{"report_id":"cf9481c9-88f8-4f8e-ad6d-e3af8201fce3","version":6,"status":"done","tags":["swisspass","phishing","transport"],"date":"2026-05-04T14:56:01Z","url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":0,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"final":{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"title":"Login | SwissPass","dom":{"size":67281,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2819)","md5":"ab80eacf0a611ccc5b466defbdf99151","sha1":"f800c54ddf6c37ab4df9b72edaf5e1eb5509344c","sha256":"d55f663b976ee975323e0635db1c1742ff19a575a2a2f535b75f4c3ba8424a7b","sha512":"e582e5fc6f968664dbc24f8fc6aa6df2a000665c2178a8f831a5836ccfa217def8430887971f079124af834c3e07b74a2f5e859bceaaefc5d2315a65818cb3c6","ssdeep":"768:OBmH6xC11cYLx8f7aydHHyFE9nRysM8nRNVM3tyDEbb:OBmaxC11cYLx8f7aydHSGAtyDEH","tlshash":"8763ff1a34a76a0ac2c3a358166626417d21a8effdb78cddb64d63744fc87d34c1628f","dom_hash":"domhash141cc06bec46cb27b9eec8a3d377ab95","first_seen":"2025-10-31T02:39:44.948155Z","last_seen":"2026-05-04T14:56:03.702136Z","times_seen":31,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":0,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-08T14:56:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]},"summary":[{"fqdn":"flamaquimicasrl.com.ar","ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"domain_registered":"2002-04-26","domain_rank":0,"first_seen":"2026-05-04T13:14:13.762098Z","last_seen":"2026-05-04T13:14:13.762098Z","alert_count":33,"request_count":11,"received_data":1095576,"sent_data":5601,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"WooCommerce:10.5.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.swisspass.ch","ip":{"addr":"141.101.90.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":907701,"first_seen":"2015-03-10T09:49:04Z","last_seen":"2026-04-28T07:31:30.432549Z","alert_count":0,"request_count":2,"received_data":1148,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.app.sbb.ch","ip":{"addr":"52.57.93.133","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":2139371,"first_seen":"2018-04-04T14:01:55Z","last_seen":"2026-05-04T13:14:14.771505Z","alert_count":0,"request_count":1,"received_data":14989,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2991ddf7f3235e307b70e484c62b482","sha1":"debfdf857d21a51fbf7651bdf710e8de6ff11b0e","sha256":"090c678b08b7ed12afbf72c33c9a8fa024e12352d0676d76e47fc0ab0715243b","sha512":"6dba6cfb295df83e80b07b7eaa7a1b67834c67e76c767f3acf2d111f8e146810a5a35eb504e8f17c5426cf0af659a3ecc582b6e981c2e8f302d91aeff37e5f5e","ssdeep":"","tlshash":"40319c0626b2993098f6a0f80eafa96034f159135145c1d5bf1d9f044f0070b94322ed","size":1591,"data":"","first_seen":"2023-05-23T05:07:26Z","last_seen":"2026-05-04T14:56:03.724001Z","times_seen":719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/js/swisspass.min-20200819.js.download","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e37fe394cc3945b173b27bcd3b2b9779","sha1":"1e2fd6607c9dfe3a1c5beebbe89dd1d7e8b657ce","sha256":"225e078f0432e7459d74e8d9245f1982570a3897d664ca2d219ccd09b244ab95","sha512":"8dc883471c8c18143fd4816a46d9b119d6742396cef3ad8624e8b991bbc6c2b44e5be3b88aa27ef7f853cb407ea37d9543d1ade43522ef2975eef06037e9ca71","ssdeep":"1536:gj5taENXUembGTAC/gLf8XPpzaaGNZIMcSP1ZAcCHmcVRLbErD:s5taE9FLTWIPpzaaQIMvP1ZrCH9bErD","tlshash":"bfa3da0d705234b72bff30f7147f620591336499b8454c40b26d9ca61ebaa4e53afeae","size":99324,"data