{"report_id":"e337e3bd-39f1-4bc5-8366-3775417d5bfa","version":6,"status":"done","tags":[],"date":"2026-04-20T21:57:09Z","url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"title":"Autenticación Bancolombia","dom":{"size":6419,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (508)","md5":"c71f1b9033c187e29a111707e81f944c","sha1":"1a400903e6f17bde4f7c5ac347b00306122814f1","sha256":"b9802eeec406954633ee677d142efa77cf4cb7d267c66cf1ec4ae39f36096282","sha512":"6cfa4b6ee2bc6797d3ea1f3db2b6c412d21dc5f8f17bafef4d39d09e78a86e0ab23834824dceff4b71c00165d7afbb30b06ff09393fb25817cde54b7caafaa05","ssdeep":"192:loIGOPw5qgG4ehrY3eDBLil/+Mb6bhQlqJCJr94MU3ioadNj3:GIyOZI9kEl","tlshash":"f8d1d62321516442b693d2a839f3d7012175c603f64a9978bfbc06d8cfcdd8989b3be4","dom_hash":"domhash4ec4c4c5be9af194ae93dd78412d2cf0","first_seen":"2026-04-20T12:14:01.814072Z","last_seen":"2026-04-20T21:57:10.020311Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T21:57:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"mipago-acueducto.com","ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"domain_registered":"2026-04-09","domain_rank":0,"first_seen":"2026-04-20T12:13:58.11845Z","last_seen":"2026-04-20T12:13:58.11845Z","alert_count":28,"request_count":7,"received_data":33583,"sent_data":3707,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":18728,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":2,"received_data":98310,"sent_data":1122,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"38afdd876ec4752b6d9994cba0eb89ea","sha1":"4ac31fcc0931542a09049c1bd46ffb3492a3c1b3","sha256":"6ee6e3f50c7efa0b036c412ded1f5cac6de51b92cbd76c11124ac59fef329645","sha512":"a9a09f05d76783b3367838a5dfe129776bdd845edd3c09e932b9258bdfdc7cccf5e405b15438a953c8af0bbeb027c86220f7af4fb17a304c165c5c0fafa79713","ssdeep":"","tlshash":"8041f0b52453a4e00ae7a04d3ab793042076c2937a4bec967f6c43488f1ce0e8d27ae4","size":2008,"data":"","first_seen":"2026-04-20T12:14:01.822426Z","last_seen":"2026-04-20T21:57:10.028086Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T21:56:48.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mipagoacueducto.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 15:39:09 GMT","end":"Wed, 15 Jul 2026 15:39:08 GMT"},"fingerprint":{"sha1":"A3:18:98:E8:35:30:38:41:FC:6A:79:DE:4E:F6:87:7B:19:9D:D5:6B","sha256":"D8:99:BA:9B:37:68:70:1B:22:DB:38:D5:BA:6F:B7:C8:C1:BD:62:CB:88:4B:4A:3C:74:8F:E9:61:78:F0:7F:AF"}}},"request":{"raw":"GET /bancos/bancolombia_final/bancolombia_login.html HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Apr 2026 21:56:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Fri, 10 Apr 2026 23:43:16 GMT\r\nETag: \"191a-64f23b270c516-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2336\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (508)","md5":"aef0e9ad95f39f048e17a9dc7d288311","sha1":"9b634088ea77d5d30ee97d1ff0260e30dd434da8","sha256":"d09613b919ac178e5d1383066793b5e231a3769d1a13d940789cfd857a59a5e5","sha512":"ed9ce89b4cbd89afeca3e3f5fe42a95a81f495cd30d14e6a0025300685ad7f3805ac9463253eecd08991b1b6ff3a53fff1028020fd4f6272d264cbe0a17889d9","ssdeep":"192:NoIGOPw5qgG4ehrY3eDBLil/+Mb6bhQlqJCJy94MU3ioadNj7:eIyOZP9kEJ","tlshash":"74d1d52321516542b693d2a839f3d7012175c613f64a9978bfbc06d8cfcdd898ab3be4","first_seen":"2026-04-20T12:14:01.819046Z","last_seen":"2026-04-20T21:57:10.021761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mipago-acueducto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Apr 2026 21:56:49 GMT\r\ndate: Mon, 20 Apr 2026 21:56:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18042,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e4020d8a688b570ac502982085e9a77","sha1":"ed35f4a1150de851fac53b622aebb5955dca900b","sha256":"5e6cc8b928d64004caaab08fe27953386d0058c7062b0515fb2566d0d3c51c63","sha512":"7af77729d17e6ada2de05cfb9827f64e1f09a0389aa274ecfe4322e33891d96c3ca4f012eba1b25368e18f100653d2f382106f9dcd97f2aab5a98b7c3ddb57dc","ssdeep":"192:aCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIwV4pWzGSC77u2mIrqUnbqGIwq:Jt5qY4yf/qY45uOqY4P","tlshash":"80820a9000171850ab435de633ce7e34ee0f92666044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T12:52:38.383192Z","last_seen":"2026-08-13T21:44:11.432901Z","times_seen":6537,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":97,"dns":27,"connect":9,"send":0,"wait":21,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final/bancolombia_assets/svg/headerIconBancolombia.svg","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mipagoacueducto.