{"report_id":"0e9f6a7d-8ccd-4ea6-81bc-54c5243af3fc","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-03-24T13:45:43Z","url":{"schema":"http","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"title":"Netflix","dom":{"size":5869,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2278)","md5":"5a72155767b20968a19b9c5dde177504","sha1":"c3ae0874b252e69e3afb77ec1ba6e76421cff18e","sha256":"fda6a86ea0b2614ce8f9cc3e08876748dece6f2e462c401b6ee332ec94090838","sha512":"d10e26920b5d97e55d22b29c5195fe7c03971b3c31dd57ac479fb24a22c4293c0b015d07f92133fe0a459bf82627e3873e26c41e82b3ff516830ddadd041b837","ssdeep":"96:n4/A/6n990H1uNaqU4yDITxdNuouvolOp53lo:aAE9k4/Vud9o","tlshash":"4ac1c770e2b4026b2c2381ce74d65fb238d28362e991124472fd4f5d0fdfc93c96aaa5","dom_hash":"domhasheef66b467457fe37a5ec7fd3053f8a4a","first_seen":"2026-03-24T13:45:46.538185Z","last_seen":"2026-03-24T13:45:46.538185Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T13:45:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":2,"received_data":295093,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gomezdelgado.com.ar","ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2019-01-31","domain_rank":0,"first_seen":"2026-03-24T13:45:13.482285Z","last_seen":"2026-03-24T13:45:13.482285Z","alert_count":30,"request_count":10,"received_data":436209,"sent_data":5981,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60577,"data":"","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-08-11T16:58:35.775465Z","times_seen":2304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/fonts/Regular.woff2","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/fonts/Regular.woff2 HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/css/master.css\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53304\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\netag: \"68d45034-d038\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53304, version 2.6554","md5":"0bf3177f1fed6d953178221fba43c7e8","sha1":"83d9f039f1ba7209321c7da72d3dc6a9aa5e2ab3","sha256":"c0bceb927c506dce9f6e6f5f570e641ad580b9554be06f61508a4aee32380167","sha512":"76ebfc377313354b469aca9695cdc28bb76e8ff015156d0f2ddbb45c763d4822808014e8e742ba3dfa447981bbdd2b7603e852c77b78aa52ff8de452094ecf0c","ssdeep":"1536:t21aKxDJpWmqPuw/L5muh28j0JPVMib83e50+kPmb:t20uonjYm20MVM28uDIQ","tlshash":"d83301020c97d667910cca53e475a6bfbcc0c7c09a68d0d91a3ddb779b4b0ca8c9ea06","first_seen":"2023-05-02T12:35:36Z","last_seen":"2026-08-09T04:23:05.435945Z","times_seen":2618,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T13:45:20.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/ HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t; path=/\r\nlocation: app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PHP/7.4.30, NITRO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":208,"dns":1,"connect":99,"send":0,"wait":165,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gomezdelgado.com.ar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\nage: 1685276\r\nx-served-by: cache-fra-eddf8230029-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 27423\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-12T15:00:57.665799Z","times_seen":18789,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":55,"dns":1,"connect":26,"send":0,"wait":27,"receive":7,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/images/screen.png","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/images/screen.png HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 602\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\netag: \"68d45034-25a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 22, 8-bit/color RGBA, non-interlaced","md5":"3618aa278df055e9b308fdf0a9827fdb","sha1":"300a3c9e7f541144a9570e767e3374bbfa4f9fd7","sha256":"6f543c0edbca833491426866ee7f191539dcc6a1e04de7bafe6f91c6efaab94a","sha512":"4ff4b7efb636ae714109e9b9c859a184e92c5b2751b7486092a307fe407dc4b1cc5eb3f218875f8944bf21d9ee6f4704d7e4544332d84651289463f9e1c42fad","ssdeep":"","tlshash":"bcf062fe8b6a088cc7480032a79360805c9314cd4dc5fcec0e1224582f3d48d52147a3","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-07-06T03:10:47.128158Z","times_seen":55,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/images/bg.jpg","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/images/bg.jpg HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/css/master.css\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 297346\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\netag: \"68d45034-48982\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":297346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"52c4dc324b1d6ea1b7c9386943ce1f25","sha1":"b87d84305d22a782d07b54b544abd888344c6108","sha256":"d3577819f555a573df94db7a514b682703ac7f8771939c676b2816c1e7162510","sha512":"5c5119c2b8f63c801b229c23ab1d4ac84e34703da340ded2e0872afd7d055021315918e959ca50be1add97a78a783725faad619c598428e93792fcbf1652ce51","ssdeep":"6144:qEUKBHvNsVpZJBhz9yrmtWVrzsl3dQFZI7Mnaew:8iVsLt1sFMMnaew","tlshash":"7f542315f6b57c47c69718223531388b2a82d4d0cddcc4d83de126be68a36f426a7d1f","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-07-06T03:10:47.139246Z","times_seen":58,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/images/favicon.ico","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:21.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/images/favicon.ico HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:21 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d45034-267e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9854,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-08-08T01:53:02.555167Z","times_seen":2178,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T13:45:20.