{"report_id":"bd2a9122-91dc-4eca-98fc-1a703b74b40b","version":6,"status":"done","tags":[],"date":"2026-03-06T09:46:26Z","url":{"schema":"http","addr":"tusbeneficioscmr.com","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tusbeneficioscmr.com/","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"title":"Banco Falabella","dom":{"size":19873,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"69210bbdecca630dd3df0ad5f1ac491c","sha1":"b43f03ee2c8931ff66c06dea228457233566b612","sha256":"a654f4f3bdf1727a0d931bebcbdd72668f960c16af05fd3c8d7e343087658e54","sha512":"d46cc28b0ed88e6a6fa476b2741adb5cc6facdece45deaa4e212e43d19eb9e342681c227d60280f520394697a6b60f457413cf13209d488f12811a14259aa73b","ssdeep":"384:UrC2Ba+WWkLoy8HBgGEIISXNc04d4EXazyn:X2B1BghIIleun","tlshash":"0a92628a5eeb0523b613c4687bb75b062251d003c606dd643edc5acc8fcbb86d9a27cd","dom_hash":"domhash22799a0fee57ae67af88f0bc5260e8d3","first_seen":"2026-03-06T09:46:30.088924Z","last_seen":"2026-03-06T11:30:37.049537Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tusbeneficioscmr.com","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T09:46:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tusbeneficioscmr.com","ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-06T09:46:26.690661Z","last_seen":"2026-03-06T09:46:26.690661Z","alert_count":60,"request_count":10,"received_data":949198,"sent_data":4640,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tusbeneficioscmr.com/","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"83ff6459e8070414ee4552de755f729d","sha1":"ad4d248f03a6e95009af8d4fc79365be88886090","sha256":"4ca5ea5f160e80ed5f486a6125770b19626869ec4bef812dabfdf3cb700796db","sha512":"65001d283408c0d18d29f7ba82d0059055aa5d04b203e3b3362984db8a7243868f21b9e3056fc839902547422dc1ce5ea5f23a6d010b76a4033efed91de087ac","ssdeep":"","tlshash":"9921892b3fb60d740f67b0ba176b830535715163b540ca8c7c6c07805f62d6282baba9","size":1186,"data":"","first_seen":"2026-03-06T09:46:30.108056Z","last_seen":"2026-03-06T11:30:37.062985Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/lupa.png","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/lupa.png HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 05 Mar 2026 06:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3678\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"dca6747a804517b3b061d4b0ed5c4e2b","sha1":"ffbe427eb3b8b4b31718d012aefe3df479763cbf","sha256":"d308a5f90432878fd2961b636b133368f1e4da0e0646f7f92aec599be04ad826","sha512":"17a49edda10970fd8877c1d4197b88fc067a7e3761289bcd06a487d44e0853656a17cec7e4e46bdb01a3766feada46090b1a5287af1667b3dc0953beddc9f8e6","ssdeep":"","tlshash":"27715cc526c127fac506be73841a9d040ab00639aed747b8d77ee51f62f8613cd06743","first_seen":"2026-03-06T09:46:30.090787Z","last_seen":"2026-03-10T10:25:37.118703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/image2.png","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/image2.png HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 05 Mar 2026 06:58:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 126501\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":126501,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 961x1280, components 3","md5":"d67c1ee1127413b914c00a3504e8964f","sha1":"bffa4432ce6a5836a1a6fd23e3473888f5b660fa","sha256":"082da5ecc1c74f743fcd8b0676fd4bf65f89eed271deb69468013d23b035e986","sha512":"ca8eb5edf9801c1b654d44f122c8fea2346fe73841d964330893ac346df5de4e299aede81694bd503e88adeb906cb2d0fab47c12ad137e5ca82a8a3b9d6fa1ef","ssdeep":"3072:MSTHePyXv+HQt4Jqd71iE1Ihs4+6QlJ4jnpYrVjgq+GRb7s:Msf+HQt4Y5iEPYYCnpx9AI","tlshash":"aec3023f71baf9f2e915313095e077352f8b62785627722a5520c4271eaea085f0fa7c","first_seen":"2026-03-06T09:46:30.092646Z","last_seen":"2026-03-10T10:25:37.086632Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1190,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/fonts/pfbeausanspro-regular-webfont.woff2","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /fonts/pfbeausanspro-regular-webfont.woff2 HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 13 Jan 2026 16:18:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11816\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":11816,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-08-14T04:24:37.234142Z","times_seen":16262,"resource_available":true,"data":null}},"time_used":1390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1389,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/fonts/pfbeausanspro-regular-webfont.woff","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:02.