aeb7e7129a24a2eff438cc7972d7436dcb4bc4eb90c70747cd79ff0e36fae5510b18096529f8ce90b2e78f212c45299770","ssdeep":"24576:2AwnJg8Jm8DraAi6YZSonIA++vYCmA8i+2uMisy:DwJrJD29wG82PTy","tlshash":"5c253372a21536dcf155a0b4cc1c9561ab7c932d78f3854b30e39183ca1bdce7b9a8da","first_seen":"2026-03-17T00:16:36.868999Z","last_seen":"2026-08-22T03:22:38.707523Z","times_seen":35,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images_prehome/Prehome.gif","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.547Z","timestamp":1787368922547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images_prehome/Prehome.gif HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702896\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Prehome.gif\"\r\ncontent-type: image/gif\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"d6046ef9b6bd4aba37dcbfb8dfe8ae62\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922552-c2b65092395c\r\ncontent-length: 7427982\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7427982,"size_decoded":7428498,"mime_type":"image/gif","magic":"GIF image data, version 89a, 682 x 739","md5":"b86b2e17b92352782da603fcd11f173f","sha1":"e6e3ceb605d5003155d806385bc75ea6471d2cbe","sha256":"9ad6f3b6f6bc8ac89b57b99c15c8fe3d867eed72ffe9439875649a24ef033a92","sha512":"78d1128174336c69f0dd79b1244a7b076695f132dc45ed70505a64a5b9c2546d77eb6647ee5ffc99d565f503560945970cec6775129caf0f8f51ad6e8a3e5985","ssdeep":"24576:DomD2taTXWcWpsmD2taTXWcWpsmD2taTX/:D92tUXxWpZ2tUXxWpZ2tUX/","tlshash":"d925234d026f08a5ddbe4beb1d8bd32bb01a95de1d5828375f902e5a60db6ef4cb0131","first_seen":"2026-08-07T07:31:20.367279Z","last_seen":"2026-08-22T03:22:38.709195Z","times_seen":19,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.965Z","timestamp":1787368921965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 03:22:02 GMT\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1056,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"031b99ba56d02b62603f7a4e0ea3a5a6","sha1":"fac93065cc626939d4eef0201eba88fb1fe1fe40","sha256":"89dd8b1d9660c34be366c6f8f3bcdb355f30a25bdf1eab0f33e09cbb38f3253a","sha512":"ba0f24f0fa3fcb013aef6591b3269998fb7b3901030f93c43afc1e544cd734b81bdfb1fe089051bcbcb7b09b5aee9f39996135e5228fd098a65090b69ef4f01d","ssdeep":"","tlshash":"fef078586a1a5805a1150c97330f3f220e19491f294ad8feaf410d0c9efe5774345b0f","first_seen":"2026-08-13T22:55:31.775883Z","last_seen":"2026-08-22T04:30:18.352043Z","times_seen":117,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@mediapipe/face_detection/face_detection.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.971Z","timestamp":1787368921971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@mediapipe/face_detection/face_detection.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 23742\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.4.1646425229\r\nx-jsd-version-type: version\r\netag: W/\"ff42-yLABdZQafVpHdUkfAQM2tgUk9Tg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 10925\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\nx-served-by: cache-fra-eddf8230228-FRA, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65346,"size_decoded":24507,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1958)","md5":"d3d5507323d90cd37d615e5ba9d6b30c","sha1":"c8b00175941a7d5a4775491f010336b60524f538","sha256":"464efd192f197f1000ab60bedde235f349b8ee2967e1443cc3a29cebf42cbce2","sha512":"dc34be71d7e8fc9e9ce9dc06fd61fdd5427f3de81ee20b93986fc3872b278ccf431a5a10840309ef358f9443cdd7d4bdc4050522dad043ca684171a6ce0d609f","ssdeep":"1536:2S2uNxxxxA1Sxzifk5pGf8Adj1QgpESnF7lv09u:3IQOdXQgiqJ","tlshash":"d553b4ac639128e1d934cae755fb20dd6036683268c4949879a1f4f05fb4fed2122f6f","first_seen":"2025-12-22T12:55:47.815071Z","last_seen":"2026-08-22T03:22:38.713266Z","times_seen":33,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":2,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/156.99301818.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.349Z","timestamp":1787368922349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/js/156.99301818.chunk.js HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"156.99301818.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"a9eb017aec2ec4b779dbda3db5128d27\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f8ft5-1787368922353-c71eefddfc99\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3618,"size_decoded":2219,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3571)","md5":"a9eb017aec2ec4b779dbda3db5128d27","sha1":"9a95b02772f18c3ff2d5862e312aa59f26597e56","sha256":"60c8e6cbca71aa45b240dc920681a1b866a1ffc6dcc067ab87af1583ba8b6897","sha512":"f883ccae0590e1b8eddc1c66edccacffbe2b81a3aa9197c7c3b03d2db566f0273ab508d4aee1e357ae9a00925b14bac36731764b4c3603c4da742309630585ab","ssdeep":"","tlshash":"44719584b1a17eb859c285e440bf3507f02d355a30bdb060e7a1c5f071b94aab5b5ebb","first_seen":"2026-03-17T00:16:36.844847Z","last_seen":"2026-08-22T03:22:38.714793Z","times_seen":38,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/abrazos.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.534Z","timestamp":1787368922534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/abrazos.