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3 HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2219\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PHP/7.4.30, NITRO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2278), with CRLF line terminators","md5":"231eb2b9a28b46a8ed3a648fbe036fd7","sha1":"596235fcf7d61351ea71d45da892e5927e38ebcb","sha256":"ca39fdd3be81cd8b70c2c8418001af262f37295ff4bdd0a48d4e03d801956136","sha512":"51625a8b39d19a1a915418336689153e41332bb747835ac47848ad1ffd604f1ba7db27b9d3f83921c05a92f13ac0c668014f2a5254902c0e4eaab158ddbda08d","ssdeep":"96:Dkx/bn990H1uNaqU4yDITObNAvTtSoDNum:Yxh9k4/Slm","tlshash":"4cc1d870e2a50a2f1c3381de74d55ff2f8928351e641524472fd1b1b0ffbc5289abaa1","first_seen":"2026-03-24T13:45:46.551471Z","last_seen":"2026-03-24T13:45:46.551471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/css/master.css","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/css/master.css HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d45034-11c0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"83a1d18c0b59c36c7093ca48bc6dd759","sha1":"44e2eeca400165e116cccdd02e5bbc233dddec0d","sha256":"167cb65a8f638f105f7332df0ed13075581e9db333340f173f257649ce72ced0","sha512":"aaf7e838fd7d5dd784eedba30c3c50f26fe94a6ab52805fc1bb538f09567248b691bde695da1196a53ea46468a429361d1342e6929db5a7573ddbd1cd57cbf09","ssdeep":"48:uO8NNP3mDAgzm6KdEtpOabEVd+bw3Ad88T7qstluqw4liBTFPLH5vfZVFQ5XhSd9:r+LGOtd+M38NluV4QThLZvkdd5T2lTd","tlshash":"a8919a2ae285204772375b38b363573aee3e00a79201467d7bec36a86ff50954561fcc","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-07-06T03:10:47.126973Z","times_seen":58,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/images/footerlng.png","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/images/footerlng.png HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 908\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\netag: \"68d45034-38c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 26, 8-bit/color RGBA, non-interlaced","md5":"b2b0e0703abf5c18f39c31e3dae89ea0","sha1":"f5a15245897bad26dea701b6a61cdfffee23d80b","sha256":"5c1a6a1b15581ec115e4871306aeb835b869eabcd52584df2565747a3d5dc8e4","sha512":"fb8385f4a4fea0d97a965fd0e127d4b4292751bf4f0b56d1adc87109b20d6fdfc3cb34f91348110b1013166670e7c31cf5f6ba1faf9ee1f5cd9d96745303fcf8","ssdeep":"","tlshash":"1a11b7f8f71ca4a1f9438d609b4b7d057f5a08fc9bc08c900080c25e2831ac03249ab3","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-07-06T03:10:47.130797Z","times_seen":56,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/images/footerrow.png","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/images/footerrow.png HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\netag: \"68d45034-181\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 20, 8-bit/color RGBA, non-interlaced","md5":"db93e87eda2024ee430b4772c0a55796","sha1":"060ee435231441e9077e00cbf3d7500f911295c0","sha256":"eb35fe195b91eeaeb63fd5768075e279b8783c80b41d43293fd8a6f465220d9f","sha512":"a0d2093ca3ece271743d12929dc5073cd977170de08bda353beb958251443acc39a72696b9e916bf54dc93add5d6bb908b75da317519ac2c64ea7c80078ffae8","ssdeep":"","tlshash":"c0e0f8fb4e930c9cc24e4832cbd370006cf910c815d8e08824d2166d2a28ac2a3e2f62","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-07-06T03:10:47.138314Z","times_seen":56,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gomezdelgado.com.ar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"eca1-s8rO+fzPpCquvWHwRvISPspZiXM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\nage: 654406\r\nx-served-by: cache-fra-etou8220026-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 17209\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60298)","md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-08-11T16:58:35.775465Z","times_seen":2304,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":53,"dns":1,"connect":26,"send":0,"wait":28,"receive":19,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/fonts/Medium.woff2","fqdn":"www.gomezdelgado.com.ar","domain":"gomezdelgado.com.ar","tld":"com.ar"},"ip":{"addr":"198.50.222.233","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/index.php?view=main\u0026id=7334119375ffbc0ba0a326ec9545dff3","date":"2026-03-24T13:45:20.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gomezdelgado.com.ar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:03:07 GMT","end":"Wed, 20 May 2026 00:03:06 GMT"},"fingerprint":{"sha1":"99:6F:7F:F2:62:F0:74:D8:BF:AC:2E:A5:DC:65:B4:ED:5A:47:A5:78","sha256":"B7:08:49:F4:E3:40:9C:11:85:53:DB:6A:82:1E:67:01:7B:42:C5:02:6A:C2:F1:3F:A0:20:C9:A9:35:ED:35:84"}}},"request":{"raw":"GET /USERinfos2025ntfx/app/assets/fonts/Medium.woff2 HTTP/1.1\r\nHost: www.gomezdelgado.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gomezdelgado.com.ar/USERinfos2025ntfx/app/assets/css/master.css\r\nCookie: PHPSESSID=eo8focjdhrfi6gfdepkr4fsv9t\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 13:45:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53940\r\nlast-modified: Wed, 24 Sep 2025 20:10:28 GMT\r\netag: \"68d45034-d2b4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: NITRO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53940, version 2.6554","md5":"ea769921b0cfa4fc6d4d1a2e0b1fa5ff","sha1":"34dcd2875c9752ebba6f894eb8d410e4958cc1b4","sha256":"9ac2bd03fcde501b3f30f47ab1fae62161f87808ea6411f38e8feaa4bbddc42e","sha512":"f0ee2f0c81a8253783306602b3d430be4ff2a33e075ab77cce6834d5a6452f2c64e7d395aa98b92d694d53ffc8da2bf5226528faf62de3a687911dfc279c39cb","ssdeep":"1536:cQYyppexSSgX9x6olOQ26mZJ/F6EIHhFsgHFkW/:cjw9X9/Yplg5HhrlkW/","tlshash":"7633f1039fcf714a08b7be7facca496b6059cdb7986a025fde3f498490117025a41e37","first_seen":"2023-05-02T12:35:36Z","last_seen":"2026-08-09T04:23:05.506401Z","times_seen":2496,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"www.gomezdelgado.com.ar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}