{"report_id":"f5a983eb-9f60-42ad-bdd0-c3e72758967a","version":0,"status":"done","tags":[],"date":"2026-09-19T06:44:35Z","url":{"schema":"http","addr":"soporte.offices-support.com/form/a8247b3dc61a46a6a54aa1b5713bda72/a5a87edd5408d4d4aa07fe6a4e23d3a2f","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"http","addr":"soporte.offices-support.com/Admin/Home/Index","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"title":"Phishing Simulation Notice","dom":{"size":1977,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"672d24fc2e3d5752e583f01697cc3e3f","sha1":"62508680949f9f4a04be7998364fa9ab6aa4300f","sha256":"b7ae4f5b64eed7936870f06c40f85922ef2db522cb136028c794a08ecf6cae3f","sha512":"ec306db6177ab947a52ea96e5fff6204db1bb64087683b0e50133ca182c84a0fbe7d3ca5f92ff680d162a69bb7fc7071c1977bf378e947d5b03648da4825e816","ssdeep":"","tlshash":"3c41111682e3410a280381a967f3b3592e9a5447e70ac9e4bb9e73f8cf59580a57774c","dom_hash":"domhashb912d2c39b728165dc1de542c0ab8f37","first_seen":"2026-01-21T19:02:29.240239Z","last_seen":"2026-09-19T08:05:31.402693Z","times_seen":1635,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"soporte.offices-support.com/form/a8247b3dc61a46a6a54aa1b5713bda72/a5a87edd5408d4d4aa07fe6a4e23d3a2f","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T06:44:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"soporte.offices-support.com","ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2023-07-07","domain_rank":0,"first_seen":"2026-09-18T00:39:32.793993Z","last_seen":"2026-09-18T00:39:32.793993Z","alert_count":15,"request_count":5,"received_data":193546,"sent_data":2402,"comment":"","tags":null,"fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":1,"received_data":43949,"sent_data":580,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":11952,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"soporte.offices-support.com/Images/break.png","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://soporte.offices-support.com/Admin/Home/Index","date":"2026-09-19T06:44:00.553Z","timestamp":1789800240553,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Images/break.png HTTP/1.1\r\nHost: soporte.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://soporte.offices-support.com/Admin/Home/Index\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 186263\r\nContent-Type: image/png\r\nDate: Sat, 19 Sep 2026 06:44:00 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nETag: \"aa5642f5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:36 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":186263,"size_decoded":187455,"mime_type":"image/png","magic":"PNG image data, 1185 x 291, 8-bit/color RGBA, non-interlaced","md5":"6d4ee5ae88070fcf017cf84fe85ee164","sha1":"e170bab2884211e0977a9fcc6854b41b8ef20afa","sha256":"512b0f3173892724eb55d10c288a2601af3dd0ca40036aff35b89129f3029704","sha512":"8ecd50613c88e1259da6ec32185d416b2c3a163838f332daa0073c047c4e705532377c7142ca7345fe890b23ddc19473feecf32ddfe133f0f2a086ee9e8725d1","ssdeep":"3072:PQyEeAYvwyuNChqfKwkXoVwTUxxgZMr3PIVFgWv7651XVXqq06:4yEzG8h+Qgo3PkuWAldV","tlshash":"740413e5c7876137c49527b0d063fb2d08ea169264b8e4b2c9857d219e7fce1ed12e0c","first_seen":"2025-11-22T09:37:17.024194Z","last_seen":"2026-09-19T08:05:31.405548Z","times_seen":1673,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":30,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://soporte.offices-support.com/Admin/Home/Index","date":"2026-09-19T06:44:00.566Z","timestamp":1789800240566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://soporte.offices-support.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 159982\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-19T12:42:13.636654Z","times_seen":299932,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"soporte.offices-support.com/form/a8247b3dc61a46a6a54aa1b5713bda72/a5a87edd5408d4d4aa07fe6a4e23d3a2f","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T06:43:57.716Z","timestamp":1789800237716,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /form/a8247b3dc61a46a6a54aa1b5713bda72/a5a87edd5408d4d4aa07fe6a4e23d3a2f HTTP/1.1\r\nHost: soporte.