{"report_id":"0c22d6b5-e388-47e6-8fc4-095c3f3feebe","version":0,"status":"done","tags":[],"date":"2026-10-01T15:58:28Z","url":{"schema":"https","addr":"crese-con-tu-cupo.vercel.app/","fqdn":"crese-con-tu-cupo.vercel.app","domain":"crese-con-tu-cupo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"crese-con-tu-cupo.vercel.app/","fqdn":"crese-con-tu-cupo.vercel.app","domain":"crese-con-tu-cupo.vercel.app","tld":"vercel.app"},"title":"Crédito en Línea - Banco Pichincha","dom":{"size":18410,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7a63c957b4f0fdc50eab5405b8d0b526","sha1":"7b085bf214dfabf443ea832a5653274881884c97","sha256":"25be3631e5d608d9f1d0b520ae40c77e34b6dea0066848fe8e45b504b1a3fad0","sha512":"06be30c9296397a700467c6ac40fedb586575d02cec591de1a20a10cf728b86f796cdf84ea2616c2701d1215859ce56d185d9bca5fa641cd4862e349319b22cf","ssdeep":"192:UrglY2Q3Pq4RS216S+8p/9GE6LXJIHtDghqYWHB1rYqzclN+IeKdgWx65/k5utAX:Urahq7HrKWt+I0qGN0GeYur8uBG","tlshash":"6982a76a56f30471ed93906937eb978a7154d003cd09ce297fde47808fca994a9a3bcc","dom_hash":"domhash360a399007bc73af04ec6f43510ed9ee","first_seen":"2026-10-01T15:24:04.182811Z","last_seen":"2026-10-01T15:58:30.130425Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crese-con-tu-cupo.vercel.app/","fqdn":"crese-con-tu-cupo.vercel.app","domain":"crese-con-tu-cupo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-05T15:58:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"crese-con-tu-cupo.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bancopichincha.com.co","ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"domain_registered":"2010-09-07","domain_rank":1251628,"first_seen":"2013-05-14T12:02:30Z","last_seen":"2026-09-25T00:44:29.741417Z","alert_count":0,"request_count":3,"received_data":1054663,"sent_data":1993,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crese-con-tu-cupo.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-01T15:23:59.57835Z","last_seen":"2026-10-01T15:24:03.375468Z","alert_count":10,"request_count":2,"received_data":19601,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-09-28T22:46:51.328008Z","alert_count":0,"request_count":1,"received_data":74299,"sent_data":663,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crese-con-tu-cupo.vercel.app/","fqdn":"crese-con-tu-cupo.vercel.app","domain":"crese-con-tu-cupo.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff84a5af44799288724bc9978e8a21bb","sha1":"ac0149a318f9b7382f0437ce5e4360ce467fd81f","sha256":"80ebaf6643ba21dcf620ee78f64062ded45fed93d67c121ba355820b7e688210","sha512":"9ad6093f0f9030ae36b17f8522c3ac26485d303aaa7883c0642f3a053d08ed2bc061128ff04619d2545f870ef4eeb084437f1fa8706c4117ecc9bc78327f390f","ssdeep":"96:em9xN5xot4i6HoH82rUnzolMj6yjRCbfecCn1GMCweGLSKtw0tKAyZ583oK2BH:r5utAIc7QMG0obGhn0xweYw0tKr83+BH","tlshash":"b0b1ed7f36b309304edbb46a27df978a703091472c40ca66fb7d83501f98e4466a6be4","size":5155,"data":"","first_seen":"2026-09-30T15:41:11.956246Z","last_seen":"2026-10-01T15:58:30.136815Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bancopichincha.com.co/documents/37198/38855/Cr%C3%A9dito+de+Tesorer%C3%ADa_Desktop.jpg/f06f47e3-c719-9841-58ca-73bbf00a19cd?t=1777043057597","fqdn":"www.bancopichincha.com.co","domain":"bancopichincha.com.co","tld":"com.co"},"ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crese-con-tu-cupo.vercel.app/","date":"2026-10-01T15:57:59.755Z","timestamp":1790870279755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bancopichincha.com.co","organization":""},"issuer":{"commonName":"GeoTrust EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:00:27:4F:B1:15:FE:48:EA:5A:BE:12:86:F4:B5:ED:BC:5D:D1:61","sha256":"7A:B2:4B:F7:4D:5C:8A:CD:58:97:CE:9C:08:2C:99:FB:2B:47:30:5B:79:9B:84:1A:5F:BB:91:E9:D1:EE:9A:C5"}}},"request":{"raw":"GET /documents/37198/38855/Cr%C3%A9dito+de+Tesorer%C3%ADa_Desktop.jpg/f06f47e3-c719-9841-58ca-73bbf00a19cd?t=1777043057597 HTTP/1.1\r\nHost: www.bancopichincha.