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"abrazos.png\"\r\ncontent-type: image/png\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"a84860dd37a083f9cade0957e3b0ae66\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f8ft5-1787368922536-2e967b2b3e05\r\ncontent-length: 220621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":220621,"size_decoded":221136,"mime_type":"image/png","magic":"PNG image data, 558 x 273, 8-bit/color RGBA, non-interlaced","md5":"a84860dd37a083f9cade0957e3b0ae66","sha1":"aafba6316d74d8c7b37d04fc65e80f62a6cc3082","sha256":"5f6553d4c52651862a7ea563cc8fc73fce73a6a2f0bd6bb590133ea5a2ba9d82","sha512":"dd1987a71a5b2f726c8e87ccadc626a93283e3e59e36b9e6ab29f0f037821ffd918b2a1fc20c83ac95c742e1cccbb1e74fef990036f8ece8813524d5f38672be","ssdeep":"6144:HTXLgI1RFIstD7Nn+VmTEHLAEh7nQZg0HLcW6biBfdi+Jfn:zUMLRnIfKZg0HL36sf","tlshash":"e124122fd74d5af579065398a275033023172d99fff753a2a2a0292ef416b2c7032a5f","first_seen":"2026-03-17T00:16:36.850332Z","last_seen":"2026-08-22T03:22:38.715836Z","times_seen":35,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/candado.webp","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.541Z","timestamp":1787368922541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/candado.webp HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"candado.webp\"\r\ncontent-type: image/webp\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"a7f3bd49e432ee5bb6d69a04c4a59c80\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::svzhm-1787368922546-c2ebc71be1ca\r\ncontent-length: 3626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3626,"size_decoded":4141,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7f3bd49e432ee5bb6d69a04c4a59c80","sha1":"474362ed37d3b43da1988b54d2ef40607020ed17","sha256":"4b2065800c099f24cfc1921bff3b2e1a30a71c32b4152d8c4f68f690027c10be","sha512":"f5e1fed70ba717b0ba06c3ce160db98a261963f2a48fb6c31aec58878e3db8b6aa40fcc71e73d10233824cd4cbfae29c1a0cceaafc2fdbeebff2eaff60a28f96","ssdeep":"","tlshash":"43715c61332d161dda03677021cc77c1ff3d5ab7995cdaad86ca812e2b1986145fca83","first_seen":"2026-03-17T00:16:36.836593Z","last_seen":"2026-08-22T03:22:38.716839Z","times_seen":35,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/atencion.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.548Z","timestamp":1787368922548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/atencion.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"atencion.png\"\r\ncontent-type: image/png\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"d6937f7dfadff1c5c5cb7da3b9dc8ab6\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::svzhm-1787368922552-11521ced996d\r\ncontent-length: 224590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224590,"size_decoded":225106,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"d6937f7dfadff1c5c5cb7da3b9dc8ab6","sha1":"e25e71802af49df4597b4a2193d5fa01f4cc20c0","sha256":"0065f63a02f9c28d960cd691ef1465771c815265434e0a6885e5af0b72021177","sha512":"e5ce5deded41ae898b5356d132bcad461bd5ed08cee5b4a8dc64d0626367b928787de3f497541bdbce6aaff777ba8d61a769d07569160b19e51c5dd6d7ff65eb","ssdeep":"3072:v0Ng7M8UVcIexMiHOf0qHNMo4OCkV5IEFcQhqA9EPk4lB1JQLsOfmzOlozw:vwg7M8genH4UO5Ve1c9pWAf1","tlshash":"2524f1baf7e7e345c743a9be962c2d7a17b038d385a5004b02676c452b98f75062723f","first_seen":"2026-03-17T00:16:36.873047Z","last_seen":"2026-08-22T03:22:38.717986Z","times_seen":35,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.674Z","timestamp":1787368922674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51912\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:47 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223875\r\nlast-modified: Mon, 15 Sep 2025 16:30:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51912,"size_decoded":52725,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51912, version 1.0","md5":"fe5ed0fcd60f2d8214c86cbdd0c88b8b","sha1":"c9c1cbb6cead905fdf1e19faca071d09ca2b65f8","sha256":"a093b888254afd7deb8e37cccfd434e7d06ed47d22cfed9621631d80e1e81554","sha512":"854fc977679e9f512f776a16748f8b756f11c28ded7f1c32a4d57b8ef8728c536f6cceb948a491cb555e22110acda52f619d072dd02351eb7ce514cc8e63d0f1","ssdeep":"1536:iCrpjxLjTpmNyGGqE6TYPvW7PNhLzMEz0HiH:fpHmNhE/5E6a","tlshash":"e533f13905ae37e2c1a48334ddb82db45bb775277a39af9812e5005e82339762f7a305","first_seen":"2025-09-17T03:21:31.197712Z","last_seen":"2026-08-22T04:57:08.991313Z","times_seen":12861,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finacink.com/static/media","fqdn":"finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T03:22:01.479Z","timestamp":1787368921479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/media HTTP/1.1\r\nHost: finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sat, 22 Aug 2026 03:22:01 GMT\r\nlocation: https://www.finacink.com/static/media\r\nrefresh: 0;url=https://www.finacink.com/static/media\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::bkqmd-1787368921534-6cc0b1923e3c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T06:26:49.928163Z","times_seen":18029198,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.384Z","timestamp":1787368922384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 03:22:02 GMT\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24056,"size_decoded":2506,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"da2f9a1f3b41840d93c338c4b248ad8e","sha1":"a7deb30ce7fb0d075da5e9faf1d1b229cc776d07","sha256":"1334350a42e985e91b20ac233fdd44142bc77a0d61079a5f26fee4f915044119","sha512":"42401c8b1c459ea43d2bb3818da94a91a9c10a5dcae0ed2405061a87f1c60efd1a501e4f76fb60a08db0b3abd7daaacc90363d4cf480eb646756c6315216206a","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw9:6SqqY49t5qY4yf/qY45uOqY4P","tlshash":"89b21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:19:30.069328Z","last_seen":"2026-08-22T03:33:19.922481Z","times_seen":12786,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.503Z","timestamp":1787368922503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223903\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":27409,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-08-22T05:37:22.152853Z","times_seen":47565,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/logo_salud.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.532Z","timestamp":1787368922532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/logo_salud.