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"soporte.offices-support.com/form/a8247b3dc61a46a6a54aa1b5713bda72/a5a87edd5408d4d4aa07fe6a4e23d3a2f","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T06:44:00.071Z","timestamp":1789800240071,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /form/a8247b3dc61a46a6a54aa1b5713bda72/a5a87edd5408d4d4aa07fe6a4e23d3a2f HTTP/1.1\r\nHost: soporte.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Length: 134\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 19 Sep 2026 06:43:59 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nLocation: /Admin/Home/Index\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":97,"connect":31,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"soporte.offices-support.com/Admin/Home/Index","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T06:44:00.236Z","timestamp":1789800240236,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Admin/Home/Index HTTP/1.1\r\nHost: soporte.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1043\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 19 Sep 2026 06:43:59 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2056,"size_decoded":2313,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7619bf871bb2e643913702a0e75f096f","sha1":"fe4289f7e72af31155482838e5cc33424e15288e","sha256":"c66715b2e182813f8bd94a14a6a50cce8b7ce34844389765c81ccd0a29aedb2c","sha512":"3b7d79737cf05a1d1348ce64762b62a6d67012c97db733bc7c3d89b1e56d64fcccb4240b1a76b84457c1c8d081b6b5703226b589bc16c274c908400450fc1aeb","ssdeep":"","tlshash":"dc410625c2c0540a243252b997b2b359ef5b1047e30652e4b7ef73b79f754405577b8c","first_seen":"2026-01-21T19:02:29.246112Z","last_seen":"2026-09-19T08:05:31.40357Z","times_seen":1637,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://soporte.offices-support.com/Admin/Home/Index","date":"2026-09-19T06:44:00.365Z","timestamp":1789800240365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://soporte.offices-support.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Sep 2026 06:44:00 GMT\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11268,"size_decoded":2352,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0480a7b5f548d87b4900258575726b59","sha1":"db195efb64363a35a75bf835ed23cef2f8e211a6","sha256":"89796185ab1f9d2ea2acff84d1f6fa64f5f902130cd7157268bfd2389157e26b","sha512":"25b9f18ef84686f84d608bc54ea9dd03d2caf50f41b225ed37a5407283088bf151ac9b12304cef90ec83936343a5ff7d381af4d7b27cee64b459f960bfa6a4d1","ssdeep":"192:yuNJGCuNJbuNJT+uNJMcuNJPq1uNJebqGIwV4nuNJ1uNJ+AuNJ0N9fKN9DN9MN9n:ykcCkhkx+kRkg1kUqY4nkbk3kk9fw958","tlshash":"d6321e91040b50449b838ce223cebe35fe1f92507141d1b9bbfc9b6baddbca2526835c","first_seen":"2026-02-19T23:58:38.600237Z","last_seen":"2026-09-19T08:05:31.404275Z","times_seen":6463,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"soporte.offices-support.com/favicon.ico","fqdn":"soporte.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://soporte.offices-support.com/Admin/Home/Index","date":"2026-09-19T06:44:00.549Z","timestamp":1789800240549,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: soporte.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://soporte.offices-support.com/Admin/Home/Index\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 318\r\nContent-Type: image/x-icon\r\nDate: Sat, 19 Sep 2026 06:44:00 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nETag: \"85247d2f5ff4dc1:0\"\r\nLast-Modified: Thu, 04 Jun 2026 20:17:37 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":318,"size_decoded":1511,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors","md5":"11fb4799192313dd5474a343d9cc0a17","sha1":"85f4d0e62f74e23ef6d4682073ec75e194dc3a54","sha256":"467f3d85cdf7bf5b57cb7eb270fd99c628bdc8d688b2132cc203229e311eb609","sha512":"62f412a33484dc33b8acc2423d7a36a2ce69490b792f10a754c48ff2e7b9a52be289295cb2e8b726e45741c79cd14f5ee0fbc0363501340a13b73c94bdc7f666","ssdeep":"","tlshash":"7ae092223105e421c0480330c0c7d6f231848d0240ea760b00023c8b38125c8dc37aa2","first_seen":"2023-04-26T12:55:01Z","last_seen":"2026-09-19T08:05:31.404918Z","times_seen":2959,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"soporte.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}