":"","first_seen":"2023-03-09T08:10:14Z","last_seen":"2026-06-20T13:13:27.077575Z","times_seen":1215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":true,"md5":"65d2e07d7f42df5ccfef51c1072f9d7b","sha1":"c5977a9ca4791317591fbf71546895958e92f3ce","sha256":"5525638c23ce7eb7607d09dd40673dc70fc68dd1d69aa9358f3cfb369e7bc7a5","sha512":"d18e3d97ed578264b1b62716c2a62645f17435d5436764856d2881535e3e3b3eeab7fe41b9d8f44d606439270f2a49b5f3172d2ebe6e3171c79af6d08dc392b2","ssdeep":"","tlshash":"b1b002dd98a7620955f3343b8fdf3208207741b7044c9a00790cda505f6572f4a57bce","size":102,"data":"","first_seen":"2023-05-23T05:07:26Z","last_seen":"2026-05-04T14:56:03.725013Z","times_seen":719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d78863ce031f0ad6c3aeb3dde918a1b","sha1":"b91e9be2c56067a3c33bd6b742996adac8f41aac","sha256":"0bda67d50dd7e429f46e18161fd7ef3f0be9f6f6b6919efb1275a5c9d1b0039c","sha512":"33512cbb73892ab142e6cb919a83fa9d3e5a408c9a52470c6918af8aea0f7ffcc753c94619af35d8d732c7d46864268f8264a0223f273854bd82ee13b86cc4e8","ssdeep":"48:i1lKiMq8DVLKJxm2Ej/SCnNY1ki9/FGM6bB6HOdgdbkdNB4y85GcMrOcELSy:cmpLKHm2w/SKNvi9/04yvrOcELSy","tlshash":"4791e1585af30415ac7370ee2bef515532a054536089cc8c3a8f97a09fe0ab7d671bf9","size":4227,"data":"","first_seen":"2023-05-23T05:07:26Z","last_seen":"2026-05-04T14:56:03.725781Z","times_seen":713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":true,"md5":"31183fcc3cd59e53b87dc2e14d5355a4","sha1":"d8550e31b9485a1fa7f73ad6a61617a7d7b5498e","sha256":"0675c21e881f0ad8022a4877c6f12aef4169a0ab5709b04b30a9e33320920587","sha512":"296038d6eb76beaa8ae7286e731ab1b9bb122ecebfd960f08607096645386abf616a69b5f0fd387dfb881c611d0f095f649bd6794fc7be61dd93b56c93b11e43","ssdeep":"","tlshash":"d311ab36dd5322811ce3382d3e8d8c48b0ad901b5839d449394f4a21cf83d54adbbedd","size":961,"data":"","first_seen":"2023-05-23T05:07:26Z","last_seen":"2026-05-04T14:56:03.72666Z","times_seen":714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/js/jquery-20200819.js.download","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":false,"md5":"43327285f22db304e1bc08eae9c9522e","sha1":"aff0883be1487a752a7431783bf2e5eb2c39353f","sha256":"24f31a4afb4d98c85b6cff4c9a953654a77986d6c4c9e9cae52cf57e59095e01","sha512":"275cf05e6a970890afec609d3c178c5d55cf87a3e0ab3f00a6c81e93ed6fc18cde6db6a64e587a219f6e7ecad62af07ba82093062f0735423f3c215e72294a94","ssdeep":"1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJLFk/zkZ4HWLZoHsrOa99fwkTb7/Hp9:V4KZ+L3WLZICOaLfwkT7qD1Pa/a98Hr/","tlshash":"fd93e8d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97364,"data":"","first_seen":"2023-03-10T03:55:08Z","last_seen":"2026-06-20T13:13:27.089211Z","times_seen":1248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/js/vendor.min-20200819.js.download","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccfc9b3b004cfb4f51ae7853af5f78d9","sha1":"2c52cec1f06c406c4d5d2cf34e870ef15a85dad7","sha256":"be0223ae72bc8c610c7a5453d349964cbe78ff8646695a58bc13a4cf0a8d81d6","sha512":"1dd5c72e69e3e0839f3bf68245988f85579ae008ebea5ee432e48a4220d2de3e40ffa0eccc619164703ec379fdcf7869aa7dd5cd67ef6db8be6e420a985d5a9f","ssdeep":"1536:9Slm8s3fXCLlM6Wu3mTWnoILVRqW42yn81ecOrOWbI7YObfZJk/ytaU6EvlQ3exv:9Sd3mTWoOeRoWVO8ataUdv33YetGw","tlshash":"de04078d76623136427f21b6106f110b3137aa7eb4458558b868ccd9af7cc4962bbf3e","size":179210,"data":"","first_seen":"2023-03-09T08:10:15Z","last_seen":"2026-06-20T13:13:27.08241Z","times_seen":1244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/css/sso.min-20200819.css","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/css/sso.min-20200819.css HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Mar 2023 22:18:32 GMT\r\netag: \"2cf01-5f6065356fe00-br\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31557600\r\nexpires: Tue, 04 May 2027 20:55:39 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 24276\r\ncontent-type: text/css\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":184065,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2bbf7f3318c47af5e7612c00944fad2e","sha1":"3c1974c80924829ef60ad41f10e6c24e1299f2ec","sha256":"fd23aeccc08239852a5ac678a7cc5b29c723987a0287674000b930cf606b115e","sha512":"52fac4c8690e77984d012c4bff657d5c726fb3f8a9a3d56ee1514aba01395b16afd77d509f996bf8e4d8cc725e34f06da18b654f3e0cbf695a96db7614a7c8dd","ssdeep":"768:K5ptYJ7mvjNiYXayvATzcGxwRv5FSN0k4PSw2w+Zw2w+6ZkynBZb1k9FnUShWlwV:K/uJqHXayvAPFwXugNL6tw4l","tlshash":"3e04a8d6eae214ad372bc41fa4c16776173b9011fa572fb6f2d7946c8b883860223f45","first_seen":"2023-04-05T05:09:02Z","last_seen":"2026-06-20T13:13:27.08099Z","times_seen":647,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"www.swisspass.ch//resources/img/logo_text_de-20200819.svg","fqdn":"www.swisspass.ch","domain":"swisspass.ch","tld":"ch"},"ip":{"addr":"141.101.90.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swisspass.ch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 11:43:18 GMT","end":"Sat, 18 Jul 2026 12:43:13 GMT"},"fingerprint":{"sha1":"C3:58:ED:4D:53:FF:73:CD:56:15:40:DE:69:5B:C7:97:F2:14:1C:74","sha256":"E5:E1:83:8A:7B:7D:EA:CD:5B:41:D8:02:56:A7:79:6E:75:6C:BD:27:E9:9E:3E:C1:5F:E2:A2:9F:85:C1:4A:A0"}}},"request":{"raw":"GET //resources/img/logo_text_de-20200819.svg HTTP/1.1\r\nHost: www.swisspass.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nset-cookie: __cf_bm=iRXbJRemdZXQrUV3ckfk0XzWQstg5.J1Br6kL.sRBnE-1777906539.0396826-1.0.1.1-mLhHEdkb9kSfuQT08q3lG7VsjQs13EUQrxsOcKnJg.6g73hT27cG6qK5ieJfGaK72crVeQNepEQSvoBN_u3y.gP9i4PHvJve9jImpa.YI356IcSNsRV_N4JSAsIdXFbH; HttpOnly; Secure; Path=/; Domain=swisspass.ch; Expires=Mon, 04 May 2026 15:25:39 GMT\r\nstrict-transport-security: max-age=16070400; includeSubDomains\r\ncf-cache-status: MISS\r\ncontent-encoding: gzip\r\ncf-ray: 9f6858fcf88afea6-AMS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":123,"dns":50,"connect":1,"send":0,"wait":177,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.swisspass.ch//resources/img/logo-20200819.svg","fqdn":"www.swisspass.ch","domain":"swisspass.ch","tld":"ch"},"ip":{"addr":"141.101.90.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swisspass.ch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 11:43:18 GMT","end":"Sat, 18 Jul 2026 12:43:13 GMT"},"fingerprint":{"sha1":"C3:58:ED:4D:53:FF:73:CD:56:15:40:DE:69:5B:C7:97:F2:14:1C:74","sha256":"E5:E1:83:8A:7B:7D:EA:CD:5B:41:D8:02:56:A7:79:6E:75:6C:BD:27:E9:9E:3E:C1:5F:E2:A2:9F:85:C1:4A:A0"}}},"request":{"raw":"GET //resources/img/logo-20200819.svg HTTP/1.1\r\nHost: www.swisspass.