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_salud.png\"\r\ncontent-type: image/png\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"a5f23526dea72d0833c99d70f9476b05\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922536-08e9ca1d628d\r\ncontent-length: 285831\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285831,"size_decoded":286349,"mime_type":"image/png","magic":"PNG image data, 707 x 716, 8-bit/color RGBA, non-interlaced","md5":"a5f23526dea72d0833c99d70f9476b05","sha1":"e515db4bad18aa37d56cf25e09cab2ca8f270e4a","sha256":"420aae9a4f2d968094e843243579fb73eb5a52d56fb70f792c6220aa65110fea","sha512":"101a34d56b2ce7a7ccb932251b5cd8e985904f8f08d3d6d5ffd90c6bf8153c477d45f30edfd32debaad8eb1657ade17896798fdb0bf6016a9a2f381d96cb7cfb","ssdeep":"6144:GWeF1g5pg3ab9NJ7DbQitHzyIMmjovZ+jeFz/Lm0DA01GROkbq:GWXbxDbQ0TmegZ+OLK0E01bkW","tlshash":"cb54f170ebc7e666c7132278403d2da39b2a2ac191e6050e40f79c897b81f6651b737f","first_seen":"2026-03-17T00:16:36.855009Z","last_seen":"2026-08-22T03:22:38.72518Z","times_seen":35,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/media/OpenSans-SemiBold.ce5dcc9d306b4c266f6a.woff","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.673Z","timestamp":1787368922673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/media/OpenSans-SemiBold.ce5dcc9d306b4c266f6a.woff HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.finacink.com/static/css/main.6c8f1f00.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702894\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"OpenSans-SemiBold.ce5dcc9d306b4c266f6a.woff\"\r\ncontent-type: font/woff\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"b9b7bbbaf0b24fbae6f95a1fae6a5d0d\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c54r9-1787368922678-55aac82a245c\r\ncontent-length: 69884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":69884,"size_decoded":70430,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 69884, version 1.10","md5":"b9b7bbbaf0b24fbae6f95a1fae6a5d0d","sha1":"fdeb4798f5eb1c3d5c3581aa47bd8611e292b61c","sha256":"bae04241433922b6e3a7c2ca047f2544df0e6b604fd47ec5839f1cefe28cbb4d","sha512":"9e7fef4a5d5e7327a700da28692afaad0183c913e3fc55467d52fc54ce58c29c323bc146d0e26ba857d3c24d7735d8c41ae98626e1cb0183ff35a21f7925d10c","ssdeep":"1536:p0xeiJWBUUrv4ZNp5+gmeyt8Cn8NWgYYXkvLGG8ljlw:aWmUrv4fpAte+8CdgFUDOjlw","tlshash":"6f63026dde82d3a70fdcda264ce027029e4632069a1036ee3f6d977e9fd430125e499d","first_seen":"2023-04-27T18:04:19Z","last_seen":"2026-08-22T03:22:38.726588Z","times_seen":113,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/css/942.b7fd8f89.chunk.css","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.355Z","timestamp":1787368922355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/css/942.b7fd8f89.chunk.css HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"942.b7fd8f89.chunk.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"cf8ebee664a4c57629ec25aa57825c4f\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qqjr9-1787368922358-d351b603ff97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":62353,"size_decoded":14037,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62299)","md5":"7283fa6f67a14d6cdfd9cfc0eb4cec60","sha1":"ca2566db2e5a409ae764d2a97baadacee31bad29","sha256":"3088f9c4bf4fc3aed02227d50bcd686e641f7d051d215435df2f4a81adedc5b1","sha512":"604e9a97ec2f77723a7b137df1bcea2614bbdad792483244171b24646fec00f3299a6e5724991171d9ecc7151e1d9a79139ec2e7e3b58027fc05bded7cb2ec9b","ssdeep":"768:FZXFix2PcdJn9yskitFTQXqlbex8kbUA60B22JFgtJJDwTNJmI7X:FbkkCTQalbekAUw4JDQNT","tlshash":"6a53b4216360602db12bc9b4e9d1ebedf138c402e2a757eda945a974c9cb1f7133a70c","first_seen":"2026-08-13T20:01:26.482107Z","last_seen":"2026-08-22T03:22:38.72758Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/img1.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.534Z","timestamp":1787368922534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/img1.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img1.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"c0b4c85d2b81027738d2bb36cbc60f28\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922542-a995eec46fc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1249,"size_decoded":1238,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0b4c85d2b81027738d2bb36cbc60f28","sha1":"8805943076fccd840d0b9636e336d741a9faf7d0","sha256":"afbae679080865d66956f2bc4e5306dd73239428d80e5ec805fdae1206f94b87","sha512":"8ac8f55d72930c3c64775aae27ec7e7f57755a6c5cb0901952704d417c731bbcdd7437f440dfa052c5f1a968d562736c0933fedccd524a5362c35ca54d70f8d5","ssdeep":"","tlshash":"8f213254994400b8c2c802c00bf5b8c5533ff25f40e13db4869a35604f2ed5d5bae705","first_seen":"2026-03-17T00:16:36.874221Z","last_seen":"2026-08-22T03:22:38.728316Z","times_seen":35,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/img2.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.538Z","timestamp":1787368922538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/img2.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img2.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"e4e6099c110f7bf6e7d6f50705c982e8\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c54r9-1787368922544-f3a1618711a4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1005,"size_decoded":1119,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4e6099c110f7bf6e7d6f50705c982e8","sha1":"d6ae42eba1eebf02733b0d2b021e96fe54511d6b","sha256":"15caa52a9a8704652bf5aa2d66663b27fff7f0df54aab6785382de027a4e95d1","sha512":"83c00c60db07e311314566ee3cb14f7300fb61edb95f6c25011750cf63d8723614193dd7ddcbcf83c9551eff09a085e0115a74f9ffe3374841e36049045c342e","ssdeep":"","tlshash":"5f112568a42450f9c6c803805bfab4c8133df10e40d529b8db8db8114e35e5d5fee30a","first_seen":"2026-03-17T00:16:36.856275Z","last_seen":"2026-08-22T03:22:38.729032Z","times_seen":35,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/img3.