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /fonts/pfbeausanspro-regular-webfont.woff HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Tue, 13 Jan 2026 16:18:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11816\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ndate: Fri, 06 Mar 2026 09:46:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":11816,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (358)","md5":"a8063bd37d3c8fb3176a6bf140558a4d","sha1":"e32cf4b407db3d3773ded13ff64b70fdbad7735f","sha256":"bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482","sha512":"82d749f6b17b21587fb345ca196a2aa83eca80ad66ed9c1ab88b36709bed14175d53afefe9acc0dafc4fad78ffb8df155193a6829bc857ad6d68b1c84af7b854","ssdeep":"192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s","tlshash":"bd32940bab4c063b1312459a7458639a370fc87fe2661bb474bfc06867d16a649f23dc","first_seen":"2023-04-05T03:58:47Z","last_seen":"2026-08-14T04:24:37.234142Z","times_seen":16262,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T09:45:59.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 05 Mar 2026 19:14:02 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6549\r\ncontent-type: text/html\r\ndate: Fri, 06 Mar 2026 09:46:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}],"data":{"size":19894,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"66c60b5001100aa8da3f5f54cc9275fd","sha1":"2378e0bd9140bd82b88bb8f84fb96f04691e2a5d","sha256":"9b019224d6de26f7a427faba180625cfec3cb9b2dec2b057533c851b6c2c3ed0","sha512":"b109e1271480898806c00a3b78a5c2c477adf56813b3400816b7f92038dae752da1d5706759bf3b43d425a45731a018d3c437db9bb8b6ea04ca3c58258f2b25e","ssdeep":"384:iJ2Ba+WWkLoy8HBgGeIISXNc04i4bXrzyV:W2B1BgzIIl5OV","tlshash":"4892638a5eeb0523b613d4687bb75b062351d003c606dd643edc5a8c8fcbb86d9a27cd","first_seen":"2026-03-06T09:46:30.095275Z","last_seen":"2026-03-06T11:30:37.05375Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":636,"dns":162,"connect":233,"send":0,"wait":237,"receive":1,"ssl":237},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/image.png","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/image.png HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 18 Sep 2024 21:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 741235\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":741235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1897 x 695, 8-bit/color RGBA, non-interlaced","md5":"03a3d0b433c54b4f0fe7a8924c636995","sha1":"c995d60fa1e3eb99856f78a7e42dd36b8051e020","sha256":"10e7db12421b236ffd328bfc7f56bed69073bb7291269dd5f9261ee12d0e44d1","sha512":"cfa3b480a731e5e9a139cb7e558116f2d86b0134ab332781ab7072b604fafbc9e2a3e11fd94376f480ed605189b075681688aab7f0a2a6d6cc82f66f35a97ef5","ssdeep":"12288:o5JdfgHPp/qBbkdYQmpq4dJgSKNDXKPYRLIBAJauKv8qAd3qg9HYRkdhW5K5ub:oJ4/qBbkdYQB2JgSSKPYOBA9Kv8jd6c4","tlshash":"03f42391de2ed0919f5bbab9d1363d17b71e009472e2ad65cc80b2dda10ef3fb051a21","first_seen":"2026-03-06T09:46:30.096994Z","last_seen":"2026-03-06T10:20:53.991431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":723,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/cerrar.png","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/cerrar.png HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 05 Mar 2026 