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nset-cookie: __cf_bm=yHUSBPBqg0KUgHpJAB0qB8f9jjFxVWayKe2UiBZyDV4-1777906539.0142493-1.0.1.1-0tRwCpo4NiI0ZyNvrCOgmp3i9OlP26CxLDutNtwKXBz6JPhZaM.z2Q3UEwld_sSe4qWRlFN_lvIDmqIod.dChHi8Leovb6HdGnoQvG4MEQBTY_Xw2aMFblxn1amRaGEu; HttpOnly; Secure; Path=/; Domain=swisspass.ch; Expires=Mon, 04 May 2026 15:25:39 GMT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=16070400; includeSubDomains\r\ncontent-encoding: gzip\r\ncf-ray: 9f6858fcd815fea6-AMS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":96,"dns":47,"connect":1,"send":0,"wait":97,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/loader-20200819.png","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/loader-20200819.png HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-dns-prefetch-control: on\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://flamaquimicasrl.com.ar/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-tag: d40_HTTP.404,d40_404,d40_URL.b53dad7b9317f3d120b0a9756c94f64b,d40_guest,d40_,d40_UCSS.719b5b04ed1e2d1fbc2b7d24e56136bd,d40_MIN.8c5b1502455303cd54ef72867a4b9b12.css,d40_MIN.c6ce15d56ef8e470e57b2a88f5cdfdfc.js\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"WooCommerce:10.5.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":91840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23157)","md5":"049cc24fa1b06768562cca1cf6131811","sha1":"64f15da840dceb1d2074293357f911628d23fc7a","sha256":"e2b14243a024dfb387245919163a3d54dfe75dcdd0c167311c095a35aa6e82ac","sha512":"bc8c9948bf8eaed7c330800c10f619266c3a3e8c5cfec6ca5100c6bbef29da1e9780efcab74bf25cafaa8e6da7b8f557582b004fabdd5840d6e9a08eb26fa910","ssdeep":"1536:KrRTyp5q0mYopSETKJi8kdJRgrqNrxwMy9YnRHMw3Pk+2otrrv:oEDq0XqNJ2M","tlshash":"c1932b71f5a0203a7a1fd3f8c066f31cb499f145e90256a0f3f870ac46a4ee915a796f","first_seen":"2026-05-04T14:56:03.704456Z","last_seen":"2026-05-04T14:56:03.704456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/js/vendor.min-20200819.js.download","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/js/vendor.min-20200819.js.download HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Mar 2023 22:18:32 GMT\r\netag: \"2bc0a-5f6065356fe00-br\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31557600\r\nexpires: Tue, 04 May 2027 20:55:39 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 54739\r\ncontent-type: text/javascript\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":179210,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (663)","md5":"ccfc9b3b004cfb4f51ae7853af5f78d9","sha1":"2c52cec1f06c406c4d5d2cf34e870ef15a85dad7","sha256":"be0223ae72bc8c610c7a5453d349964cbe78ff8646695a58bc13a4cf0a8d81d6","sha512":"1dd5c72e69e3e0839f3bf68245988f85579ae008ebea5ee432e48a4220d2de3e40ffa0eccc619164703ec379fdcf7869aa7dd5cd67ef6db8be6e420a985d5a9f","ssdeep":"1536:9Slm8s3fXCLlM6Wu3mTWnoILVRqW42yn81ecOrOWbI7YObfZJk/ytaU6EvlQ3exv:9Sd3mTWoOeRoWVO8ataUdv33YetGw","tlshash":"de04078d76623136427f21b6106f110b3137aa7eb4458558b868ccd9af7cc4962bbf3e","first_seen":"2023-03-09T08:10:15Z","last_seen":"2026-06-20T13:13:27.08241Z","times_seen":1244,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/js/swisspass.min-20200819.js.download","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/js/swisspass.min-20200819.js.download HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Mar 2023 22:18:32 GMT\r\netag: \"183fc-5f6065356fe00-br\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31557600\r\nexpires: Tue, 04 May 2027 20:55:39 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 25836\r\ncontent-type: text/javascript\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":99324,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e37fe394cc3945b173b27bcd3b2b9779","sha1":"1e2fd6607c9dfe3a1c5beebbe89dd1d7e8b657ce","sha256":"225e078f0432e7459d74e8d9245f1982570a3897d664ca2d219ccd09b244ab95","sha512":"8dc883471c8c18143fd4816a46d9b119d6742396cef3ad8624e8b991bbc6c2b44e5be3b88aa27ef7f853cb407ea37d9543d1ade43522ef2975eef06037e9ca71","ssdeep":"1536:gj5taENXUembGTAC/gLf8XPpzaaGNZIMcSP1ZAcCHmcVRLbErD:s5taE9FLTWIPpzaaQIMvP1ZrCH9bErD","tlshash":"bfa3da0d705234b72bff30f7147f620591336499b8454c40b26d9ca61ebaa4e53afeae","first_seen":"2023-03-09T08:10:14Z","last_seen":"2026-06-20T13:13:27.077575Z","times_seen":1215,"resource_available":true,"data":null}},"time_used":1079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1078,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.app.sbb.ch/fonts/v1_6_subset/SBBWeb-Light.woff2","fqdn":"cdn.app.sbb.ch","domain":"sbb.ch","tld":"ch"},"ip":{"addr":"52.57.93.133","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:39.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.sbb.ch","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 16 Jun 2025 00:00:00 GMT","end":"Tue, 14 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:03:D9:B1:DF:64:D1:96:90:7E:AB:B9:46:62:45:8C:4F:9C:66:25","sha256":"D6:59:15:8E:AC:85:78:EE:86:77:55:A8:16:F3:3F:8E:79:B8:4A:20:AB:F9:C8:B6:A7:69:8B:8E:33:92:F8:9E"}}},"request":{"raw":"GET /fonts/v1_6_subset/SBBWeb-Light.woff2 HTTP/1.1\r\nHost: cdn.app.sbb.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://flamaquimicasrl.com.ar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 14212\r\nserver: nginx/1.29.8\r\nlast-modified: Fri, 27 Jun 2025 13:56:18 GMT\r\nvary: Accept-Encoding\r\netag: \"685ea302-3784\"\r\nexpires: Tue, 04 May 2027 14:55:39 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Mx-ReqToken,X-Requested-With\r\ncache-control: max-age=31536000, public, private\r\naccept-ranges: bytes\r\nset-cookie: 9527f1a32486d650b0687919ffd41c2b=eee2995f5ec63efd84e7470daa6b77d8; path=/; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14212,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14212, version 1.0","md5":"8b70a44a98a0ac5d721df7d8f5136f7b","sha1":"10e10c01e732f3d35a78e1051bfcc9fe2589ddda","sha256":"5c7f0e173844556da7ca5eb8936fa3dab1c00206960920a49a1eea9cde2bfaaf","sha512":"65833d65ef11617a6d2d2a9c2ed81fc7079368da6f9569b56404fa5a66d878088d95c5632b216d0e6c7f3e40aea6a6d7df5b9c0147743ecc06f38e95508397f2","ssdeep":"384:5bJ1keL4/s04W4gUz+/1x55hsno5oky9RAl51Gx:ZasaD/V5hsnDVyC","tlshash":"a652d017c934adb9c708cc34b49e35b2cc2e9ad444a2382c57c7a1b9370a9d36e54e4d","first_seen":"2023-04-05T05:09:02Z","last_seen":"2026-08-02T13:00:46.661936Z","times_seen":2633,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":107,"dns":10,"connect":21,"send":0,"wait":23,"receive":18,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/idp/co-branding?resource=co-branding\u0026lang=de\u0026provider=sbbkn","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:40.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /idp/co-branding?resource=co-branding\u0026lang=de\u0026provider=sbbkn HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-dns-prefetch-control: on\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://flamaquimicasrl.com.ar/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-tag: d40_HTTP.404,d40_404,d40_URL.ecbc22c93f6b894949dd353c7025f4f1,d40_guest,d40_,d40_UCSS.719b5b04ed1e2d1fbc2b7d24e56136bd,d40_MIN.8c5b1502455303cd54ef72867a4b9b12.css,d40_MIN.c6ce15d56ef8e470e57b2a88f5cdfdfc.js\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 May 2026 14:55:40 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"WooCommerce:10.5.