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crese-con-tu-cupo.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Thu, 01 Oct 2026 15:58:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 243495\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 24 Apr 2026 15:04:17 GMT\r\nCache-Control: must-revalidate, max-age=600\r\nContent-Disposition: inline; filename*=UTF-8''Cr%C3%A9dito%20de%20Tesorer%C3%ADa_Desktop.jpg\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://bancopichincha.ws https://www.googletagmanager.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google-analytics.com https://s.adroll.com https://googleads.g.doubleclick.net https://d.adroll.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://bancopichincha.ws https://cdn.jsdelivr.net 'unsafe-inline'; img-src 'self' data: https://googleads.g.doubleclick.net https://www.google.com https://www.facebook.com https://www.google.com.co https://d.adroll.com https://pixel.tapad.com https://match.adsrvr.org; font-src 'self' data: https://fonts.gstatic.co https://fonts.gstatic.com; connect-src 'self' https://cdn.jsdelivr.net https://www.google.com https://ad.doubleclick.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com.co https://d.adroll.com https://analytics.google.com; media-src 'self'; object-src 'none'; frame-src 'self' https://bancopichincha.ws https://www.googletagmanager.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google-analytics.com https://s.adroll.com https://googleads.g.doubleclick.net https://d.adroll.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self';\r\nSet-Cookie: JSESSIONID=82825BDB440A84C455AFE8B4C0034C96; Path=/; Secure; HttpOnly\ncookiesession1=678B2886BE3E5A1E2FC6C5EB9AA5C35F;Expires=Fri, 01 Oct 2027 15:58:00 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"82825BDB440A84C455AFE8B4C0034C96","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=82825BDB440A84C455AFE8B4C0034C96; Path=/; Secure; HttpOnly"},{"name":"cookiesession1","value":"678B2886BE3E5A1E2FC6C5EB9AA5C35F","quoted":false,"path":"/","expires":"2027-10-01T15:58:00Z","raw_expires":"Fri, 01 Oct 2027 15:58:00 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"cookiesession1=678B2886BE3E5A1E2FC6C5EB9AA5C35F;Expires=Fri, 01 Oct 2027 15:58:00 GMT;Path=/;HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243495,"size_decoded":245522,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1700x564, components 3","md5":"14b791dbc9eacc5c0768e92c585a3a7f","sha1":"ba173306dccb755302881f1b3dec4904acc0b993","sha256":"10945ea01a57cc132db2afe7d43e4846c1b70e374b50873646a22c056e4d62b6","sha512":"88d5ea483fa365a0a2072527edd1e3f4bd3b31908f5fcef239194ae09d1b91d5ba2633dd44f6fd9802322c56c2a79c3fd1b9766e2a90b87acf548d78f439eea2","ssdeep":"6144:voWFVRAmY3Ie2YolxeC9l06VJWUd8qyjb3Ehp34mJ8wSUfLQ:fDiN3wYoc6VJWcZhBJ8wSCQ","tlshash":"eb3413fa42cc5c02f7308c3461e8ed04af9873cedad76782eab1860555e53b1458e7a7","first_seen":"2026-08-21T16:18:23.585722Z","last_seen":"2026-10-01T15:58:30.131825Z","times_seen":68,"resource_available":false,"data":null}},"time_used":1694,"timings":{"blocked":-1,"dns":3,"connect":208,"send":0,"wait":232,"receive":832,"ssl":419},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bancopichincha.com.co/documents/37198/38689/01.+Capital+de+Trabajo+Desktop.png/30da9a49-69e1-8729-9e0a-738cbf83592e?t=1777042448633","fqdn":"www.bancopichincha.com.co","domain":"bancopichincha.com.co","tld":"com.co"},"ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crese-con-tu-cupo.vercel.app/","date":"2026-10-01T15:57:59.756Z","timestamp":1790870279756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bancopichincha.com.co","organization":""},"issuer":{"commonName":"GeoTrust EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:00:27:4F:B1:15:FE:48:EA:5A:BE:12:86:F4:B5:ED:BC:5D:D1:61","sha256":"7A:B2:4B:F7:4D:5C:8A:CD:58:97:CE:9C:08:2C:99:FB:2B:47:30:5B:79:9B:84:1A:5F:BB:91:E9:D1:EE:9A:C5"}}},"request":{"raw":"GET /documents/37198/38689/01.