{"report_id":"fd1a2162-63dd-4d22-a750-96f4ec70c04b","version":6,"status":"done","tags":["dyndns"],"date":"2026-03-22T00:39:38Z","url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"title":"Iniciar sesión","dom":{"size":2297,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e3af88adb8656cdd265cc84cb34b346d","sha1":"5150f12710db1f81848d2cdc4f337b44d211d25b","sha256":"35679c68385885231efad931e22e2f8e5c1592a80337da595c91eac0f5b1203d","sha512":"b38e65844a50b9cf480b6f8c6d3648081787fea4107216a8ef8372bfce068461611b80f7b535c0ea70d8097f775657ab0cb5fb3897881c30d75688958537fadb","ssdeep":"","tlshash":"69413f2589991c0df12bd2a0fcc325cc22369400b76f4eada96e70e4d3ceea94937694","dom_hash":"domhash7b771474265c2375e6644d6ee3386126","first_seen":"2026-03-22T00:39:39.647605Z","last_seen":"2026-03-22T00:39:39.647605Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T00:39:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2026-03-21T17:25:25.704542Z","last_seen":"2026-03-21T17:25:25.704542Z","alert_count":24,"request_count":6,"received_data":2758956,"sent_data":3126,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/im/logo1.png","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","date":"2026-03-22T00:39:16.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.formulario-davivienda-1ed9970ba3wf3.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:35:05 GMT","end":"Mon, 15 Jun 2026 01:35:04 GMT"},"fingerprint":{"sha1":"C3:14:46:7D:BB:53:73:AF:3D:DA:38:57:4A:EC:A2:35:15:AA:D8:EB","sha256":"1C:42:AA:4B:A2:72:45:05:C2:6F:02:D3:58:B0:C5:60:D2:E2:DB:DA:68:F3:C3:FE:E5:B3:80:E1:6E:EA:E2:70"}}},"request":{"raw":"GET /0270b8f9/im/logo1.png HTTP/1.1\r\nHost: formulario-davivienda-1ed9970ba3wf3.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Mar 2026 00:39:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 23 Jun 2024 19:10:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 57139\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":57139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 478 x 86, 8-bit/color RGBA, non-interlaced","md5":"c72f494d3ea87d47f6b96facc934c1c8","sha1":"30bd04c697479c2ecf3f070abad64a16dbb8b8f5","sha256":"ca76fc98b41a124c84872af95ada3c5f071ff7cf9dc82cd8f87868a92b15a524","sha512":"9c9d4aedfa1fc35759344f68e48cfe61280bfac573462992d4fe293dca2309093e074e66c5ead62a3ad38628e70902eeea0a47679b98415901e5feae9ac20512","ssdeep":"1536:cW0H4lL/DqbOawLarSPdCYXXIQAm/RhwxWI:cW0HujDsO5L/CYXPzp6h","tlshash":"634302192f781d7ed628527dbdc28e589e8e34c8501bdc18a13cc9ba5ed35cafcaa141","first_seen":"2026-03-22T00:39:39.650543Z","last_seen":"2026-03-22T00:39:39.650543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/im/logob.png","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","date":"2026-03-22T00:39:16.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.formulario-davivienda-1ed9970ba3wf3.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:35:05 GMT","end":"Mon, 15 Jun 2026 01:35:04 GMT"},"fingerprint":{"sha1":"C3:14:46:7D:BB:53:73:AF:3D:DA:38:57:4A:EC:A2:35:15:AA:D8:EB","sha256":"1C:42:AA:4B:A2:72:45:05:C2:6F:02:D3:58:B0:C5:60:D2:E2:DB:DA:68:F3:C3:FE:E5:B3:80:E1:6E:EA:E2:70"}}},"request":{"raw":"GET /0270b8f9/im/logob.png HTTP/1.1\r\nHost: formulario-davivienda-1ed9970ba3wf3.