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 15:39:09 GMT","end":"Wed, 15 Jul 2026 15:39:08 GMT"},"fingerprint":{"sha1":"A3:18:98:E8:35:30:38:41:FC:6A:79:DE:4E:F6:87:7B:19:9D:D5:6B","sha256":"D8:99:BA:9B:37:68:70:1B:22:DB:38:D5:BA:6F:B7:C8:C1:BD:62:CB:88:4B:4A:3C:74:8F:E9:61:78:F0:7F:AF"}}},"request":{"raw":"GET /bancos/bancolombia_final/bancolombia_assets/svg/headerIconBancolombia.svg HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Apr 2026 21:56:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Thu, 09 Apr 2026 21:09:00 GMT\r\nETag: \"1b3e-64f0d6ce06b27\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6974\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6974,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87039c3dea0ab78a360aa21e76ed1d39","sha1":"d52ce99f76c248786fc925e552f5a5b8a482824a","sha256":"ff3f4433a66a672e937b40aeedc29f8c0bb0dd51d1745fa3647c63774c5dc065","sha512":"5c3bb28987bc26776938713c4758022539f861a8f9ad7b254bb79aec835a07dfe03819d9316e6c4e29efb7b6f1e81a080b628230afeb86e005141b97adc24da0","ssdeep":"96:K1ns4X6cLjxfWHEP3ivSIYcqr92eou9i/jDTDjjOYUHE0ojvRCMN8fozW7uZk34a:0LjxJU9qrLTgH3gVDFOA","tlshash":"53e186d4276592d4f885f2fecf69c5f839331dea2901c864cba45c06ec4606d4849bdb","first_seen":"2025-04-22T13:30:58.834925Z","last_seen":"2026-08-12T08:58:07.187068Z","times_seen":21,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":117,"dns":0,"connect":100,"send":0,"wait":100,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mipago-acueducto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 17 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 272681\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-13T22:53:55.448314Z","times_seen":327665,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":177,"dns":1,"connect":28,"send":0,"wait":16,"receive":9,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final/bancolombia_assets/svg/Bancolombia.svg","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mipagoacueducto.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 15:39:09 GMT","end":"Wed, 15 Jul 2026 15:39:08 GMT"},"fingerprint":{"sha1":"A3:18:98:E8:35:30:38:41:FC:6A:79:DE:4E:F6:87:7B:19:9D:D5:6B","sha256":"D8:99:BA:9B:37:68:70:1B:22:DB:38:D5:BA:6F:B7:C8:C1:BD:62:CB:88:4B:4A:3C:74:8F:E9:61:78:F0:7F:AF"}}},"request":{"raw":"GET /bancos/bancolombia_final/bancolombia_assets/svg/Bancolombia.svg HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Apr 2026 21:56:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Thu, 09 Apr 2026 21:09:00 GMT\r\nETag: \"1b4f-64f0d6ce069c9\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6991\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df853040fd0cc39893e9733af3064ab5","sha1":"40088977ab2837dcd76ea1f8d7b3fba312367fb7","sha256":"031d534219625707f79bf22816788202a8ea4af69fc4bd06d0acfff5ba0dee76","sha512":"ef300d020ea8d97f5385041c8292b54f1c518041621d4eec35e9bf82db4236a54c31835fa9fdf8313e4592bf990453bd1511381130b3d59f2212e8acd0eeec06","ssdeep":"96:2SKJZZYG1+3kKOCpfy9kWsSV1RAaVACBnqWP1pjYw7GUEkiSNGm+sq0T5aGzbJZx:c0lq9VdV1kwLX3raG+e+ByZ","tlshash":"a0e163ed695084e0e403f7bcd93945e6305a3cfe3e61839882a5ee582d652bdcc48dc7","first_seen":"2023-04-05T03:16:24Z","last_seen":"2026-08-12T08:58:07.189936Z","times_seen":224,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final/bancolombia_assets/svg/trazo-desktop.svg","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mipagoacueducto.