{"report_id":"09397e9b-cd0a-4d09-97c3-a0c423e4514c","version":0,"status":"done","tags":[],"date":"2026-09-12T14:22:47Z","url":{"schema":"http","addr":"infocitypinamar.com/pass/login.php","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":0,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"final":{"url":{"schema":"https","addr":"infocitypinamar.com/pass/login.php","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"title":"swisspass","dom":{"size":2406,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1052)","md5":"0bae5cbf9676d0cba8480f7172efc707","sha1":"e82ba77fa02418faad3782c4e8580bc43d182109","sha256":"fc27c1832f66c2716509b0efaee85726c30bae90eaec077cfcdd31a0622f719a","sha512":"96dfa3602b7cea17e9c77b1c4328f90ec9229cd02b824eb5f5a6e73504ffc6846d94619c9d95ce3d8b6f172203dd24ffc0ba2740cd1c5e9f30cde966015c003a","ssdeep":"","tlshash":"2641b7122cf6c5670481889899d25e5d7fc89713c30b8904b3ce4eea8faae83cdc3518","dom_hash":"domhashc2533cac1c680c5ecb39a318cca66099","first_seen":"2026-09-12T14:22:51.399793Z","last_seen":"2026-09-12T14:22:51.399793Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"infocitypinamar.com/pass/login.php","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":0,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T14:22:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"infocitypinamar.com","ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"domain_registered":"2013-10-12","domain_rank":0,"first_seen":"2026-09-12T00:52:30.445694Z","last_seen":"2026-09-12T00:52:30.445694Z","alert_count":18,"request_count":9,"received_data":844511,"sent_data":5665,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SPIP:4.4.21","description":"SPIP is a content management system written in PHP that uses one or more databases like SQL, SQLite or PostgreSQL.","website":"https://www.spip.net","common_platform_enumeration":"cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*","icon":"spip.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"telegrambotcheck.duckdns.org","ip":{"addr":"102.165.14.4","port":5001,"asn":397423,"as":"TIER-NET","country":"United States","country_code":"US"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2024-05-03T19:21:27Z","last_seen":"2026-09-07T08:27:40.809627Z","alert_count":8,"request_count":2,"received_data":299,"sent_data":1166,"comment":"","tags":null,"fingerprints":[{"name":"TwistedWeb:26.4.0","description":"","website":"https://twistedmatrix.com/trac/wiki/TwistedWeb","common_platform_enumeration":"","icon":"TwistedWeb.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"infocitypinamar.com/pass/login.php","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"introduction_type":"Function","is_inline":false,"md5":"f957c88e86e92c7bf2bb53eb18f0971f","sha1":"b7d66c72b9a91ecd028c4d25bc7cbf31806352bf","sha256":"12cf38da03df33d1540f05e342eb443ff92740de80ecc40ee6ec8e7956277e7e","sha512":"2f47fe0d308e5c43d3ce9daa5fa7b509ba9de71c3b92556593760c471ccf03cdb90d916c8de477fbdad29c597c0608a8357a0c068c67b6e3bd0a5ae0fc7fa96c","ssdeep":"","tlshash":"a4119c67175919dd8ae268c30c7f29a30ca9ab210e88d4e48652fc43a5e5f8051faf30","size":916,"data":"","first_seen":"2024-05-16T02:47:16Z","last_seen":"2026-09-12T14:22:51.421436Z","times_seen":1657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/login.php","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"introduction_type":"Function","is_inline":false,"md5":"aff49177ae9c77724783cfb192546baa","sha1":"cc7e7afc26962ac345ecb42840891c68754c6722","sha256":"30ed5f646abec0aaec9d0818bf2c05f98081420cd99fcbab3b8653f2542348b9","sha512":"8b3d9123c086fb4f2d9cc5f70d974783652ff3e2189974ae8ffc621b83bc99504