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]}],"data":{"size":91840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23157)","md5":"ea5792daab21646da65ba9d935898586","sha1":"405ebea03031ef885fc6eb48640aee87eb48755d","sha256":"5bc5742b330f4afc0fce5ae718a878588fe40ec1ff0f3385a64d51271d3bf922","sha512":"303994ae53d21c794a22ba69c6d38f5d3aa4432429bc1f6da78b3ce2a75c1aaf655f107d9849f802c09344a1ad0db29bef500f65d220b8564707023108714118","ssdeep":"1536:KrRTyp5q0mYopSETKJi8kdJRgrqNrxwMy9YnRHMw3Pk+2otrrL:oEDq0XqNJ2M","tlshash":"59932b71f5a0203a7a1fd3f8c066f31cb499f145e90256a0f3f870ac46a4ee915a796f","first_seen":"2026-05-04T14:56:03.719141Z","last_seen":"2026-05-04T14:56:03.719141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T14:55:37.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/ HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 07 Mar 2023 16:52:46 GMT\r\netag: \"10b9a-5f6523dac3380-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 11136\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 May 2026 14:55:38 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":68506,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2819), with CRLF line terminators","md5":"95cc1044cd7f93b9dc6d87a067df9661","sha1":"6f61400b5e757544302e730fb835ec18bb6b8c01","sha256":"90ba1b9958aa8cd6364daab5f7499969ac4d75fb10338ea8cfc88d228b97d795","sha512":"0327a81156c55ebc909e6e46c86b6031113d111f300e7954775228df441e747d9362e93c6479e25aa73504fbdb5e56c826b5909b5c0254c586f2271097b1fab9","ssdeep":"384:sJURc7fQrtttGCD46k7TXaYvSYBQG0MzJMOLL+JJmjsnR0X35nRjv0L3MujBcT/c:4LDnm3nR0X35nR7g3MqBq/qZ","tlshash":"6d63121a3446690ac2f3a3585a326641fe1258effeb344ddb64d63750ff87924c06a8f","first_seen":"2025-04-07T10:48:08.259424Z","last_seen":"2026-06-20T13:13:27.086273Z","times_seen":54,"resource_available":true,"data":null}},"time_used":1502,"timings":{"blocked":500,"dns":1,"connect":249,"send":0,"wait":497,"receive":1,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/js/jquery-20200819.js.download","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:38.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/js/jquery-20200819.js.download HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Mar 2023 22:18:32 GMT\r\netag: \"17c54-5f6065356fe00-br\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31557600\r\nexpires: Tue, 04 May 2027 20:55:39 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 34953\r\ncontent-type: text/javascript\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97364,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32060)","md5":"43327285f22db304e1bc08eae9c9522e","sha1":"aff0883be1487a752a7431783bf2e5eb2c39353f","sha256":"24f31a4afb4d98c85b6cff4c9a953654a77986d6c4c9e9cae52cf57e59095e01","sha512":"275cf05e6a970890afec609d3c178c5d55cf87a3e0ab3f00a6c81e93ed6fc18cde6db6a64e587a219f6e7ecad62af07ba82093062f0735423f3c215e72294a94","ssdeep":"1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJLFk/zkZ4HWLZoHsrOa99fwkTb7/Hp9:V4KZ+L3WLZICOaLfwkT7qD1Pa/a98Hr/","tlshash":"fd93e8d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-10T03:55:08Z","last_seen":"2026-06-20T13:13:27.089211Z","times_seen":1248,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/fonts/icomoon/icomoon.woff2?7m5yri","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:39.