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.539Z","timestamp":1787368922539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/img3.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img3.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"2d17cb2c9ea216b12922d68bac3d272a\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f8ft5-1787368922549-6480a20a9baa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4817,"size_decoded":2447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d17cb2c9ea216b12922d68bac3d272a","sha1":"f97ddd589964e1f8f39087d014e1430353dc475e","sha256":"4748717c0cc28852c6b52238e246764a715558d123f44501263336225262bb3b","sha512":"73bbb7d41d7c66c373c45512afec73d319fc2b212fdfdf178f724de2f597014e37f9b3e1d9801e052a93e09d2c48e072134c05837bfadbe0b99f14bac131390a","ssdeep":"96:TKfP/HgyN1bitWojPclEyljXaQCQg9+vcaUf22DH783Qzm2hR:TKfPPTbitClDaQngXaO22H8+f","tlshash":"1fa121e057c4a2e8e045e3f8a67a6964757f38f93a12cfdc87e93c50552c5ad4888c82","first_seen":"2026-03-17T00:16:36.870755Z","last_seen":"2026-08-22T03:22:38.729839Z","times_seen":35,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/media/OpenSans-Regular.77e375664049d0670469.woff","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.677Z","timestamp":1787368922677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/media/OpenSans-Regular.77e375664049d0670469.woff HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.finacink.com/static/css/main.6c8f1f00.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702894\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"OpenSans-Regular.77e375664049d0670469.woff\"\r\ncontent-type: font/woff\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"a5c8152106f5fb792ab6bef239f7b0bd\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c54r9-1787368922684-2534af4c164b\r\ncontent-length: 67540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":67540,"size_decoded":68085,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67540, version 1.10","md5":"a5c8152106f5fb792ab6bef239f7b0bd","sha1":"d40c40c9ad55bee2959cbb43a256a8e11eb61d9d","sha256":"eb3e750c6fab3976f69f16b4f398de3d44e8fb7d596235c25a28df5ddacf48f7","sha512":"00fe4941903e93c2e754ea2d07ce9aff7c857fb4e78f527e4e427d7766d6a17cd6f9761eaa765637b442f68d04eee82322aa5e5ed7cb048bdaa73629c7a063d6","ssdeep":"1536:Klsp+Zxz8HN2jCuYf24p20cSXgIrDPlkl+:ssp+ZxQHYCVf2JIrZkl+","tlshash":"d1630278e15c912ecf8c49e43185c2cd4e0eb1acce1254be57bf80996ac627b9e9583d","first_seen":"2023-04-27T18:04:19Z","last_seen":"2026-08-22T03:22:38.730498Z","times_seen":119,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"backend-bc-09.vercel.app/api/v1/interaction","fqdn":"backend-bc-09.vercel.app","domain":"backend-bc-09.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:11.629Z","timestamp":1787368931629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"OPTIONS /api/v1/interaction HTTP/1.1\r\nHost: backend-bc-09.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.finacink.com/\r\nOrigin: https://www.finacink.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,Accept\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://www.finacink.com\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Sat, 22 Aug 2026 03:22:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9rt87-1787368931635-c6dea53217f5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":566,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T06:26:49.928163Z","times_seen":18029198,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/bancolombia-logo.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.981Z","timestamp":1787368921981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /bancolombia-logo.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/static/media\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 700810\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"969f1ed3ee2e586db0da33955ef0ecc2\"\r\nlast-modified: Fri, 14 Aug 2026 00:02:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9w79s-1787368921998-ff5dcda874e4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6689,"size_decoded":2687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3097)","md5":"969f1ed3ee2e586db0da33955ef0ecc2","sha1":"7cd40577aa105f61bcaa8569accc8b0cbe5cf0fa","sha256":"170164cbad1321c67fa3373735f2b0667e8dc0b4a498ac68fdc28b0f409c6625","sha512":"14bee321be39327811ce7e782cf29586983c9e7953fde4cc25793c443e2e754f50b70576bf43af6a4978ee57df3b90ece2094c7f039078ce952c06a5d51e9cb2","ssdeep":"192:p3sRQJ2AgHLNIyfi4NSyt3U2G2vX6toqZ7U+LBf:9sRa4k2G2vX6t1Y0R","tlshash":"16d10367d9008c0b2a3251baa5e7b609d113850b9c44ecadf7bd009e0fd4aeb95b361a","first_seen":"2026-08-15T22:31:33.928002Z","last_seen":"2026-08-22T03:22:38.73113Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.112Z","timestamp":1787368922112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 03:22:02 GMT\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1385,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-08-22T03:23:38.799299Z","times_seen":9033,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/img_pantalla1/logo-bancolombia-black.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.518Z","timestamp":1787368922518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/img_pantalla1/logo-bancolombia-black.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-bancolombia-black.