| tierradeenigmas.com.ar/Office/docusign/docusign |  200.80.43.58 | 301 Moved Permanently | 264 B |
URL User Request GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign IP200.80.43.58:443
CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeHTML document, ASCII text Hashfba51b4d5fe8aa37815aeaee6521c520 4afbd76c0c96c609370bf9eda7290e6aed513682 f8d94eb4ccc12e416bd49e90e91c288fd649841b322dcede01f038be22a98f29
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | OpenPhish | phishing | DocuSign | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:02 GMT
Server: Apache
Location: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Content-Length: 264
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/ | 200.80.43.58 | 200 OK | 44 kB |
URL User Request GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/ IP200.80.43.58:443
CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeHTML document, ASCII text, with very long lines (14719), with CRLF line terminators Hashc8a9b8a829b3f058f264e6ec99a234b0 46a74962ed162400fceb7cf4238a93ecaaf5fdec 32921131ad48f6d4c9d43eab53cfba1767119548ce8e2d3e358382b8575f3930
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | OpenPhish | phishing | DocuSign | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/ HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:03 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationTextField.css | 200.80.43.58 | 200 OK | 3.1 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationTextField.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash997fda9f352033c20b5fbb8fc361537c 6d990ab98aac845c6f4ace678f89f69fda747f64 23d0712c0ed03b1f4636061df39f42471c13e811d5373ff7875a9b7821743be1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/SpryValidationTextField.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:03 GMT
Server: Apache
Last-Modified: Tue, 15 Jul 2014 14:04:04 GMT
Accept-Ranges: bytes
Content-Length: 3122
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationPassword.css | 200.80.43.58 | 200 OK | 2.4 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationPassword.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeASCII text, with CRLF line terminators Hash97faad16686bef5246d0953311bffdc8 2047de26c7ee7816c2fa0fefefe985e217e012c5 e87010b14aca80b1c1f3f2efec982d906303e81f618b7d27dc2fdf281ba44757
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/SpryValidationPassword.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:03 GMT
Server: Apache
Last-Modified: Tue, 15 Jul 2014 14:06:16 GMT
Accept-Ranges: bytes
Content-Length: 2426
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/AppTile.css | 200.80.43.58 | 200 OK | 1.4 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/AppTile.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hash9b700990a3e3d707078daaa2ce3a67de 6f367e85d22e6e31f11f2153b36d793a61a6fb4b 1e433631dd88e2b7c65a36d80acd0134287a5b6effc8a68a6a3f8bfe619928d1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/AppTile.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Sun, 12 Jun 2016 11:08:00 GMT
Accept-Ranges: bytes
Content-Length: 1380
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/GeminiHomeV2.css | 200.80.43.58 | 200 OK | 1.6 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/GeminiHomeV2.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeASCII text, with very long lines (1574), with no line terminators Hash12a1397f746f615ad7fc17e2336f95fa 96f7495f6715e64fddd4a691da3bfb339390bb13 a8b6798721ae62801a74027daff7b0d4f0d10034cb46bc492fc995553c598c92
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/GeminiHomeV2.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Sun, 12 Feb 2017 03:30:50 GMT
Accept-Ranges: bytes
Content-Length: 1574
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/conciergehelper.css | 200.80.43.58 | 200 OK | 5.2 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/conciergehelper.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeUnicode text, UTF-8 text, with very long lines (5198), with no line terminators Hash54599d7c2ac4c08c1b52a1bf953b2080 c15251df5bcea1b665e401b5c73935157cb5b361 e3dd3d2eb577e0976c6c3bb2a597839a4b50019e6f34767d692b371aa6a87dd7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/conciergehelper.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Sat, 11 Jun 2016 22:43:38 GMT
Accept-Ranges: bytes
Content-Length: 5200