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /fonts/icomoon/icomoon.woff2?7m5yri HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/css/sso.min-20200819.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-dns-prefetch-control: on\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://flamaquimicasrl.com.ar/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-tag: d40_HTTP.404,d40_404,d40_URL.481a7357390325cc390604f0f63535cf,d40_guest,d40_,d40_UCSS.719b5b04ed1e2d1fbc2b7d24e56136bd,d40_MIN.8c5b1502455303cd54ef72867a4b9b12.css,d40_MIN.c6ce15d56ef8e470e57b2a88f5cdfdfc.js\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 May 2026 14:55:39 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WooCommerce:10.5.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":91840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23157)","md5":"049cc24fa1b06768562cca1cf6131811","sha1":"64f15da840dceb1d2074293357f911628d23fc7a","sha256":"e2b14243a024dfb387245919163a3d54dfe75dcdd0c167311c095a35aa6e82ac","sha512":"bc8c9948bf8eaed7c330800c10f619266c3a3e8c5cfec6ca5100c6bbef29da1e9780efcab74bf25cafaa8e6da7b8f557582b004fabdd5840d6e9a08eb26fa910","ssdeep":"1536:KrRTyp5q0mYopSETKJi8kdJRgrqNrxwMy9YnRHMw3Pk+2otrrv:oEDq0XqNJ2M","tlshash":"c1932b71f5a0203a7a1fd3f8c066f31cb499f145e90256a0f3f870ac46a4ee915a796f","first_seen":"2026-05-04T14:56:03.704456Z","last_seen":"2026-05-04T14:56:03.704456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":940,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/swpass/SWISSPASS/img/favicon.ico","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:40.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /swpass/SWISSPASS/img/favicon.ico HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Mar 2023 22:21:02 GMT\r\netag: \"47e-5f6065c47cf80\"\r\naccept-ranges: bytes\r\ncontent-length: 1150\r\ncache-control: max-age=31557600\r\nexpires: Tue, 04 May 2027 20:55:40 GMT\r\ncontent-type: image/x-icon\r\ndate: Mon, 04 May 2026 14:55:40 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"6d866d9c4568bf7fc03e597e74ce7e28","sha1":"e1b3d9f0e9cdcb785a94b6c1e1fe651a4ff98dcb","sha256":"7c1925da382279a72f94990d0a1456f78918619f35780ea0905e4ae0db684677","sha512":"7dc58e58fc991e2c9310e22a6761aaa398586082c13fd7863fcadd48e15cef8ed7337dc33d0acc0d0b9b698d4d26abbbe6995fa48d2c9ce1161b2f39fea2a381","ssdeep":"","tlshash":"53215d85ffcbd895e413ed317a81e1862c584d61eab09d8130a1f4ebeb716744c54778","first_seen":"2023-05-05T11:25:27Z","last_seen":"2026-08-10T12:28:55.912536Z","times_seen":2772,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/fonts/icomoon/icomoon.ttf?7m5yri","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:40.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /fonts/icomoon/icomoon.ttf?7m5yri HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/css/sso.min-20200819.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-dns-prefetch-control: on\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://flamaquimicasrl.com.ar/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-tag: d40_HTTP.404,d40_404,d40_URL.9ff8234d5877312641000cc3515508b6,d40_guest,d40_,d40_UCSS.719b5b04ed1e2d1fbc2b7d24e56136bd,d40_MIN.8c5b1502455303cd54ef72867a4b9b12.css,d40_MIN.c6ce15d56ef8e470e57b2a88f5cdfdfc.js\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 May 2026 14:55:40 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"WooCommerce:10.5.