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"dee23705b2aebc4551d51b0d66f387b9\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922522-2fc512dec352\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6974,"size_decoded":3006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dee23705b2aebc4551d51b0d66f387b9","sha1":"09860e16f80bc739f6c959b1597139193f727749","sha256":"5fe37dcdd77b9c5224aa244a69b8a2faffa11306d5dcfc2480edfa146d8daf5b","sha512":"8431906729b1cb6e4e2479fb985ab5f8c6aad3eb9168292ed919b33618220c850ab1f41413a822a1a2d4775731dbcf738238a68d8c251af69842e6f0c92bd8ab","ssdeep":"96:2Ai0rp45IklgWEHeH9jM1LwiZgubQpzR4toLc91KoPqQqTBQ5SM1y0e8XP1lbEoV:210rHDheWbQpt4rPNy2Vlb4hLXeXVXP/","tlshash":"56e194d427358598e584a2fdeb2e11ad3c5aacee3201c42ec7e42d19d5c922f4c64deb","first_seen":"2023-05-09T07:03:35Z","last_seen":"2026-08-22T03:22:38.732431Z","times_seen":128,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/imgi_3_Salud+y+vida.webp","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.525Z","timestamp":1787368922525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/imgi_3_Salud+y+vida.webp HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imgi_3_Salud+y+vida.webp\"\r\ncontent-type: image/webp\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"282a48fe4cd6288598879b5d1f85f1f7\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922529-d10c18c6607d\r\ncontent-length: 147590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147590,"size_decoded":148119,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"282a48fe4cd6288598879b5d1f85f1f7","sha1":"631fabff57e167ae34a3cb0594ffd869d6f0adbe","sha256":"4b9925a5bf744f4dad73ffc0702e4286838c59e38e344df18fd78c6de6fc4b13","sha512":"b5060d3cd9815ceea62489b98557217276d5c0f856df61933646efc970120c769af64aec9dc6ba6a8c965bc26de188c0a4ee2106dd940433a2e3f0799d6b50e6","ssdeep":"3072:Z2enfgpIp7QKwOT8FerXvYJfITwiUn3jiQCmwSeLiPllYrJi+pbgiVWYCJK:Z9USQKwOT8FerXvU9pTNCdLsli8+pbaI","tlshash":"25e312a0655ca4b1cb270dfbb4c933931ffe1be219bf96090b165893f2424dca692467","first_seen":"2026-03-17T00:16:36.853766Z","last_seen":"2026-08-22T03:22:38.73306Z","times_seen":35,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/logo_dinero.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.529Z","timestamp":1787368922529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/logo_dinero.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_dinero.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"3a9434d41c0382a3351f9baeaa19f922\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922532-762754b13a8e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1659,"size_decoded":1281,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a9434d41c0382a3351f9baeaa19f922","sha1":"2404560d9415cfd98a732cc41fd8dc172c31e89c","sha256":"93396cbc82a35d473aa3d7350c59b96db1eb761b5e5c4338535601d99551d12f","sha512":"32dd2beb4f198edeb653f3b691d621de784e5a16623096138a4496cb51d2d579075ef8449d1a6c01a6f8e31fc83b5fc57f5cd0b8b51db4dcfc6fc0a1f6889433","ssdeep":"","tlshash":"6731f0c23264d7bde000a57d532a51f538e26ccf2555189ac7a12e2768cc71d0ddd8de","first_seen":"2026-03-17T00:16:36.84246Z","last_seen":"2026-08-22T03:22:38.733607Z","times_seen":35,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/media/OpenSans-Bold.32cddb562b97d09c034a.woff","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.680Z","timestamp":1787368922680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/media/OpenSans-Bold.32cddb562b97d09c034a.woff HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.finacink.com/static/css/main.6c8f1f00.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702895\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"OpenSans-Bold.32cddb562b97d09c034a.woff\"\r\ncontent-type: font/woff\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"f92d9c5ed10696064502fde76feae607\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922684-3c80bc0fc4e4\r\ncontent-length: 70184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70184,"size_decoded":70726,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 70184, version 1.10","md5":"f92d9c5ed10696064502fde76feae607","sha1":"f83af19bb0e89911ba7f3e98821e1a7e7d73f328","sha256":"a580072ed7fd6cc5dd955527d54764705e1a65d6d29e68278bf54c4af4cfce10","sha512":"5fe46b1e7fc13f5e34ec2c50d48454b72860819ebfb0332c5cd44358e4b56747656bca2ade69489c2eae718f2d164914ab0d1b66efaec27890f6781e84b8014c","ssdeep":"1536:cQSllAZuO/z18Niu+LpfeGXdn27gMuqeBvVljll:ciucz1HxegMuXjll","tlshash":"aa63023dca0902025e5d69bb6b8b87d87f4656639370388f4f4dc52682c90ae7cb46f9","first_seen":"2024-10-21T20:33:37.079278Z","last_seen":"2026-08-22T03:22:38.734261Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.ipquery.io/","fqdn":"api.ipquery.io","domain":"ipquery.io","tld":"io"},"ip":{"addr":"104.21.86.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:20.366Z","timestamp":1787368940366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipquery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 19:58:15 GMT","end":"Mon, 09 Nov 2026 20:56:54 GMT"},"fingerprint":{"sha1":"09:78:37:23:3B:E4:55:25:9E:6F:E2:1D:FB:1B:0A:1B:DD:A5:16:BB","sha256":"EE:22:42:1C:FB:2E:A1:7F:C6:93:FE:44:9B:D7:0C:33:E3:6F:0E:89:BC:D1:E9:1E:D1:74:95:00:6F:BE:7F:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipquery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 03:22:20 GMT\r\ncontent-type: text/plain\r\ncontent-length: 14\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQAfBWsEy48WXLGp%2BnOmVfKs5LZM%2F0Kjr8pdgUo2%2FdU9nrOEX4kZTIn3HixpG%2ByGbdjAZGtU5JPcfGPQDjj3kWJSsIqa%2FAt5a5AeplJ6VLUjr03IFzZUfGdU839THe8FeA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2eec0a558104c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":762,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"f69db2ef7fbb52a59ab64abba93fa5d1","sha1":"9388d989c7e5715cc4722642260250a4dcb4a849","sha256":"bb65fcd57960f59b5837ecf35108ec07136739e072bd238939eaa2777e704683","sha512":"496de1bc780f9d56bbeee2d1d15c127e5f4662c6efae427a33155db12df537405a9a160c56debf863a64ffda7872e248572aa56a5c7bbf6c16330c11bf6e31e1","ssdeep":"","tlshash":"826000c300300f0000c0030000c00030c0c303c330c3cc00c3cc33300c00000f000030","first_seen":"2025-12-19T23:15:50.785602Z","last_seen":"2026-08-22T06:20:27.32182Z","times_seen":1282,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":336,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"api.ipquery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.969Z","timestamp":1787368921969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 03:22:02 GMT\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1176,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-08-22T06:24:45.118909Z","times_seen":64664,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/main.a8ff0d64.