a41626ea913c72212f11c7c23669ddd0612b7c0870fc64fc973fce76c25fac7","ssdeep":"","tlshash":"014133092a7c776853d39313205f8c66d2642e20a64fdcb8c553bd902a7121a7b6bcdb","size":1983,"data":"","first_seen":"2024-05-16T02:47:16Z","last_seen":"2026-09-12T14:22:51.422328Z","times_seen":1657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/cdn/jq.js","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4423f9191a4d5dfba9771b085d723277","sha1":"a2c9877743f7dbc922bc2ac0bd369994499c4839","sha256":"9c1e0a6765034b0a425e748b953b2bab9979dbbf0d3d9968a9bea7bc21aafc03","sha512":"3763d3b36f8b6e09e66a0ca0f9ac5231c16c704ba73f8cec209ade086a6572dd5ae7be448249214b021c79125f30c7c35fb5f9eb5c02c80f3cfdb4f5ba49c140","ssdeep":"3072:ymE/2PAu/WVKOfvNA2CTEvs7+hgZrPRu5JZ6OcL/jEKTgrm7:fEOou/WVZ1N6E/gJ5u5z6OeYygS","tlshash":"ac142addb2c6706347a730b900bf640bf2362899684d8410f169d8e9bc75a4e927bf7d","size":193260,"data":"","first_seen":"2026-01-31T08:09:43.484893Z","last_seen":"2026-09-12T14:22:51.40396Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/jquery.js","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee5b5c7a4fbe9d3e639b2111b16aae47","sha1":"c3df065c7fcf8b39e719a5621c4ff98f5ef6f0ae","sha256":"b9394559ccbb48744c28fa1937180399438e623af7539e07d19e0918489ad17f","sha512":"a8dd851b278c7bd4bbe1116569d17cda62abb92277ebfb85ac77ba4016852ef65faa5eafe60170df02925317eab376092708f0ee89418a436186ac560314bc3a","ssdeep":"3072:IM5LwijORnUkXCvM5LwijORnUkXCvM5LwijO9tEnUkXCvM5LwijORnUkXCs:REiEpCUEiEpCUEiyEpCUEiEpCs","tlshash":"e17483cdf6d2b0a257e37674403f510bf23bae54b45a8090e266e1d16cbd94a807bf39","size":369173,"data":"","first_seen":"2024-09-20T21:30:31.302732Z","last_seen":"2026-09-12T14:22:51.415157Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error:NetworkError when attempting to fetch resource.","filename":"https://infocitypinamar.com/pass/res/jquery.js line 4 \u003e Function","line_number":3,"column_number":1735}]},"http":[{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/cdn/jq.js","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:16.751Z","timestamp":1789222936751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/cdn/jq.js HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/login.php\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 10 Sep 2026 13:42:48 GMT\r\netag: W/\"2f2ec-65b2124bae6bb\"\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193260,"size_decoded":40352,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61138)","md5":"4423f9191a4d5dfba9771b085d723277","sha1":"a2c9877743f7dbc922bc2ac0bd369994499c4839","sha256":"9c1e0a6765034b0a425e748b953b2bab9979dbbf0d3d9968a9bea7bc21aafc03","sha512":"3763d3b36f8b6e09e66a0ca0f9ac5231c16c704ba73f8cec209ade086a6572dd5ae7be448249214b021c79125f30c7c35fb5f9eb5c02c80f3cfdb4f5ba49c140","ssdeep":"3072:ymE/2PAu/WVKOfvNA2CTEvs7+hgZrPRu5JZ6OcL/jEKTgrm7:fEOou/WVZ1N6E/gJ5u5z6OeYygS","tlshash":"ac142addb2c6706347a730b900bf640bf2362899684d8410f169d8e9bc75a4e927bf7d","first_seen":"2026-01-31T08:09:43.484893Z","last_seen":"2026-09-12T14:22:51.40396Z","times_seen":56,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/img/logo.png","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:16.758Z","timestamp":1789222936758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/img/logo.png HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/login.php\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4835\r\nlast-modified: Thu, 10 Sep 2026 13:42:51 GMT\r\netag: \"12e3-65b2124ea683b\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 12 Sep 2026 15:22:16 GMT\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4835,"size_decoded":5239,"mime_type":"image/png","magic":"PNG