+Capital+de+Trabajo+Desktop.png/30da9a49-69e1-8729-9e0a-738cbf83592e?t=1777042448633 HTTP/1.1\r\nHost: www.bancopichincha.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crese-con-tu-cupo.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Thu, 01 Oct 2026 15:58:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 597858\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 24 Apr 2026 14:54:08 GMT\r\nCache-Control: must-revalidate, max-age=600\r\nContent-Disposition: inline; filename=\"01. Capital de Trabajo Desktop.png\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://bancopichincha.ws https://www.googletagmanager.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google-analytics.com https://s.adroll.com https://googleads.g.doubleclick.net https://d.adroll.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://bancopichincha.ws https://cdn.jsdelivr.net 'unsafe-inline'; img-src 'self' data: https://googleads.g.doubleclick.net https://www.google.com https://www.facebook.com https://www.google.com.co https://d.adroll.com https://pixel.tapad.com https://match.adsrvr.org; font-src 'self' data: https://fonts.gstatic.co https://fonts.gstatic.com; connect-src 'self' https://cdn.jsdelivr.net https://www.google.com https://ad.doubleclick.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com.co https://d.adroll.com https://analytics.google.com; media-src 'self'; object-src 'none'; frame-src 'self' https://bancopichincha.ws https://www.googletagmanager.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google-analytics.com https://s.adroll.com https://googleads.g.doubleclick.net https://d.adroll.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self';\r\nSet-Cookie: JSESSIONID=6C0B9D5EDE9C14F430A5BACD22684613; Path=/; Secure; HttpOnly\ncookiesession1=678B2886A1DA63B1AFE5340623BB40D7;Expires=Fri, 01 Oct 2027 15:58:00 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"6C0B9D5EDE9C14F430A5BACD22684613","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=6C0B9D5EDE9C14F430A5BACD22684613; Path=/; Secure; HttpOnly"},{"name":"cookiesession1","value":"678B2886A1DA63B1AFE5340623BB40D7","quoted":false,"path":"/","expires":"2027-10-01T15:58:00Z","raw_expires":"Fri, 01 Oct 2027 15:58:00 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"cookiesession1=678B2886A1DA63B1AFE5340623BB40D7;Expires=Fri, 01 Oct 2027 15:58:00 GMT;Path=/;HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":597858,"size_decoded":599866,"mime_type":"image/png","magic":"PNG image data, 1701 x 565, 8-bit/color RGBA, non-interlaced","md5":"2dbd6e58d856ec29fbfe5c071c8f6e61","sha1":"638a06d7c83006e00cbf798902eedc853c3bb5ef","sha256":"c44d27f385e1e4b317c9482b741e71ccc1ddadc992c300bfc03a878dae414d21","sha512":"70faa726b40590aec4909c79e1839740e477f992bd1f14a1237fca30c052cc1925f038bceb77d63bdec35ae248b38bc592c7bca985d8111741a24e241d96a493","ssdeep":"12288:qahDolT8KL9DrMEI1gBW8JXUj48bh6gW1LPSksqQfhf6:fhsmo/ZBW8BU3b60qQl6","tlshash":"69d42397eb0b08377561169c1b8e927d368d60cda0c4326836369be1ee9fbe60dc7507","first_seen":"2026-08-21T16:18:23.586654Z","last_seen":"2026-10-01T15:58:30.132531Z","times_seen":68,"resource_available":false,"data":null}},"time_used":1664,"timings":{"blocked":-1,"dns":2,"connect":182,"send":0,"wait":204,"receive":910,"ssl":366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crese-con-tu-cupo.vercel.app/favicon.ico","fqdn":"crese-con-tu-cupo.vercel.app","domain":"crese-con-tu-cupo.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crese-con-tu-cupo.vercel.app/","date":"2026-10-01T15:58:00.180Z","timestamp":1790870280180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: crese-con-tu-cupo.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crese-con-tu-cupo.