{"report_id":"e2ec2368-f4e6-40a0-9142-cb0ac5f36a65","version":6,"status":"done","tags":[],"date":"2026-05-29T12:27:36Z","url":{"schema":"http","addr":"mosaicline.click/afirmacionuserr","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"title":"Acceso al Sistema","dom":{"size":2648,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b0022ca84fc0b0caaf86baba8ee21861","sha1":"122e15100b85bba47ab70d3f3debc41bc6612537","sha256":"087a0bf73b8f1151a61547c5d4e4e56aa81f8714aa59bc5992caddb86a82f70c","sha512":"0114444e215a1009c776f9963f8e8607d8cbc503231260fad245f79a49562a6aa6a560f102893f3ea65569bd9346562628e5896bbcb77ff348c5e638f7c40cf0","ssdeep":"","tlshash":"9351676215f2d06300e384c59ea36a1f6ec3ea07d9865601b7bc1be91fc7d89dda7848","dom_hash":"domhash4d8459f2367f562792a0ce8927e2accf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mosaicline.click/afirmacionuserr","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T12:27:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mosaicline.click","ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2025-09-28","domain_rank":0,"first_seen":"2026-05-29T12:27:36.790363Z","last_seen":"2026-05-29T12:27:36.790363Z","alert_count":9,"request_count":9,"received_data":285041,"sent_data":4305,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fcd6b0ed09ed7d86a8b879e361845d7","sha1":"9af025d9d15477575cb1d288e7d4ce22f74a87be","sha256":"bff843047fa5aa3b1e493e9d1e8db2445c60d6e530f8c798757acc7f47cb55bf","sha512":"1ffa460596cc5d3aa3d3bf62e0c687e2dd2eee0e27ac234eac00e9479f6f9785d909935f2f5d909305ad3ad39517d812816519576adfe214339b598f3ff99e04","ssdeep":"","tlshash":"95a002d70141440156d33436cc92902e61772ccb743c4d85752f8510a7a0bac6732d8e","size":66,"data":"","first_seen":"2026-05-29T12:27:40.436456Z","last_seen":"2026-05-29T12:27:40.436456Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/js/antihack.js","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac3351fe7ec161a6e55cbec5e998402","sha1":"869c903c05f0065daa9a6e9ccae754c6d6195e8c","sha256":"17dfebb7b8dbedef3e028141a045216c8315821eeefcd96a4144ed8169688766","sha512":"813c2bc41feff36036d0cba4e5ed7ab013c46cbfd8d30f7d20e0b15082cbfbb86ff7e4871ee6c1dc6d59a05f99ec5f35ed610130c50687665f8d6c17c04b0918","ssdeep":"","tlshash":"d751a0683e8660c593c11b5a763e3092e87a4dfd37cc0c1b8115b9513df1d29d8a6673","size":2588,"data":"","first_seen":"2026-05-29T12:27:40.432228Z","last_seen":"2026-05-29T12:27:40.432228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/js/k9a1_w38z.js","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47f5cd5e0cb73c383a72ddf910a3044a","sha1":"94f7fff4efc73ac792c424a027ce9948f89437d6","sha256":"019de4cc0197849d2b3e8d9fe485b225de3d7700438197149844a7fa07db2612","sha512":"a6c37d213af08dae6f96cfac93413f2e6ffeee89dd588e7e4e75169dd7aaec13499fcabd3940aeafb9cf331e0a9615afc18be60dcf7b83359da68b0f103e2ce9","ssdeep":"","tlshash":"2901499ab65604a51efff63f1d35520afdb152a75004e354781dac200f39eaa90afef0","size":721,"data":"","first_seen":"2026-05-29T12:27:40.428417Z","last_seen":"2026-05-29T12:27:40.428417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/js/k9a1_w38z.js","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:15.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/src/js/k9a1_w38z.js HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:46:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 721\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"47f5cd5e0cb73c383a72ddf910a3044a","sha1":"94f7fff4efc73ac792c424a027ce9948f89437d6","sha256":"019de4cc0197849d2b3e8d9fe485b225de3d7700438197149844a7fa07db2612","sha512":"a6c37d213af08dae6f96cfac93413f2e6ffeee89dd588e7e4e75169dd7aaec13499fcabd3940aeafb9cf331e0a9615afc18be60dcf7b83359da68b0f103e2ce9","ssdeep":"","tlshash":"2901499ab65604a51efff63f1d35520afdb152a75004e354781dac200f39eaa90afef0","first_seen":"2026-05-29T12:27:40.428417Z","last_seen":"2026-05-29T12:27:40.428417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":181,"dns":0,"connect":91,"send":0,"wait":91,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/favicon.ico","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:16.