image data, 280 x 90, 8-bit/color RGBA, non-interlaced","md5":"c7c06f02b48701d6fe5652287626c932","sha1":"a06fd158d6f201e5576d8914200e4f043f23a154","sha256":"fabe18d8a0202a701c1e94c77184b2628bf64598c04eae51dd4fdecc56ef3978","sha512":"0e3c0e9ce91f9f16789825cfd6d56bb7532be9f1407db47aeafec47b2a0712456b4fedf9e825c5df45040da44db2cc55519a3268cc4b4208340c3c477938861b","ssdeep":"96:+GKOGKOGKO+Qv+BCKjjbK2Y9KX1boy7bckFlltFkYyR2ABfESQms0LgmD6g+jCzU:K66FJjjl7EyHxltFoVpT0msjCx66M","tlshash":"cba17ec827e4f45c52dfa6f4127660fc87bb8853088738e70cd56a0a794e5fbc900799","first_seen":"2025-06-23T12:15:46.630138Z","last_seen":"2026-09-12T14:22:51.408656Z","times_seen":88,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegrambotcheck.duckdns.org:5001/receive_token?referrer=loco","fqdn":"telegrambotcheck.duckdns.org","domain":"telegrambotcheck.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"102.165.14.4","port":5001,"asn":397423,"as":"TIER-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:17.452Z","timestamp":1789222937452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegrambotcheck.duckdns.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 04:40:58 GMT","end":"Sun, 29 Nov 2026 04:40:57 GMT"},"fingerprint":{"sha1":"77:6E:B3:60:26:D6:99:77:6D:90:5A:AE:EA:E2:5B:A3:A3:EF:99:68","sha256":"3A:5D:9C:AC:31:A3:63:8F:EE:1B:A9:BE:CC:09:D5:E9:99:08:E0:8D:0D:98:51:46:80:99:16:2A:E7:9D:1D:C4"}}},"request":{"raw":"POST /receive_token?referrer=loco HTTP/1.1\r\nHost: telegrambotcheck.duckdns.org:5001\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://infocitypinamar.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 86\r\nOrigin: https://infocitypinamar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: TwistedWeb/26.4.0\r\nDate: Sat, 12 Sep 2026 14:22:17 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"TwistedWeb:26.4.0","description":"","website":"https://twistedmatrix.com/trac/wiki/TwistedWeb","common_platform_enumeration":"","icon":"TwistedWeb.png","categories":["Web servers"]}],"data":{"size":13,"size_decoded":156,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"58bede4a7735521978693943a044a600","sha1":"3b920f698c36ab96176eae0f330449acf0510635","sha256":"b3245801ba28071735b9a8e59e66e4bd98fb9ad443dfe711a75022199d75226a","sha512":"0c16f873e376df601dca16eb2cba74a7b1ed7ef5fb42483c4313babf99a0888c7d177d73ff2392f6ec7a8e35eea6a6736c8cf1f6fd0095e90ae0520fa46874bc","ssdeep":"","tlshash":"6f600000030c0300c0c00c00033000000300f000000000c000ccc000300f00c300c00f","first_seen":"2024-05-27T08:59:51Z","last_seen":"2026-09-12T14:22:51.410062Z","times_seen":765,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":0,"dns":134,"connect":135,"send":0,"wait":650,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegrambotcheck.duckdns.org:5001/receive_token?referrer=loco","fqdn":"telegrambotcheck.duckdns.org","domain":"telegrambotcheck.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"102.165.14.4","port":5001,"asn":397423,"as":"TIER-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:23.170Z","timestamp":1789222943170,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegrambotcheck.duckdns.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 04:40:58 GMT","end":"Sun, 29 Nov 2026 04:40:57 GMT"},"fingerprint":{"sha1":"77:6E:B3:60:26:D6:99:77:6D:90:5A:AE:EA:E2:5B:A3:A3:EF:99:68","sha256":"3A:5D:9C:AC:31:A3:63:8F:EE:1B:A9:BE:CC:09:D5:E9:99:08:E0:8D:0D:98:51:46:80:99:16:2A:E7:9D:1D:C4"}}},"request":{"raw":"POST /receive_token?referrer=loco HTTP/1.1\r\nHost: telegrambotcheck.duckdns.org:5001\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://infocitypinamar.