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/EmbeddedFonts.css | 200.80.43.58 | 200 OK | 3.7 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/EmbeddedFonts.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeASCII text, with very long lines (3698), with no line terminators Hasha255b5893caa2f0134dad55e78c92a38 0c9d48f261aa67a99ce2c1fc38d82aa0127f10b5 ee63a0504d463e639fd21abb1a96d909f530d309b679e6ab953155cf58f07a84
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/EmbeddedFonts.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Sat, 11 Jun 2016 22:43:38 GMT
Accept-Ranges: bytes
Content-Length: 3698
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2coremincss_ba45585d.css | 200.80.43.58 | 200 OK | 32 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2coremincss_ba45585d.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeUnicode text, UTF-8 text, with very long lines (31627), with no line terminators Hasha134e23722c4ebf0df81f0056107ac3d e0a44ced7838d1ab036d5cdce4522ad284cb96b8 7203ea431e00ea57bbbeef3d0d86e71660c6cf089ed83f7c9bda8d3c7f15cea8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellg2coremincss_ba45585d.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Sat, 11 Jun 2016 22:43:38 GMT
Accept-Ranges: bytes
Content-Length: 31917
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/data.css | 200.80.43.58 | 200 OK | 14 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/data.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeASCII text, with very long lines (13962), with no line terminators Hash3834c91ca01e90c889eb0e78f4b745cf 25b9802e17bed51fb6b06961c549fd165fbbe9d9 8a1687e9cc74a616cd14fcb8dac9bc3d901765d7d4d9644183b406f4a0cc155d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/data.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Sat, 11 Jun 2016 22:43:38 GMT
Accept-Ranges: bytes
Content-Length: 13962
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/jquery.ddslick.min.js | 200.80.43.58 | 200 OK | 7.2 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/jquery.ddslick.min.js IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (7149), with no line terminators Hashf0dc534351e239e07d258adcde7a63cd 166ee9ed6ce4ed51b329488cbcfe5d882a1cdbd7 62fbcafc088683257df72b1024258e899e138bfe56e97ae3c7da39312f77cb49
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/jquery.ddslick.min.js HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Wed, 23 Apr 2014 02:03:00 GMT
Accept-Ranges: bytes
Content-Length: 7156
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15.css | 200.80.43.58 | 200 OK | 92 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeUnicode text, UTF-8 text, with very long lines (65280), with no line terminators Hashc58b1f34b1da58db8d7ac884cc43c49b 74dc13f8df26e6667a8d56cb1631f7c10835e7a7 a79d12b1ece73120a07168f3a409515e43736055e7d40a9daf4f8d619e417a0b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/MasterStyles15.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Mon, 13 Jun 2016 11:48:22 GMT
Accept-Ranges: bytes
Content-Length: 91849
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/jquery.min.js | 200.80.43.58 | 200 OK | 95 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/jquery.min.js IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32769), with CRLF line terminators Hasha13f7f208ba534681deadb1ec7a2e54a 3f51e2eecfa88c61e1200a48ed14f2cdda98ed87 d72fcb8924d1e14dbd4b04aff994c1183ee86c620f0aaac034f75fc508548220
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/jquery.min.js HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
Last-Modified: Wed, 23 Apr 2014 02:03:00 GMT
Accept-Ranges: bytes
Content-Length: 94843
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationPassword.js | 200.80.43.58 | 200 OK | 21 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationPassword.js IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashd6be38fb42c2e9618c9d5f2664078c19 77f553236f588cece0fe2be4859e8f3220231a1f 3df1b7719a1aa90d70ae337b76b6253b01ede9afa038b290498c3abf4ab54027
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/SpryValidationPassword.js HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:05 GMT
Server: Apache
Last-Modified: Tue, 15 Jul 2014 14:06:16 GMT
Accept-Ranges: bytes
Content-Length: 20828