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.973Z","timestamp":1787368921973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/js/main.a8ff0d64.js HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/static/media\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702898\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.a8ff0d64.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:01 GMT\r\netag: W/\"16a4b033e514b2165967a7a96bea18be\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2td9n-1787368921976-2af9c2508409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1043934,"size_decoded":319262,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"16a4b033e514b2165967a7a96bea18be","sha1":"4af8c85a28c67bec1e6f66ca0d51866964a35ba2","sha256":"66efd9e5156a1a60f46b97d49a46a73eb92306ae5b3a30bc5df7863a300cd0ae","sha512":"a3e8060cc552262dab3218eb206f1436414b4acda67143cdbdf60e36580918be51b59650ff427c423dc70b8c3ce92ae749fb04da9bc560ee7e239bfd7a6a4e5e","ssdeep":"24576:jayirK2wCyb2Wmsxzq2N4p5b+PvwBbbAY7vb:jnirLwCyb2Wmsxzq2N4p5b+PYBbbAY7T","tlshash":"81253ad93292f06297f610e6807b0107f3396955380d8458f26cecdb797998aa27bf3d","first_seen":"2026-08-15T22:31:33.984869Z","last_seen":"2026-08-22T03:22:38.735969Z","times_seen":11,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/css/main.6c8f1f00.css","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.974Z","timestamp":1787368921974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/css/main.6c8f1f00.css HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/static/media\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702900\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.6c8f1f00.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"b72bb3614490e7e935ea94c71a90ae7c\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2td9n-1787368921977-c8b81535207d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659171,"size_decoded":101262,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (23713)","md5":"b72bb3614490e7e935ea94c71a90ae7c","sha1":"77b401307a5898d8c3dbea50e7d62b2a20aa6b0d","sha256":"86b7f047b0711da21d91acf734c5abfdd0b432cd9dc5cf5522c81227c86b1035","sha512":"09eb9fac899735bdbb4ac4f0f3ee5c6aa88d5532b096775a887189137e082a2b868e13ab600912f089d337fe433b0fac451e4960bad5f5a3d5e397bccc91317c","ssdeep":"12288:z5I7xJm80y1ylywVr9P8PgITGEcKVgIO++J:z5I7xJm80yMywVr9PWgITXgIO7","tlshash":"67e4c861f195347db977c427a180ffbc552ea586ea234aa9f007b36883c52c71663f8c","first_seen":"2026-07-01T06:20:52.316443Z","last_seen":"2026-08-22T03:23:38.79832Z","times_seen":80,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/favicon-16x16.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.382Z","timestamp":1787368922382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/static/media\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 703145\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"969f1ed3ee2e586db0da33955ef0ecc2\"\r\nlast-modified: Fri, 14 Aug 2026 00:02:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qqjr9-1787368922385-f7e0b8be7e8b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6689,"size_decoded":2687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3097)","md5":"969f1ed3ee2e586db0da33955ef0ecc2","sha1":"7cd40577aa105f61bcaa8569accc8b0cbe5cf0fa","sha256":"170164cbad1321c67fa3373735f2b0667e8dc0b4a498ac68fdc28b0f409c6625","sha512":"14bee321be39327811ce7e782cf29586983c9e7953fde4cc25793c443e2e754f50b70576bf43af6a4978ee57df3b90ece2094c7f039078ce952c06a5d51e9cb2","ssdeep":"192:p3sRQJ2AgHLNIyfi4NSyt3U2G2vX6toqZ7U+LBf:9sRa4k2G2vX6t1Y0R","tlshash":"16d10367d9008c0b2a3251baa5e7b609d113850b9c44ecadf7bd009e0fd4aeb95b361a","first_seen":"2026-08-15T22:31:33.928002Z","last_seen":"2026-08-22T03:22:38.73113Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.510Z","timestamp":1787368922510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, GET, POST, OPTIONS, HEAD\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://www.finacink.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KpRdusysMFRPMi02f0w10ehCuZ4InidG51%2FobJovoOpgIG2BFWnzi8X%2Ffqb3Odnn6mzEhxZE1eb%2B3VRIvXIYhIwZYb3jXJq2JksdjSDF0N6zMIrDOC0ECVr\"}]}\r\ncontent-encoding: br\r\ncf-ray: a2eec03619e1a896-RIX\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2141,"mime_type":"application/json","magic":"JSON text data","md5":"c9a83cf7b79bb169afa15370aaa9d642","sha1":"e0fb50e54473bf4468fe35add9fd6f777c8633dc","sha256":"9513f5d1cb329721ac415720ce53669e0e98329f191ef9bacb323dd35b4134c1","sha512":"b937a919074c16e74b79086e2d1037911cd8578d04669f9bb90914c0cf579bf200fee329b8282a3c700eddfe26dbe73407141bd88a949e219f394fdc0d672e41","ssdeep":"","tlshash":"5a01df68e4780f7b9cb813587078691b113422176e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-08-17T05:59:44.876786Z","last_seen":"2026-08-22T04:43:21.341878Z","times_seen":173,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":3,"connect":19,"send":0,"wait":249,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/logo_billete.