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Thu, 01 Oct 2026 15:58:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::kqhns-1790870280186-a1cd555cb803\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":432,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a15f700c87d3ce0a7fada9175a155e57","sha1":"d5210d7a574e9f255b4fff91aeb5d8c75384b743","sha256":"efb95e781fcf0d3f897a3a4c61b2c341a32241bead2b6a54509c4d6d9ac8b9d8","sha512":"5a0bb89734ffa382b4f3c54e97eab0371864d7c359abbb8d4fd18794b6dce2d3ea06e786d0758e3b02764942a5862489a5b5fb32f183f9cfb113aaf492c4ed3d","ssdeep":"","tlshash":"f9a0120e0b84084b72d2000010ca113c0405002269249d00508e9f5263006ce734044a","first_seen":"2026-10-01T15:58:30.133166Z","last_seen":"2026-10-01T15:58:30.133166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"crese-con-tu-cupo.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crese-con-tu-cupo.vercel.app/","fqdn":"crese-con-tu-cupo.vercel.app","domain":"crese-con-tu-cupo.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-01T15:57:59.332Z","timestamp":1790870279332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crese-con-tu-cupo.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 27475\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 01 Oct 2026 15:57:59 GMT\r\netag: W/\"01f1cf43061ac9f989382d79adfa77e8\"\r\nlast-modified: Thu, 01 Oct 2026 08:20:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4qbrv-1790870279382-b6f40eaaafbb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18658,"size_decoded":6102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"819cecb88c8f145b133938eb3768a8e1","sha1":"52a611ab86327d1e4365a6fee0f5d83faf645ef8","sha256":"9fd49dd33b1e23bfbcbaf9f67e98eeb0dfc4e29b9e259cbf126972ec31567172","sha512":"48fec3c4161172fa3305c365d2a56d6afefa66e17d43d57d2e08f90b0d26f69db8876d6c292c7abbaca97534371dbb46a349a3e1d45d888f9d8141a7e3bd170c","ssdeep":"192:YrglY2P3Pq4RS216S+8p/9GE6LXJIHtDghqYWHB1rYOFzclN+IQj4jWx65/k5ut8:YraQq7HfHj2t+I0qGN0GeYur8uBk","tlshash":"c182a76a56f30471ed97906927eb978a7154d003cc09ce297fdd47908fcaa90ada3bcc","first_seen":"2026-10-01T15:24:04.188566Z","last_seen":"2026-10-01T15:58:30.134936Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":14,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"crese-con-tu-cupo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"crese-con-tu-cupo.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/4/45/Banco_Pichincha_nuevo.png?utm_source=es.wikipedia.org\u0026utm_campaign=index\u0026utm_content=original","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crese-con-tu-cupo.vercel.app/","date":"2026-10-01T15:57:59.752Z","timestamp":1790870279752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/4/45/Banco_Pichincha_nuevo.png?utm_source=es.wikipedia.org\u0026utm_campaign=index\u0026utm_content=original HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crese-con-tu-cupo.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 01 Oct 2026 00:15:01 GMT\r\netag: 9b446670f66bfeef6ab4725bf87c1f93\r\nserver: ATS/9.2.15\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: hd8qulauwrg3ypkciposu8hdo0kj00k\r\nlast-modified: Fri, 08 Feb 2019 21:31:50 GMT\r\ncontent-length: 72254\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599998\r\nx-ratelimit-reset: 1\r\nage: 56578\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/102\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=uQYsD-2UDw9wHlZAI9YsowPsAAAAAFvdULy9vQ-D8dbNzaURcvE4MfZfUxQaa4aX;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Fri, 01 Oct 2027 00:00:00 GMT\r\nx-request-id: 352df7ad-e71b-4bdd-8943-9aac9aaa8db5\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"uQYsD-2UDw9wHlZAI9YsowPsAAAAAFvdULy9vQ-D8dbNzaURcvE4MfZfUxQaa4aX","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-10-01T00:00:00Z","raw_expires":"Fri, 01 Oct 