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationTextField.js | 200.80.43.58 | 200 OK | 78 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/SpryValidationTextField.js IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeJavaScript source, ASCII text, with very long lines (430), with CRLF line terminators Hash7947cb5a92373e747f786adfe1d49356 51165a72a6437ea17dda2afc64dbd7624cf46a36 69e875128adeedbc8aa1221b7ebffb20b484685964f4ab9a9772ce2146e52d48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/SpryValidationTextField.js HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:05 GMT
Server: Apache
Last-Modified: Tue, 15 Jul 2014 14:04:04 GMT
Accept-Ranges: bytes
Content-Length: 77624
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15MVC.css | 200.80.43.58 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15MVC.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/MasterStyles15MVC.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Set-Cookie: PHPSESSID=fbba8915341329cab572f270f2c0e40e; path=/
Location: https://www.tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15MVC.css
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2pluscss_baae2042.css | 200.80.43.58 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2pluscss_baae2042.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellg2pluscss_baae2042.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Set-Cookie: PHPSESSID=8861a36718bed0e65be5be19be19c549; path=/
Location: https://www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2pluscss_baae2042.css
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2corecss_11377998.css | 200.80.43.58 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2corecss_11377998.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellg2corecss_11377998.css HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:04 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Set-Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3; path=/
Location: https://www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2corecss_11377998.css
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/images/social_auth_providers.png | 200.80.43.58 | 200 OK | 4.1 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/images/social_auth_providers.png IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typePNG image data, 356 x 36, 8-bit/color RGBA, non-interlaced Hashd432c2a546362d29f64f0fe4407a8cb0 c8e8cce4505a323a959763971b09284a71900517 fc38767c5270e458fa2433d18b22354752e1d7173d7f0a21e4f4b13e0aae5b33
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/images/social_auth_providers.png HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:12 GMT
Server: Apache
Last-Modified: Thu, 09 Feb 2017 13:44:02 GMT
Accept-Ranges: bytes
Content-Length: 4056
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/images/docusign.png | 200.80.43.58 | 200 OK | 7.6 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/images/docusign.png IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typePNG image data, 325 x 92, 8-bit/color RGBA, non-interlaced Hash1059986618539574ca4fa0bcfd699006 c311d67be262f180bfc21053e0a85bd719eee11a fa2776137cbda7fb85aaa56be710f14e5d3d18e231756cfbe283a2938e7d6620
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/images/docusign.png HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:12 GMT
Server: Apache
Last-Modified: Fri, 10 Feb 2017 00:58:20 GMT
Accept-Ranges: bytes
Content-Length: 7635
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-SemiLight-final.woff |  104.73.227.103 | 400 Bad Request | 198 B |
URL GET HTTP/2prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-SemiLight-final.woff IP104.73.227.103:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerMicrosoft Corporation Subject*.msocdn.com Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84 ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT
File typeASCII text, with no line terminators Hash55c6c432d44fd87c445747de41d7031d b3a7e53d583c0562cc52c1e2fccffb43f4db78ba 74a37d6daa206ddce0560021daca8e302d837cb0a36ca538c722d670e07bca82
GET /16.00.1279.006/en-US/css/webfonts/SegoeUI-SemiLight-final.woff HTTP/1.1
Host: prod.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tierradeenigmas.com.ar
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
x-msedge-ref: 02gQeZgAAAADSpLCUiHw/Qowv1p7piwvtQU1TMjMxMDMyNjA1MDQ5AEVkZ2U=
content-length: 198
date: Tue, 16 Apr 2024 04:55:54 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Light-final.woff | 104.73.227.103 | 400 Bad Request | 198 B |