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 297\r\nOrigin: https://infocitypinamar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":297,"data":"token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\u0026all_cookies=%7B%22PHPSESS%22%3A%22c85d5f5a2341aec943f9ef404f74b62e%22%2C%22token%22%3A%22dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1%22%7D\u0026source=php\u0026timestamp=1789222943153"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: TwistedWeb/26.4.0\r\nDate: Sat, 12 Sep 2026 14:22:23 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"TwistedWeb:26.4.0","description":"","website":"https://twistedmatrix.com/trac/wiki/TwistedWeb","common_platform_enumeration":"","icon":"TwistedWeb.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":156,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T09:24:33.204347Z","times_seen":18440062,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"telegrambotcheck.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"telegrambotcheck.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/login.php","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T14:22:14.783Z","timestamp":1789222934783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/login.php HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; path=/\ntoken=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1; path=/; SameSite=Lax\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESS","value":"c85d5f5a2341aec943f9ef404f74b62e","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; path=/"},{"name":"token","value":"dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1; path=/; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":2418,"size_decoded":1708,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1045)","md5":"ace3f8632d2d60323a08207270eab68e","sha1":"12b9b482cddc2be7d04de616b519f192c9011e71","sha256":"845b858f83299515ffd36cfa83d6bc8c3698fbed492f8f301a539964a53d51d6","sha512":"3b7974b6cda4f7e50efe00ecb577a4a820b7915e74c68077246ed103d76925e43b417a6dac6d8c6d5b59458e846bdc702dcf49c4327067184d960a26b5707eb0","ssdeep":"","tlshash":"b841b7522cf6c567049188989a926e5d7fc49713c34bc904b3ce4eea8faaec3cdc3518","first_seen":"2026-09-12T14:22:51.412461Z","last_seen":"2026-09-12T14:22:51.412461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1803,"timings":{"blocked":-1,"dns":256,"connect":236,"send":0,"wait":1055,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/jquery.js","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:16.752Z","timestamp":1789222936752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/jquery.js HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/login.php\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 10 Sep 2026 13:41:50 GMT\r\netag: W/\"5a215-65b212144d208\"\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":369173,"size_decoded":32959,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65434), with no line terminators","md5":"ee5b5c7a4fbe9d3e639b2111b16aae47","sha1":"c3df065c7fcf8b39e719a5621c4ff98f5ef6f0ae","sha256":"b9394559ccbb48744c28fa1937180399438e623af7539e07d19e0918489ad17f","sha512":"a8dd851b278c7bd4bbe1116569d17cda62abb92277ebfb85ac77ba4016852ef65faa5eafe60170df02925317eab376092708f0ee89418a436186ac560314bc3a","ssdeep":"3072:IM5LwijORnUkXCvM5LwijORnUkXCvM5LwijO9tEnUkXCvM5LwijORnUkXCs:REiEpCUEiEpCUEiyEpCUEiEpCs","tlshash":"e17483cdf6d2b0a257e37674403f510bf23bae54b45a8090e266e1d16cbd94a807bf39","first_seen":"2024-09-20T21:30:31.302732Z","last_seen":"2026-09-12T14:22:51.415157Z","times_seen":24,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/img/top1.png","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:16.756Z","timestamp":1789222936756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/img/top1.png HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/login.php\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 17194\r\nlast-modified: Thu, 10 Sep 2026 13:43:29 GMT\r\netag: \"432a-65b21272c0151\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 12 Sep 2026 15:22:16 GMT\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17194,"size_decoded":17599,"mime_type":"image/png","magic":"PNG image data, 703 x 216, 8-bit/color RGBA, non-interlaced","md5":"97252af7fe7ea32c797ae8405058f77b","sha1":"d058156fac8822b876ff5e01e48fc92d1d1fda45","sha256":"6d3d73902c93a062fd4566408c60f8fe2e39efd53c9b7f92179b88c44fedce6d","sha512":"fc281381ceb83c10e11d6ca1537855a8113f05c5d54156ba0eea33d1ca13c8f15bcd4767e44379c755705412753d2fdc008a03d9bdffaf4e3ee77618033395f0","ssdeep":"384:RLRDrl58f6/7z+rLo+2YoRMXyixc+QOYPd:nr8y7z+r8tIXa+rY","tlshash":"e672bfea957ce2f7642ed68348ac938027478ec4ac485f0ba30df4096216fd8bd19cc5","first_seen":"2025-06-23T12:15:46.627907Z","last_seen":"2026-09-12T14:22:51.416627Z","times_seen":86,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/reg.woff2","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:17.010Z","timestamp":1789222937010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/reg.woff2 HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/res/app.css\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49272\r\nlast-modified: Thu, 10 Sep 2026 13:41:48 GMT\r\netag: \"c078-65b21212262e6\"\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49272,"size_decoded":49609,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49272, version 1.26214","md5":"7109062a3708aa802cd0420aad8d5014","sha1":"78df3ffd20a212d356f269625d280fbb1f215f94","sha256":"de48fe7cfbd2082df946a69799cd1dd63caa7683edff423bb7cd4824d2152125","sha512":"1a61fad98b6a62c30b5aeb42ec71b75e7fcc5180ef4bef7894f0abd7fbec183bba31aedace2b1e57152707b087cd08b7eba91d83be75f26194c75135e6644fe3","ssdeep":"1536:Zkt5pjglQz8y1tc9MrBSQfpmWL9FdnvCGF87+x:s/jglc8y7hlrB/LxnvhKix","tlshash":"0123f131e6a0cd70ed5046f1daa480e6c3e9f5b0adcb5ad3bef8d0d293631244626993","first_seen":"2025-01-05T16:38:34.344578Z","last_seen":"2026-09-12T14:22:51.417545Z","times_seen":104,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/img/pic.jpg","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:17.015Z","timestamp":1789222937015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/img/pic.jpg HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/res/app.css\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 200933\r\nlast-modified: Thu, 10 Sep 2026 13:43:27 GMT\r\netag: \"310e5-65b212705f5b3\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 12 Sep 2026 15:22:17 GMT\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200933,"size_decoded":201341,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1563x1198, components 3","md5":"0f80ca4a78ce3af79ad01923484e0a5b","sha1":"fac97c21d7965e9ac6950844123fd5f65b8f0a77","sha256":"58a037c0bde953b48561826f3df16031f7ddfce33c4018619d3f39c6af6eec1b","sha512":"f3e0ddf9685e0ef455bacd6691805d45e08a3377c23105e3cc0adb3ad1e31d8ef84fac8eab3762ce19ce4c77692be967d0ab8463678a1bc26e2489d71866d5e9","ssdeep":"3072:I18uz9aobkEofvj340bjX0glkFFSa2JWarVH7p4LDZVO8cIin9YxDie+:I1bRpMvs0iOWEVHl8rnin9Yhx+","tlshash":"351412b2eba666e2d063103ec1389172b4ce49bcda0dd21f0504aee756b75ff5a1702d","first_seen":"2023-05-09T01:15:49Z","last_seen":"2026-09-12T14:22:51.418384Z","times_seen":844,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":464,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/favicon.ico","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:17.681Z","timestamp":1789222937681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/login.php\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 