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 29 May 2026 12:27:16 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-07T08:11:08.595948Z","times_seen":39134,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T12:27:15.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/ HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:43:31 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2720\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2720,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"15359a6aa4575f71e96375b45fa738e2","sha1":"6c9d1be293e9edcc19ec561eb01d9a6e61e719ea","sha256":"345b30055d1441cb6eaa12b1c2fc8dde582fa146bdd726b6cf1d256719be0868","sha512":"73d662c4022ec5c9445b046dc4007a858c940924897e026d892b98d2bf797175d2f3d7b5c9d95c85c5e47db7d78c23f89edfb1bb23a1507923925070c467d8f7","ssdeep":"","tlshash":"0851256215c2e42310b3c4d58e626b5efec28247d6869612b6fc2bdb1ff7d18dda3484","first_seen":"2026-05-29T12:27:40.430096Z","last_seen":"2026-05-29T12:27:40.430096Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/css/f8b2_v94x.css","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:15.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/src/css/f8b2_v94x.css HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:44:50 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6022\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6022,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f1feeb6499aee16654d766a52888cf00","sha1":"20cebdb955a4957b6f3fdafebfac591977dd1cac","sha256":"e94a0b7a7058a30de4c62aab1678ac6c43b5fd5eebb58d2d168f73e0e4d09019","sha512":"c8d220e1e3661987918029d2ad492cb1bee7c7300ddf2f7a5330f4dee7609fa118df16b8cbf943e9ed912cf08ef0772e3c9d16bcbafd6df019e8d03649edeb59","ssdeep":"96:xpvdjqqU6d4V2hnsfYqTjcNLuWwLKSpfrFY9sL0LvwUFGN41ZOMJb9FqB6XCSaj:xpF2qUk4EhnsfYqTjlWMQ9yN4bOMJw6a","tlshash":"d8c1fb05d6022046623bd2b86ff24709e3a69043e702067d7fdd65988ffa068d672fed","first_seen":"2026-05-29T12:27:40.431064Z","last_seen":"2026-05-29T12:27:40.431064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/js/antihack.js","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:15.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/src/js/antihack.js HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:46:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2588\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2588,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2582), with no line terminators","md5":"0ac3351fe7ec161a6e55cbec5e998402","sha1":"869c903c05f0065daa9a6e9ccae754c6d6195e8c","sha256":"17dfebb7b8dbedef3e028141a045216c8315821eeefcd96a4144ed8169688766","sha512":"813c2bc41feff36036d0cba4e5ed7ab013c46cbfd8d30f7d20e0b15082cbfbb86ff7e4871ee6c1dc6d59a05f99ec5f35ed610130c50687665f8d6c17c04b0918","ssdeep":"","tlshash":"d751a0683e8660c593c11b5a763e3092e87a4dfd37cc0c1b8115b9513df1d29d8a6673","first_seen":"2026-05-29T12:27:40.432228Z","last_seen":"2026-05-29T12:27:40.432228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/img/background.webp","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:15.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/src/img/background.webp HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/src/css/f8b2_v94x.