URL GET HTTP/2prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Light-final.woff IP104.73.227.103:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerMicrosoft Corporation Subject*.msocdn.com Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84 ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT
File typeASCII text, with no line terminators Hashb6bad408758aa8a36203a87a5ef4c1d8 9140d5382f800f9ea4ead63e6293949922752460 6359e6c9c6a3c49cf518deb98584e3ff159522ab7cfc7f87cbe3e6b19057ce1f
GET /16.00.1279.006/en-US/css/webfonts/SegoeUI-Light-final.woff HTTP/1.1
Host: prod.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tierradeenigmas.com.ar
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
x-msedge-ref: 02gQeZgAAAAA39U5HH3F9Rb4Ku3CSKMVyQU1TMjMxMDMyNjA0MDE3AEVkZ2U=
content-length: 198
date: Tue, 16 Apr 2024 04:55:54 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Light-final.ttf | 104.73.227.103 | 400 Bad Request | 198 B |
URL GET HTTP/2prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Light-final.ttf IP104.73.227.103:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerMicrosoft Corporation Subject*.msocdn.com Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84 ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT
File typeASCII text, with no line terminators Hash8e56abdfcb65ef3642d40a0e6399d90d aff8bb3d929fcee0ddb40ac142201e798ea0771c f87b0e569703beb846c4abf7f09cec0ab195c103264a8879a0e79d23ae09545d
GET /16.00.1279.006/en-US/css/webfonts/SegoeUI-Light-final.ttf HTTP/1.1
Host: prod.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tierradeenigmas.com.ar
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 400 Bad Request
x-msedge-ref: 02gQeZgAAAADx6bx7Ue0dT4n6n0We0LlGQU1TMjMxMDMyNjAyMDMxAEVkZ2U=
content-length: 198
date: Tue, 16 Apr 2024 04:55:54 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-SemiLight-final.ttf | 104.73.227.103 | 400 Bad Request | 198 B |
URL GET HTTP/2prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-SemiLight-final.ttf IP104.73.227.103:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerMicrosoft Corporation Subject*.msocdn.com Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84 ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT
File typeASCII text, with no line terminators Hash58b709562d1cd50116577dbab7260886 f3418c82c30f2f3d3fd3871952a885457d69daaf 0886e5340ff09b83aa1e8a9fe9cca352fe20c996046b166b387faabfb09e1270
GET /16.00.1279.006/en-US/css/webfonts/SegoeUI-SemiLight-final.ttf HTTP/1.1
Host: prod.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tierradeenigmas.com.ar
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 400 Bad Request
x-msedge-ref: 02gQeZgAAAAAkUbY9dUeHS6F7vI26HnKGQU1TMjMxMDMyNjA0MDAzAEVkZ2U=
content-length: 198
date: Tue, 16 Apr 2024 04:55:54 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff | 200.80.43.58 | 200 OK | 22 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeWeb Open Font Format, TrueType, length 21956, version 1.1 Hash3eb14f3838ada50e10f062a895c3b9cf f570b2fe0688332cf8c4a9127db25433d9a1ebaa 90556675373ea9ed1d0e9b5678426d69296b6801c906ca378bb426aa3d6acdc3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:13 GMT
Server: Apache
Last-Modified: Wed, 23 Apr 2014 02:03:00 GMT
Accept-Ranges: bytes
Content-Length: 21956
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: font/woff
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/images/apple-touch-icon-72x72.png | 200.80.43.58 | 200 OK | 1.4 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/images/apple-touch-icon-72x72.png IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash98c8c7ebd75fd18ccc345de4a11031b0 369daf8069a88e9ff76173e983d5c7435eff2632 6c519b7788593316c4ebd54d26e2fcdda5e20bd7d6ed59d6e3ea2078bf5ac308
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/images/apple-touch-icon-72x72.png HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:13 GMT
Server: Apache
Last-Modified: Fri, 10 Feb 2017 01:16:28 GMT
Accept-Ranges: bytes
Content-Length: 1391
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
|
|
| prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Regular-final.woff | 104.73.227.103 | 400 Bad Request | 198 B |
URL GET HTTP/2prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Regular-final.woff IP104.73.227.103:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerMicrosoft Corporation Subject*.msocdn.com Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84 ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT