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.531Z","timestamp":1787368922531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/logo_billete.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_billete.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"e92aceb649deb86b7ac8441f1c066946\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5k2cv-1787368922534-d44fcbd53109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1133,"size_decoded":1005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e92aceb649deb86b7ac8441f1c066946","sha1":"8cb5c3276587325482a352aa301867b2f5a033d3","sha256":"6e946dacafe5e56500ad066c2aa4180417383fb8fd50fbd428fc632935a56152","sha512":"2b00153c0dc5d5f5b5849e378286415f70f2e2eb039161cce1c0a51b3d8a0638c6f6efcb582ad7763eeca16f3d48e9628870762c86184c3a9a716084d77c7bd6","ssdeep":"","tlshash":"132100947bc1b3b7b808193f434138ee2256accf3c664145db813618555ec6b8da50df","first_seen":"2026-03-17T00:16:36.865369Z","last_seen":"2026-08-22T03:22:38.737813Z","times_seen":35,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/media","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T03:22:01.559Z","timestamp":1787368921559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/media HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 703145\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:01 GMT\r\netag: W/\"969f1ed3ee2e586db0da33955ef0ecc2\"\r\nlast-modified: Fri, 14 Aug 2026 00:02:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bkqmd-1787368921565-e2a0a4468bf6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6689,"size_decoded":2687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3097)","md5":"969f1ed3ee2e586db0da33955ef0ecc2","sha1":"7cd40577aa105f61bcaa8569accc8b0cbe5cf0fa","sha256":"170164cbad1321c67fa3373735f2b0667e8dc0b4a498ac68fdc28b0f409c6625","sha512":"14bee321be39327811ce7e782cf29586983c9e7953fde4cc25793c443e2e754f50b70576bf43af6a4978ee57df3b90ece2094c7f039078ce952c06a5d51e9cb2","ssdeep":"192:p3sRQJ2AgHLNIyfi4NSyt3U2G2vX6toqZ7U+LBf:9sRa4k2G2vX6t1Y0R","tlshash":"16d10367d9008c0b2a3251baa5e7b609d113850b9c44ecadf7bd009e0fd4aeb95b361a","first_seen":"2026-08-15T22:31:33.928002Z","last_seen":"2026-08-22T03:22:38.73113Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.500Z","timestamp":1787368922500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.finacink.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51912\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:47 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223875\r\nlast-modified: Mon, 15 Sep 2025 16:30:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51912,"size_decoded":52725,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51912, version 1.0","md5":"fe5ed0fcd60f2d8214c86cbdd0c88b8b","sha1":"c9c1cbb6cead905fdf1e19faca071d09ca2b65f8","sha256":"a093b888254afd7deb8e37cccfd434e7d06ed47d22cfed9621631d80e1e81554","sha512":"854fc977679e9f512f776a16748f8b756f11c28ded7f1c32a4d57b8ef8728c536f6cceb948a491cb555e22110acda52f619d072dd02351eb7ce514cc8e63d0f1","ssdeep":"1536:iCrpjxLjTpmNyGGqE6TYPvW7PNhLzMEz0HiH:fpHmNhE/5E6a","tlshash":"e533f13905ae37e2c1a48334ddb82db45bb775277a39af9812e5005e82339762f7a305","first_seen":"2025-09-17T03:21:31.197712Z","last_seen":"2026-08-22T04:57:08.991313Z","times_seen":12861,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/seguros/SURA2.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.523Z","timestamp":1787368922523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/seguros/SURA2.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"SURA2.png\"\r\ncontent-type: image/png\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: \"74fa703209ac3ef6bf73a27e8961a2ff\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c54r9-1787368922526-b4559a89a548\r\ncontent-length: 179588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":179588,"size_decoded":180101,"mime_type":"image/png","magic":"PNG image data, 1247 x 344, 8-bit/color RGBA, non-interlaced","md5":"74fa703209ac3ef6bf73a27e8961a2ff","sha1":"f80d6e272d18519400d9b35a387edd591b5eb49d","sha256":"6734e59a70ba1f85e15fe6c590b3ad858850952074d5c199e9f3dc53ca736dbc","sha512":"897155e7152293398f913ebea6b7efa01250207cb2b6abd926a6d694fd6979988cd846d9c7bb815cbc33f9b99d29ed7c02457e1ded8518301174178d26872f1c","ssdeep":"3072:OUhV4q12tOSBsPoauN5Mlu/Tcnx8P4NLsY+QZD3pcbAPF0N0dCevpo/mjENa:7V4q9S+PoVN56K+e42Y/ZyEWNQ/m/0EA","tlshash":"990412d27226e84efd9e2138ce759fec3902057dd5591dded282a8b84442f6731f06c9","first_seen":"2026-03-17T00:16:36.868032Z","last_seen":"2026-08-22T03:22:38.738441Z","times_seen":35,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/assets/images/img_pantalla1/imgi_17_logo_vigilado.svg","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.545Z","timestamp":1787368922545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /assets/images/img_pantalla1/imgi_17_logo_vigilado.svg HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"imgi_17_logo_vigilado.