14:22:17 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding, Cookie,Accept-Encoding\r\ncomposed-by: SPIP 4.4.21 @ www.spip.net + https://infocitypinamar.com/local/config.txt\r\ncontent-transfer-encoding: binary\r\nx-spip-cache: 86400\r\nlast-modified: Sat, 12 Sep 2026 14:22:17 GMT\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SPIP:4.4.21","description":"SPIP is a content management system written in PHP that uses one or more databases like SQL, SQLite or PostgreSQL.","website":"https://www.spip.net","common_platform_enumeration":"cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*","icon":"spip.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1150,"size_decoded":1018,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"c7eb45406a24581a579601c3515dd222","sha1":"bd3cabdaec15058c30789384289f1a735af46f76","sha256":"ac7a1b5d88af8656c7cb4bf43cbcbb90974d3fe44de0a74b5003384299ce2bd3","sha512":"3212bdf5fbd394260a42ab358c790005826292e0930f4660a4642d5f27bde3a0d267407e03c72fe049c93f053cc4d44726bd7b8f3c7033832e70868587f44905","ssdeep":"","tlshash":"6121bd1cb2c93af9d091bab672c2d5f1e4237c38486a630ee4e536577fb05044336003","first_seen":"2026-09-12T00:52:33.531202Z","last_seen":"2026-09-12T14:22:51.419396Z","times_seen":4,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"infocitypinamar.com/pass/res/app.css","fqdn":"infocitypinamar.com","domain":"infocitypinamar.com","tld":"com"},"ip":{"addr":"181.88.192.78","port":443,"asn":7303,"as":"Telecom Argentina S.A.","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://infocitypinamar.com/pass/login.php","date":"2026-09-12T14:22:16.749Z","timestamp":1789222936749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infocitypinamar.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 03:05:49 GMT","end":"Thu, 15 Oct 2026 03:05:48 GMT"},"fingerprint":{"sha1":"1A:15:91:A3:1E:9C:AE:87:CC:10:BC:EA:54:EE:19:31:48:D5:05:28","sha256":"58:C8:F2:23:99:E7:C5:CE:BA:7D:08:FC:AC:65:7C:5C:6C:58:62:8A:18:06:53:C4:BB:EE:60:40:CB:7C:8F:EA"}}},"request":{"raw":"GET /pass/res/app.css HTTP/1.1\r\nHost: infocitypinamar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://infocitypinamar.com/pass/login.php\r\nCookie: PHPSESS=c85d5f5a2341aec943f9ef404f74b62e; token=dg5bTAdHeWNSf00MGAUwBToVEAJWfR8yMUZlMzs6UFp8PQYHGi8EVwEAGzYHCA%3D%3D%3A1%3A0%3A1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:22:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 10 Sep 2026 13:41:29 GMT\r\netag: W/\"a24-65b212005f629\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 12 Sep 2026 15:22:16 GMT\r\nserver: LTC-h3\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=600\r\nx-cache-status: BYPASS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2596,"size_decoded":1109,"mime_type":"text/css","magic":"ASCII text","md5":"303c4d57cf3c9d8e8847be8d3eb59252","sha1":"0c60236dc2ab0960beffa047997123b0573389f5","sha256":"e02bfd251fc7911032ff948ffd5504fd52d3cfa23bec6720df93280dbe971e2b","sha512":"f2fa045aa7d25e1311626b0ce05156a6a8b03105d1e1fe2f94a46abb3291c844e6e139eff3d04fd01bbd2828d31babd26bc16de9fb5993c920479a255c82fc70","ssdeep":"","tlshash":"1851ce436aa31d4ab507c8245fef9354326c6413848fda6a7ddef1accf4d2688121f4d","first_seen":"2025-09-15T07:58:46.676759Z","last_seen":"2026-09-12T14:22:51.420558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"infocitypinamar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}