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Mar 2026 00:39:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 23 Jun 2024 20:34:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13517\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 586 x 118, 8-bit/color RGBA, non-interlaced","md5":"c2bd19cbe260183b36a54066fb5746b7","sha1":"8e800930cd1bead1d967eff3ebaf56041b882478","sha256":"769b3637dea92ed85b53e6aa29bf4bde00647dfa9c7be181d02f85e00d11b3e3","sha512":"4a2036dfd03c7dfa35967c364fa12a83b7fda46ad1a6583319e1707dbe52e0328ccc548a73d34cd4999c35702d8e7283b1973d93e421cf5d59469094712efe35","ssdeep":"384:HSTsd8qoWaV9ff6tRNVnRFHnyEPFqitMFAmm:eWaVghxyE9qAmm","tlshash":"03525ca097b0357b92344170f6c6a0261a067fb398c4dc0a669fb4372fb2a3c5d75cd5","first_seen":"2026-03-22T00:39:39.652704Z","last_seen":"2026-03-22T00:39:39.652704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":366,"dns":1,"connect":177,"send":0,"wait":176,"receive":176,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/im/logoc.png","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","date":"2026-03-22T00:39:16.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.formulario-davivienda-1ed9970ba3wf3.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:35:05 GMT","end":"Mon, 15 Jun 2026 01:35:04 GMT"},"fingerprint":{"sha1":"C3:14:46:7D:BB:53:73:AF:3D:DA:38:57:4A:EC:A2:35:15:AA:D8:EB","sha256":"1C:42:AA:4B:A2:72:45:05:C2:6F:02:D3:58:B0:C5:60:D2:E2:DB:DA:68:F3:C3:FE:E5:B3:80:E1:6E:EA:E2:70"}}},"request":{"raw":"GET /0270b8f9/im/logoc.png HTTP/1.1\r\nHost: formulario-davivienda-1ed9970ba3wf3.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Mar 2026 00:39:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 23 Jun 2024 20:49:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 27672\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 814 x 430, 8-bit/color RGBA, non-interlaced","md5":"60680854736096a3f9bcfc380b15ef88","sha1":"acc3c0d8d8609162e293a6db469714f1e05520ca","sha256":"91344969a04db65dd070f3dafa7345fcd8f48143eb05deebb913b09e3b734309","sha512":"07eba8b3d646abb8ebe452badb42d6a3784554b16a8ea9c962ee2478af5b10cec74525bceb85e987bdb052cc81a5a0018befa8d8aec8a4487a0e1864a7ddcaef","ssdeep":"768:hWsujtJPc1AWiNy205r6GEN30vjol3d38Xy6UfDz:hWljtJPcFowS34y6UfP","tlshash":"1ec2172bc7761477e222063a2452664609650eeba8bdf80964c77c1f17afffc2e76c01","first_seen":"2026-03-22T00:39:39.655251Z","last_seen":"2026-03-22T00:39:39.655251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":358,"dns":1,"connect":177,"send":0,"wait":173,"receive":173,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/im/logo.png","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","date":"2026-03-22T00:39:16.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.formulario-davivienda-1ed9970ba3wf3.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:35:05 GMT","end":"Mon, 15 Jun 2026 01:35:04 GMT"},"fingerprint":{"sha1":"C3:14:46:7D:BB:53:73:AF:3D:DA:38:57:4A:EC:A2:35:15:AA:D8:EB","sha256":"1C:42:AA:4B:A2:72:45:05:C2:6F:02:D3:58:B0:C5:60:D2:E2:DB:DA:68:F3:C3:FE:E5:B3:80:E1:6E:EA:E2:70"}}},"request":{"raw":"GET /0270b8f9/im/logo.png HTTP/1.1\r\nHost: formulario-davivienda-1ed9970ba3wf3.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Mar 2026 00:39:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 30 Jul 2024 18:42:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2655401\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2655401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1436, 8-bit/color RGBA, non-interlaced","md5":"e3eacc2c8b9eaa1c09174e0fb7ae6cc9","sha1":"b7de40ace7172a7b8fa3179ec830436bddc02510","sha256":"8521ef4127fb04c720c90baed95e1dcfea6071430c7404b83924d06116ee6c83","sha512":"464d8f53a6ef15738d7f01324b53f303b6558137978c5dca78c116f5b036267eb25e8cbe0f0cdd62165d1e5d85dc0a4539660bcbf6f47cd854beb6abbfe8fa67","ssdeep":"24576:tgQXuruoIGlw4n/UQz1ulBXzt5AbKPggFslkBc1aCHplP0zIElX3+hWNtQpb0dtc:J+rhIGlw4/UCIzt5qKPgOikE1Hp1REFo","tlshash":"dd252247cc6c382fe15b5c6aca03b1d48678912b72fa9f2faf12e5751a0b0d1f664b11","first_seen":"2026-03-22T00:39:39.658292Z","last_seen":"2026-03-22T00:39:39.658292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2158,"timings":{"blocked":354,"dns":1,"connect":173,"send":0,"wait":174,"receive":1271,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/im/favicon.ico","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","date":"2026-03-22T00:39:16.