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 15:39:09 GMT","end":"Wed, 15 Jul 2026 15:39:08 GMT"},"fingerprint":{"sha1":"A3:18:98:E8:35:30:38:41:FC:6A:79:DE:4E:F6:87:7B:19:9D:D5:6B","sha256":"D8:99:BA:9B:37:68:70:1B:22:DB:38:D5:BA:6F:B7:C8:C1:BD:62:CB:88:4B:4A:3C:74:8F:E9:61:78:F0:7F:AF"}}},"request":{"raw":"GET /bancos/bancolombia_final/bancolombia_assets/svg/trazo-desktop.svg HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Apr 2026 21:56:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Thu, 09 Apr 2026 21:09:00 GMT\r\nETag: \"2b30-64f0d6ce06d89\"\r\nAccept-Ranges: bytes\r\nContent-Length: 11056\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1024c19320299b0498c2fca41fa68030","sha1":"6e7ec81a5b7295395350736068c72847aca3f895","sha256":"a6795030e2b964bcd8176eeb2c1096198deb5eacb8e15642c8257497d52d7894","sha512":"e5776d6a05ef9eec8a1583479da9fa68a517fd3b0b14e600f80232118535dd7eb405ba61d56fce0ab9a5e4e6c654da75f0aae7325366e501665bd80d57d91d15","ssdeep":"192:gxH5h+ZaH7tKb6rin0V7HzIbTX0RZK5lm4fGwHzG9ET5PKxlLHs74conR:gR5l7Soi0V7EX0Rq9fG2G9UPK2foR","tlshash":"863283dd37192dc0961da3f7f9d15096bd3321ff1a41c8afc6467ea098231ac5a6a8c3","first_seen":"2025-03-05T15:55:40.913791Z","last_seen":"2026-08-12T08:58:07.19994Z","times_seen":40,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mipago-acueducto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 17 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 272681\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-13T22:53:55.448314Z","times_seen":327665,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":117,"dns":1,"connect":15,"send":0,"wait":16,"receive":21,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mipago-acueducto.com/favicon.ico","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html","date":"2026-04-20T21:56:49.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mipagoacueducto.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 15:39:09 GMT","end":"Wed, 15 Jul 2026 15:39:08 GMT"},"fingerprint":{"sha1":"A3:18:98:E8:35:30:38:41:FC:6A:79:DE:4E:F6:87:7B:19:9D:D5:6B","sha256":"D8:99:BA:9B:37:68:70:1B:22:DB:38:D5:BA:6F:B7:C8:C1:BD:62:CB:88:4B:4A:3C:74:8F:E9:61:78:F0:7F:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mipago-acueducto.com/bancos/bancolombia_final/bancolombia_login.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 20 Apr 2026 21:56:49 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nContent-Length: 283\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"ca26b35ceb421714bb0908d1b6ea445a","sha1":"eaed227bf1010093517e1bd190e5d004f77ce271","sha256":"78708a1fffdb835658b4aa4b4f4d1ef3e6db6b6e31682ea8ad09e41e2d1265a7","sha512":"83fa2fda310d0f75668b2a3f579c583edf1739ccbbed28f357824e8e4b995f005b5312942664a5d6c9885d9ffb4597e8f757178fbc948d3fcd88e0ace33bbe09","ssdeep":"","tlshash":"e4d0e79e400373570811145035c111d1224d13f56436c5d42c85d04301d813dcdca68d","first_seen":"2026-04-20T21:57:10.026422Z","last_seen":"2026-04-20T21:57:10.026422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T21:56:47.042Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /bancos/bancolombia_final HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T22:51:57.013279Z","times_seen":17877309,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":32,"connect":99,"send":0,"wait":0,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mipago-acueducto.com/bancos/bancolombia_final","fqdn":"mipago-acueducto.com","domain":"mipago-acueducto.com","tld":"com"},"ip":{"addr":"4.248.185.48","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T21:56:48.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mipagoacueducto.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 15:39:09 GMT","end":"Wed, 15 Jul 2026 15:39:08 GMT"},"fingerprint":{"sha1":"A3:18:98:E8:35:30:38:41:FC:6A:79:DE:4E:F6:87:7B:19:9D:D5:6B","sha256":"D8:99:BA:9B:37:68:70:1B:22:DB:38:D5:BA:6F:B7:C8:C1:BD:62:CB:88:4B:4A:3C:74:8F:E9:61:78:F0:7F:AF"}}},"request":{"raw":"GET /bancos/bancolombia_final HTTP/1.1\r\nHost: mipago-acueducto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 20 Apr 2026 21:56:48 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLocation: https://mipago-acueducto.com/bancos/bancolombia_final/\r\nContent-Length: 349\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T22:51:57.013279Z","times_seen":17877309,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":209,"dns":1,"connect":98,"send":0,"wait":98,"receive":9,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"mipago-acueducto.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"mipago-acueducto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}