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:45:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 226795\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":226795,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1920x1080, components 3","md5":"8c836a87fbc9c23b4485489b42ffbd81","sha1":"0d048723d34cd95d53bea14f4d437c93b8f46c6a","sha256":"6536b70bd8cef1f8b21796002724f7d723c8288f90371264753df8290629aad2","sha512":"6386b8c4c2330e0306fdfa0a5425a310e59c75d0d7fc43ce8971f9aeccc0fb92eec53393583d7cfc4c942da6c5ee60de71efdab5faf5e96a2b20eedb031b8364","ssdeep":"6144:Rho8nXyYzLMMKFt1n90yCQXgi+WpoXNrDBZez:R68nFgMKFt190D3ZFDB8","tlshash":"4d24122ead2ed6d7c5ec033061e592b5ddbd503b9a23b09631d80b6211f2b16e42ccde","first_seen":"2025-03-28T03:53:53.195982Z","last_seen":"2026-06-06T17:35:51.374543Z","times_seen":84,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":92,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T12:27:15.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLocation: https://mosaicline.click/afirmacionuserr/\r\nContent-Length: 289\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2720,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":198,"dns":7,"connect":92,"send":0,"wait":92,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/img/logomain.png","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:15.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/src/img/logomain.png HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:45:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8785\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 578 x 97, 8-bit/color RGBA, non-interlaced","md5":"fab958c83feaabb4ef66601e9fe5930c","sha1":"dea68f6415bb3e3a84cf55ddc8dd53852ef3191f","sha256":"bbd238143d7b42bf9da7b1f4bf9d18f2762a66dd2947ec8dcb1730d98bd4909e","sha512":"d7105175f9b41b86e111809519549825013d1eabb31a90891e03b4e87ff5949f332a7921a33e48381cdda730c6988d5944ec67b4ae4018b844027f5015d89921","ssdeep":"192:t6oxwb4gx+BC5JksslPRiuEFzAnuEDb/YB/ku2hxu5iLhtKI21:t6CwbTWC5ywuEFzAu870/kHhxG","tlshash":"cc02afd497d00de5e31befb3b4377b1aa410283b9bfc4656ac5c99bb25d31003864903","first_seen":"2025-06-10T20:44:03.423497Z","last_seen":"2026-05-29T12:27:40.434406Z","times_seen":6,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":191,"dns":1,"connect":94,"send":0,"wait":92,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mosaicline.click/afirmacionuserr/src/img/logo.png","fqdn":"mosaicline.click","domain":"mosaicline.click","tld":"click"},"ip":{"addr":"147.135.78.182","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mosaicline.click/afirmacionuserr/","date":"2026-05-29T12:27:15.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mosaicline.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 00:42:59 GMT","end":"Sun, 23 Aug 2026 00:42:58 GMT"},"fingerprint":{"sha1":"AB:DF:92:95:D5:FC:2C:41:4B:A4:63:0C:18:FD:16:A1:7C:66:D6:A8","sha256":"61:C1:94:27:E8:64:F7:CB:D7:E2:8C:0D:F9:AC:F3:09:B6:10:3C:32:6A:8D:D3:57:03:45:25:2D:5E:AE:BD:79"}}},"request":{"raw":"GET /afirmacionuserr/src/img/logo.png HTTP/1.1\r\nHost: mosaicline.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mosaicline.click/afirmacionuserr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 12:27:15 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 25 May 2026 20:45:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 32162\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1832 x 298, 8-bit/color RGBA, non-interlaced","md5":"1a067e3ee6cb53c424e25e21b4c72dbb","sha1":"1252efb2a74fae14ebe337603174e4e3262c32ca","sha256":"2db48f3bb76be4f40a324525d4e872882f59208122f0ea552759eb76beb97d3a","sha512":"a3feb39e14c7a4a3f61bbd0a256222593d19b17ad17a3b29f349b93f4cd33fa72443cd6a27809305126f50f66e18d846718f91256ebc730a741191c020c2ea03","ssdeep":"768:Xfe6Oa57T0az5vBXwfWjkTO8HgC1EXMTYlE8O6L:XNOwv0az5vBCHgR","tlshash":"9ce2e1674994d59d189772de213420c69b56ae3eca35fccfa58acf1d811ce98a3c2cd0","first_seen":"2023-05-08T20:32:27Z","last_seen":"2026-06-06T17:35:51.373333Z","times_seen":569,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":193,"dns":1,"connect":96,"send":0,"wait":93,"receive":94,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"mosaicline.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}