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.formulario-davivienda-1ed9970ba3wf3.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:35:05 GMT","end":"Mon, 15 Jun 2026 01:35:04 GMT"},"fingerprint":{"sha1":"C3:14:46:7D:BB:53:73:AF:3D:DA:38:57:4A:EC:A2:35:15:AA:D8:EB","sha256":"1C:42:AA:4B:A2:72:45:05:C2:6F:02:D3:58:B0:C5:60:D2:E2:DB:DA:68:F3:C3:FE:E5:B3:80:E1:6E:EA:E2:70"}}},"request":{"raw":"GET /0270b8f9/im/favicon.ico HTTP/1.1\r\nHost: formulario-davivienda-1ed9970ba3wf3.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Mar 2026 00:39:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 30 Jul 2024 20:11:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1406\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"4b4927d3b2a8cab04acade59aedca9f9","sha1":"f1e3cc17fdc86a984baf401ef98903df28e414b7","sha256":"48230ee52e1bd018f51317c56b7cefe65152db3018dc42b074983afa923e0a63","sha512":"6ba9e7c43677413c25c13730bb9466353303ca569b5b2f652665bf86f103739a6ffdb4537786f001c0ab49108c76862bb8e2d99b7b48e442f04c265f9af71a8c","ssdeep":"","tlshash":"912120c9b8a5d43ec0d984f81431db2e843dc700d5e5333ed4da9136a7409dc842431f","first_seen":"2023-06-03T14:42:31Z","last_seen":"2026-05-30T19:12:41.979294Z","times_seen":26,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":1,"connect":176,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"formulario-davivienda-1ed9970ba3wf3.duckdns.org/0270b8f9/","fqdn":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","domain":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"44.248.60.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T00:39:15.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.formulario-davivienda-1ed9970ba3wf3.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 01:35:05 GMT","end":"Mon, 15 Jun 2026 01:35:04 GMT"},"fingerprint":{"sha1":"C3:14:46:7D:BB:53:73:AF:3D:DA:38:57:4A:EC:A2:35:15:AA:D8:EB","sha256":"1C:42:AA:4B:A2:72:45:05:C2:6F:02:D3:58:B0:C5:60:D2:E2:DB:DA:68:F3:C3:FE:E5:B3:80:E1:6E:EA:E2:70"}}},"request":{"raw":"GET /0270b8f9/ HTTP/1.1\r\nHost: formulario-davivienda-1ed9970ba3wf3.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 22 Mar 2026 00:39:15 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 30 Jul 2024 20:12:46 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2356\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a4249bde385c4da43a44f322f333cbfa","sha1":"a843d7698e41dfc8f6690956981a093a116ed278","sha256":"0f2a76fbb1b09522d526cb6592f9d46fe204b0afe7e8df398e3ec3b44b34926f","sha512":"e9662c623a216506d18f7cca276afc9ef520f5814cfd93f6eed1db769afcc5fef90f68946ad640acc49296ea0863db0837782c45b25b1ce90aa955db9cb1bdd7","ssdeep":"","tlshash":"4841202559cb5c0ca16b93a0f8e369c82536a400b32f4a1db85e31f7e38de990973788","first_seen":"2026-03-22T00:39:39.661622Z","last_seen":"2026-03-22T00:39:39.661622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":479,"dns":127,"connect":175,"send":0,"wait":176,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"formulario-davivienda-1ed9970ba3wf3.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}}]}