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":91840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23157)","md5":"ea5792daab21646da65ba9d935898586","sha1":"405ebea03031ef885fc6eb48640aee87eb48755d","sha256":"5bc5742b330f4afc0fce5ae718a878588fe40ec1ff0f3385a64d51271d3bf922","sha512":"303994ae53d21c794a22ba69c6d38f5d3aa4432429bc1f6da78b3ce2a75c1aaf655f107d9849f802c09344a1ad0db29bef500f65d220b8564707023108714118","ssdeep":"1536:KrRTyp5q0mYopSETKJi8kdJRgrqNrxwMy9YnRHMw3Pk+2otrrL:oEDq0XqNJ2M","tlshash":"59932b71f5a0203a7a1fd3f8c066f31cb499f145e90256a0f3f870ac46a4ee915a796f","first_seen":"2026-05-04T14:56:03.719141Z","last_seen":"2026-05-04T14:56:03.719141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}},{"url":{"schema":"https","addr":"flamaquimicasrl.com.ar/fonts/icomoon/icomoon.woff?7m5yri","fqdn":"flamaquimicasrl.com.ar","domain":"flamaquimicasrl.com.ar","tld":"com.ar"},"ip":{"addr":"200.58.111.84","port":443,"asn":27823,"as":"Dattatec.com","country":"Argentina","country_code":"AR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flamaquimicasrl.com.ar/swpass/SWISSPASS/","date":"2026-05-04T14:55:41.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flamaquimicasrl.com.ar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:09:00 GMT","end":"Fri, 12 Jun 2026 04:08:59 GMT"},"fingerprint":{"sha1":"A0:E0:1D:51:6F:42:10:74:D9:2B:C4:28:8E:47:32:D1:19:6F:EA:99","sha256":"74:2E:A0:84:9B:79:77:DE:63:94:4C:37:90:F0:A5:BB:58:40:C8:F8:2F:41:3A:49:58:2D:1C:6A:A9:27:7B:2C"}}},"request":{"raw":"GET /fonts/icomoon/icomoon.woff?7m5yri HTTP/1.1\r\nHost: flamaquimicasrl.com.ar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flamaquimicasrl.com.ar/swpass/SWISSPASS/css/sso.min-20200819.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-dns-prefetch-control: on\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://flamaquimicasrl.com.ar/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-tag: d40_HTTP.404,d40_404,d40_URL.8f252cdd6aefc7979ad3663e79a47a18,d40_guest,d40_,d40_UCSS.719b5b04ed1e2d1fbc2b7d24e56136bd,d40_MIN.8c5b1502455303cd54ef72867a4b9b12.css,d40_MIN.c6ce15d56ef8e470e57b2a88f5cdfdfc.js\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 04 May 2026 14:55:41 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"WooCommerce:10.5.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":91840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23157)","md5":"10ba3dfc071f6500f3ca75ef4079bcf4","sha1":"9251d1b39e0808c987ae1dff273b1cafe1de3c2f","sha256":"5f67abc58046ca775fea2bd7f4e011c6a1d74aa9a78866fab93c640a7fc68adb","sha512":"61b38b0e7c059710091de41c91fb585c049b3506b6c538b5622608896426025df270f21881f0d23874a3d243eaa64fad3592872b694e3b523456f18d2b484312","ssdeep":"1536:KrRTyp5q0mYopSETKJi8kdJRgrqNrxwMy9YnRHMw3Pk+2otrrh:oEDq0XqNJ2e","tlshash":"6b932b71f5a0203a7a1fd3f8c066f31cb499f145e90256a0f3f870ac46a4ee915a796f","first_seen":"2026-05-04T14:56:03.722924Z","last_seen":"2026-05-04T14:56:03.722924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"flamaquimicasrl.com.ar","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"flamaquimicasrl.com.ar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - SwissPass","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with SwissPass phishing","tags":["swisspass","phishing","transport"],"meta":null}]}}]}