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"3e1ce43e4d724166d470cf10f7cd4e33\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::df4f8-1787368922548-9ea075bf6b70\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21845,"size_decoded":8610,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e1ce43e4d724166d470cf10f7cd4e33","sha1":"76fac0935608f9dab6ea2d8e92ffbe84446e9205","sha256":"742d34da4182de7f212fedebdb3ca6d65fffda567e2012cd23ddcfed877c1901","sha512":"1662d04450a867534c88858c77023f8f07dd40b5c6a6d175884be70d9f15de262ba63521ef2d4dc4b94f9520b525e961633e4e1e114a0147793b1ffc3befd470","ssdeep":"384:jhNjLPomaUkQeoebK3qME938d8GqTmuOC3UENoBq6SmrfHpATol:vjbEhQp3E9ZPTmuOYNoBhfpKol","tlshash":"cda288fa5b98dae0d806a3fad61e01e5752b6cfdbb95cb80c3a02d48795147d8c0cdd1","first_seen":"2023-06-19T07:01:15Z","last_seen":"2026-08-22T03:22:38.739046Z","times_seen":109,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Rounded:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:01.967Z","timestamp":1787368921967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Rounded:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 03:22:02 GMT\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":1053,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba8257204ea2d953e1b30924c4319ce4","sha1":"2b43cf383d090582964d8e872529d493255d5fab","sha256":"a8af7ba78af7a7fa08a6783fc1d533d7fab3b50788ffa4d0958b9bfad9e94b9f","sha512":"14f7c6da26f05b343fa56d4e76ae28fd2c88d9acb147a9e1aabb21b767a22afaa4b04fa2741c8516c53bd3594231a3c3e38e333fda758a7b32e20eb94dd0edf2","ssdeep":"","tlshash":"69f078a87a12588db1610c63334e3f260d18482f290acafd6e510d4c8dfe9bb134530e","first_seen":"2026-08-14T06:11:37.184891Z","last_seen":"2026-08-22T03:22:38.739667Z","times_seen":19,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/797.4a2e4acc.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.346Z","timestamp":1787368922346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/js/797.4a2e4acc.chunk.js HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"797.4a2e4acc.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"46db28f12b9ba1ec4b5c73092b4fda30\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2td9n-1787368922350-cffdec280e4a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":61286,"size_decoded":21386,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (61163)","md5":"46db28f12b9ba1ec4b5c73092b4fda30","sha1":"4b29c8af3d215a648b29486de53cfb7c8b5da7a4","sha256":"0461ab122bd78d1173ef8ef1cbf58f0b2b242ef2130601eaeb5f3132363e9dca","sha512":"5f1318abe203f23b8655b5746c101203c275e25e5916d47d0f3217ce38faf5c6357cb8c88fb8fb40b7c21caad4fe7a4488c29306c0fc1b359d41db70b8b051a2","ssdeep":"768:N6lHB6MNfDgxIoer3IxXGghiOHVAOcKQ/Qdg2LW3y+tXc1PcUto1J:4f6MNzVrEXUOHqQY3y+TSc","tlshash":"b75384ca3a86b51257b202f5087f080bf33d5d65684e4d18f518e9dd7828c7e927bbb8","first_seen":"2026-03-17T00:16:36.857789Z","last_seen":"2026-08-22T03:22:38.740288Z","times_seen":38,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/static/js/68.db6409de.chunk.js","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.351Z","timestamp":1787368922351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /static/js/68.db6409de.chunk.js HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/personas\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 702897\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"68.db6409de.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"366140221171d2287c02dc787a9e021a\"\r\nlast-modified: Fri, 14 Aug 2026 00:07:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2td9n-1787368922354-9e71e109a92b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103842,"size_decoded":32640,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"366140221171d2287c02dc787a9e021a","sha1":"3ef923861c379cf74277cb4544c259da3e83051d","sha256":"a5b6fea4118f5de51618050f9c13c5be5c1dcb578560d8928b0c060048b3e86a","sha512":"593044d2c25e02cf633a591f9f7480b5af5b849c6e8ed12d80a809503263ff853b369c6364a97935f975a0ccecb3af1c2769a9116ad45ee9f669cc8536531fae","ssdeep":"1536:uQfGNpFOo6D9PK5rQN61pFn8t83BlxvHxre0e10XiA6wEya3dfpQBEbiwukjCK22:EpSD9PHN6Qv08QmbidK22","tlshash":"64a31989b121b1b68ae715de82b5c211b3b14c457408c8a4b1bd8d7b487dde903aeffd","first_seen":"2026-03-17T00:16:36.85877Z","last_seen":"2026-08-22T03:22:38.740915Z","times_seen":38,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.finacink.com/apple-touch-icon.png","fqdn":"www.finacink.com","domain":"finacink.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.finacink.com/static/media","date":"2026-08-22T03:22:02.381Z","timestamp":1787368922381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.finacink.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:44:42 GMT","end":"Thu, 12 Nov 2026 17:44:41 GMT"},"fingerprint":{"sha1":"F6:15:C3:AF:D6:14:C4:19:05:30:22:6E:34:CF:A0:E6:FF:4A:47:7C","sha256":"72:06:90:8B:D8:13:95:5A:21:FD:73:E8:AC:0A:0C:2B:31:0B:B0:25:CD:02:4C:5F:E0:79:C7:D5:72:A6:E9:86"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.finacink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.finacink.com/static/media\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 703145\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 22 Aug 2026 03:22:02 GMT\r\netag: W/\"969f1ed3ee2e586db0da33955ef0ecc2\"\r\nlast-modified: Fri, 14 Aug 2026 00:02:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bs2c7-1787368922384-d7bd12dc03a0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6689,"size_decoded":2687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3097)","md5":"969f1ed3ee2e586db0da33955ef0ecc2","sha1":"7cd40577aa105f61bcaa8569accc8b0cbe5cf0fa","sha256":"170164cbad1321c67fa3373735f2b0667e8dc0b4a498ac68fdc28b0f409c6625","sha512":"14bee321be39327811ce7e782cf29586983c9e7953fde4cc25793c443e2e754f50b70576bf43af6a4978ee57df3b90ece2094c7f039078ce952c06a5d51e9cb2","ssdeep":"192:p3sRQJ2AgHLNIyfi4NSyt3U2G2vX6toqZ7U+LBf:9sRa4k2G2vX6t1Y0R","tlshash":"16d10367d9008c0b2a3251baa5e7b609d113850b9c44ecadf7bd009e0fd4aeb95b361a","first_seen":"2026-08-15T22:31:33.928002Z","last_seen":"2026-08-22T03:22:38.73113Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"www.finacink.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"www.finacink.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bancolombia","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bancolombia phishing","tags":["bancolombia","financial","phishing"],"meta":null}]}}]}