File typeASCII text, with no line terminators Hash1d5585e5b22b8b00b5c0f3e4e7aaff27 452e72fa973757a824f995b3f6e516fcb3938b65 551f597b3588c74c7364b297c41d3e3fb6ed0fbf0e8fe8dee0544c943d277caf
GET /16.00.1279.006/en-US/css/webfonts/SegoeUI-Regular-final.woff HTTP/1.1
Host: prod.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tierradeenigmas.com.ar
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
x-msedge-ref: 02gQeZgAAAACfTuu9uFKGQaroKq8Gkpj+QU1TMjMxMDMyNjA0MDAzAEVkZ2U=
content-length: 198
date: Tue, 16 Apr 2024 04:55:54 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Regular-final.ttf | 104.73.227.103 | 400 Bad Request | 198 B |
URL GET HTTP/2prod.msocdn.com/16.00.1279.006/en-US/css/webfonts/SegoeUI-Regular-final.ttf IP104.73.227.103:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerMicrosoft Corporation Subject*.msocdn.com Fingerprint94:A8:3B:DF:A7:1A:45:D5:24:A8:8D:99:2A:4E:B6:4C:C9:FE:EA:84 ValidityWed, 03 May 2023 20:27:15 GMT - Sat, 27 Apr 2024 20:27:15 GMT
File typeASCII text, with no line terminators Hashda566d57fd8db0a4cf763a22e191a211 dc0231fd3690015593c127ce537877672c4129c0 6cd1fe7840267aa1ad240f34b8d19351b3632a4397ee3d4868f10146e1ce4c9e
GET /16.00.1279.006/en-US/css/webfonts/SegoeUI-Regular-final.ttf HTTP/1.1
Host: prod.msocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tierradeenigmas.com.ar
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 400 Bad Request
x-msedge-ref: 02gQeZgAAAADWbuH6SaVLSL9euiGojDV7QU1TMjMxMDMyNjA2MDQ1AEVkZ2U=
content-length: 198
date: Tue, 16 Apr 2024 04:55:54 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/assets/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff | 200.80.43.58 | 200 OK | 22 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/assets/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeWeb Open Font Format, TrueType, length 21956, version 1.1 Hash3eb14f3838ada50e10f062a895c3b9cf f570b2fe0688332cf8c4a9127db25433d9a1ebaa 90556675373ea9ed1d0e9b5678426d69296b6801c906ca378bb426aa3d6acdc3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/assets/cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:13 GMT
Server: Apache
Last-Modified: Wed, 23 Apr 2014 02:03:00 GMT
Accept-Ranges: bytes
Content-Length: 21956
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/home_bkgd_1.png | 200.80.43.58 | 200 OK | 22 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/css/home_bkgd_1.png IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1367x840, components 3 Hashef4ac468dabdd214d220eec6be716215 1b9b21bed6c063265ff77c3077e60040072e1217 b21a9de9414be9988efb7b56c4d2ab101aee02ebf6e80a16bfa43dfa7234da9b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/home_bkgd_1.png HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/css/GeminiHomeV2.css
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:13 GMT
Server: Apache
Last-Modified: Sat, 11 Jun 2016 22:33:48 GMT
Accept-Ranges: bytes
Content-Length: 22035
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/images/favicon.ico | 200.80.43.58 | 200 OK | 7.4 kB |
URL GET HTTP/1.1tierradeenigmas.com.ar/Office/docusign/docusign/images/favicon.ico IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel Hash7df40cad0af91085e6e9518c9461c8b9 45324c7adaf1f82d9da1d3bf904c5167c621835c 81ffa8669d5046553dc90fbe6d6bb844c68636243af0588afc3772aacbe4cdbc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/images/favicon.ico HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 04:56:14 GMT
Server: Apache
Last-Modified: Thu, 09 Feb 2017 13:49:08 GMT
Accept-Ranges: bytes
Content-Length: 7406
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/x-icon
|
|
| tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff? | 200.80.43.58 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff? IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff? HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/css/EmbeddedFonts.css
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:12 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf? | 200.80.43.58 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf? IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf? HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/css/EmbeddedFonts.css
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:17 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| tierradeenigmas.com.ar/Office/docusign/docusign/css/shellwofficons_f991c945.woff | 200.80.43.58 | | 0 B |