06:53:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4826\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2897be7eb33eb5e4e5e33e6db999fc5b","sha1":"3d4b7d56eb42f425d0c64a8c2acbcd7ae998dcee","sha256":"a3a6d4e2ae2875a5cdeaeda1ab443c824c0d6170868c86f885a6898885eac32e","sha512":"2b2252f9d658c01862225aacdd2a904a5aac95247607c836b4758739a16ab25533fe2ab37017b591baa7d8c7ef2afd2c475eb574bdfeefb64637137135cf3093","ssdeep":"96:kITyYp3+BPAQEKgnP/e+avAKXNBP8WqFWcn4ksKpjS5cnBSDhG6:k/Yp31QhgnL4NBPnqFnn4kzpjBSlR","tlshash":"47a14b25d1a86329fc9066375b70f903c1b501d77b15abafa2fdad98ca44b40b15ce4c","first_seen":"2026-03-06T09:46:30.098956Z","last_seen":"2026-03-10T10:25:37.084869Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":723,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/logo.png","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:01.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 18 Sep 2024 21:56:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2411\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"59728b8f7e489af6e043da686393687c","sha1":"251c099e6e551797e7c4896494f84521a5955a7e","sha256":"b71c1199f6f3c5cf48eb26f5335eea3c3a8481c1bc51d22ab267a32d5c4abd74","sha512":"06d5bf1e062e52f06802dfed83c02c1428cd8f3f6ad658791dbf5e0ceb5bee3a36307149e0cc3e8c9d9c3d054a9dee5ed26481ec2fd6d561f40832f1215f0ce4","ssdeep":"","tlshash":"81414c73a06be834435ac16ec79818308ce26f7e12ba640e994303245159b602c0cf33","first_seen":"2026-03-06T09:46:30.101143Z","last_seen":"2026-03-06T10:20:53.989877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/logo.svg","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 17 Sep 2024 14:36:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20065\r\ncontent-type: image/svg+xml\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20065,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d485a4a34f88c7ff62080eed2b80797","sha1":"cf8506aaa69610ed0568609b3bcc1ee208c53618","sha256":"d77ef526d3abbceca8b1ff25bcab9bd2491c25ce4060c6b350bd6c933e436f1f","sha512":"81634d00c949b9304b0fb5f9f7549eb4b6fa0c4cfded9ab94180b7da4234454613232b5a4bfec6981ccbcbec756df236b98670aff9798705a924bbc43314a31b","ssdeep":"384:5cxT4mjs4d4teehyANcHsrreQF2YOnRfWAZ57//oFlp96:5cx0mjdOH4C+sr6QF2YORxZ5EL96","tlshash":"cc92c7c9776693fcf146f7f8c93659a8be9a6cf83b819979c3a01c42982205d9941cc3","first_seen":"2023-09-18T18:33:32Z","last_seen":"2026-07-26T03:08:16.282969Z","times_seen":80,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tusbeneficioscmr.com/img/signo.png","fqdn":"tusbeneficioscmr.com","domain":"tusbeneficioscmr.com","tld":"com"},"ip":{"addr":"69.6.225.181","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tusbeneficioscmr.com/","date":"2026-03-06T09:46:00.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tusbeneficioscmr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 21:40:01 GMT","end":"Tue, 02 Jun 2026 21:40:00 GMT"},"fingerprint":{"sha1":"EF:66:54:10:5A:3F:38:3E:8A:A9:4C:46:22:E0:BB:E9:1D:AA:44:16","sha256":"8D:99:4C:85:FD:3B:40:D1:F1:B7:E8:50:02:49:01:4E:E4:E4:00:F5:A7:A3:A7:62:BD:FD:0E:52:4F:B3:59:18"}}},"request":{"raw":"GET /img/signo.png HTTP/1.1\r\nHost: tusbeneficioscmr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tusbeneficioscmr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 05 Mar 2026 06:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4788\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 09:46:01 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1daa02a0b393f8f9aa9e9e5580f37aa0","sha1":"87d18df81257b3536541e39d7b91efa5ec82ee04","sha256":"63287902e4dd23a0a1a412e222f5d3276143688e6f642fc8f7d5076c3a4967c1","sha512":"6a77e1e3fee5b0c99706d921b9e15b93f6b53080b6433ddfd3f84d154c7bfde1f3f30b914c88548b6444b931fac4680cfee693b9597a8bfb11610732c41ed401","ssdeep":"96:Iv1KI90grA7ZIjyQx4A+IQhQ4h6gbNhsBVoN5jRQe1HEm8PkXWyMC1c+8y:uKI9zAlIjWhQ4hyeN5jRQe1HEq314y","tlshash":"2ca14bafea8849c2f937f8b3c0754b246f3c156e4f4966f14071990da1ece88ed88419","first_seen":"2026-03-06T09:46:30.106214Z","last_seen":"2026-03-10T10:25:37.083754Z","times_seen":3,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"tusbeneficioscmr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"tusbeneficioscmr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}