URL GET tierradeenigmas.com.ar/Office/docusign/docusign/css/shellwofficons_f991c945.woff IP200.80.43.58:0
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign | | Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellwofficons_f991c945.woff HTTP/1.1
Host: tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2coremincss_ba45585d.css
Cookie: PHPSESSID=e5c4c5380c5cff008268457112443cb3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 04:56:21 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellwofficons_f991c945.woff
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellwofficons_f991c945.woff |  0.0.0.0 | | 0 B |
URL GET www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellwofficons_f991c945.woff IP0.0.0.0:0
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellwofficons_f991c945.woff HTTP/1.1
Host: www.tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tierradeenigmas.com.ar
Referer: https://tierradeenigmas.com.ar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15MVC.css | 200.80.43.58 | 404 Not Found | 0 B |
URL GET HTTP/1.1www.tierradeenigmas.com.ar/Office/docusign/docusign/css/MasterStyles15MVC.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/MasterStyles15MVC.css HTTP/1.1
Host: www.tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tierradeenigmas.com.ar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 04:56:07 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.tierradeenigmas.com.ar/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=984bc269fa2a779fcc5bd8746b0a98e3; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2pluscss_baae2042.css | 200.80.43.58 | 404 Not Found | 0 B |
URL GET HTTP/1.1www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2pluscss_baae2042.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellg2pluscss_baae2042.css HTTP/1.1
Host: www.tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tierradeenigmas.com.ar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 04:56:08 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.tierradeenigmas.com.ar/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=4d1a3da835618aa56f8b3a0ef1761eef; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf | 200.80.43.58 | 404 Not Found | 33 kB |
URL GET HTTP/1.1www.tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.ttf HTTP/1.1
Host: www.tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tierradeenigmas.com.ar
Referer: https://tierradeenigmas.com.ar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 04:56:19 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.tierradeenigmas.com.ar/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=ddf994f0b70b9de31af0ffdb262f58a0; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff | 200.80.43.58 | 404 Not Found | 33 kB |
URL GET HTTP/1.1www.tierradeenigmas.com.ar/16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /16.00.1279.006/en-US/css/Fabric/0.10.3/fonts/office365icons.woff HTTP/1.1
Host: www.tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tierradeenigmas.com.ar
Referer: https://tierradeenigmas.com.ar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 04:56:15 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.tierradeenigmas.com.ar/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=ea2c373f91bb0986dbfd208a6c493a05; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2corecss_11377998.css | 200.80.43.58 | 404 Not Found | 0 B |
URL GET HTTP/1.1www.tierradeenigmas.com.ar/Office/docusign/docusign/css/shellg2corecss_11377998.css IP200.80.43.58:443
Requested byhttps://tierradeenigmas.com.ar/Office/docusign/docusign/ CertificateIssuerLet's Encrypt Subjectwebmail.tierradeenigmas.com.ar Fingerprint05:04:8F:7A:30:1A:1C:A5:EB:4A:30:74:79:FD:E7:8D:66:53:1A:B9 ValidityMon, 08 Apr 2024 05:45:44 GMT - Sun, 07 Jul 2024 05:45:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Office/docusign/docusign/css/shellg2corecss_11377998.css HTTP/1.1
Host: www.tierradeenigmas.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tierradeenigmas.com.ar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 04:56:08 GMT
Server: Apache
X-Powered-By: PHP/7.4.12
Vary: Accept-Encoding,Cookie
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://www.tierradeenigmas.com.ar/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=16ca97b07437c1dae1910acab1cbc692; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|