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=uQYsD-2UDw9wHlZAI9YsowPsAAAAAFvdULy9vQ-D8dbNzaURcvE4MfZfUxQaa4aX;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Fri, 01 Oct 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":72254,"size_decoded":74299,"mime_type":"image/png","magic":"PNG image data, 843 x 208, 8-bit/color RGBA, non-interlaced","md5":"9b446670f66bfeef6ab4725bf87c1f93","sha1":"94aee7f2849277a663aa99ea97064f0c6c91dad4","sha256":"0fb5f4df2a0b0f33ed7e75b7bba5f99f387812b8486c15150d3e404026b5719f","sha512":"8239b6c6ae2c804d7d017d8762f17cc1e667e323511f50178d341e62586359ac4e4d4aa9b8fed5f609bf7f68bfd21c645e146871d5edcfd47115869d89a5a78b","ssdeep":"1536:jNgYMCConxuD2ykvQ1nXwTM3OkJMcnheaAUWw8cEfvQnJ8z:/fV22doBX085McsbUL8cEfvQJw","tlshash":"b563025e760f98c46f19e243c35a7eccb7b10d906cd34231796bad6b0130f22da99974","first_seen":"2026-01-13T01:00:50.571063Z","last_seen":"2026-10-01T15:58:30.135665Z","times_seen":210,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":28,"receive":42,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bancopichincha.com.co/documents/37198/38952/Cr%C3%A9dito+de+Cartera+_Desktop.jpg/2a659e50-6fd3-3e96-160e-ee59e7f2ecee?t=1777043582123","fqdn":"www.bancopichincha.com.co","domain":"bancopichincha.com.co","tld":"com.co"},"ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crese-con-tu-cupo.vercel.app/","date":"2026-10-01T15:57:59.754Z","timestamp":1790870279754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bancopichincha.com.co","organization":""},"issuer":{"commonName":"GeoTrust EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:00:27:4F:B1:15:FE:48:EA:5A:BE:12:86:F4:B5:ED:BC:5D:D1:61","sha256":"7A:B2:4B:F7:4D:5C:8A:CD:58:97:CE:9C:08:2C:99:FB:2B:47:30:5B:79:9B:84:1A:5F:BB:91:E9:D1:EE:9A:C5"}}},"request":{"raw":"GET /documents/37198/38952/Cr%C3%A9dito+de+Cartera+_Desktop.jpg/2a659e50-6fd3-3e96-160e-ee59e7f2ecee?t=1777043582123 HTTP/1.1\r\nHost: www.bancopichincha.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crese-con-tu-cupo.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Thu, 01 Oct 2026 15:58:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 207252\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 24 Apr 2026 15:13:02 GMT\r\nCache-Control: must-revalidate, max-age=600\r\nContent-Disposition: inline; filename*=UTF-8''Cr%C3%A9dito%20de%20Cartera%20_Desktop.jpg\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https://bancopichincha.ws https://www.googletagmanager.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google-analytics.com https://s.adroll.com https://googleads.g.doubleclick.net https://d.adroll.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://bancopichincha.ws https://cdn.jsdelivr.net 'unsafe-inline'; img-src 'self' data: https://googleads.g.doubleclick.net https://www.google.com https://www.facebook.com https://www.google.com.co https://d.adroll.com https://pixel.tapad.com https://match.adsrvr.org; font-src 'self' data: https://fonts.gstatic.co https://fonts.gstatic.com; connect-src 'self' https://cdn.jsdelivr.net https://www.google.com https://ad.doubleclick.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com.co https://d.adroll.com https://analytics.google.com; media-src 'self'; object-src 'none'; frame-src 'self' https://bancopichincha.ws https://www.googletagmanager.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google-analytics.com https://s.adroll.com https://googleads.g.doubleclick.net https://d.adroll.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self';\r\nSet-Cookie: JSESSIONID=8C93EF9A8B84D2CDDF3B351DBA46D460; Path=/; Secure; HttpOnly\ncookiesession1=678B288601F38A65984B9BF44ABEF2A2;Expires=Fri, 01 Oct 2027 15:58:00 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"8C93EF9A8B84D2CDDF3B351DBA46D460","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=8C93EF9A8B84D2CDDF3B351DBA46D460; Path=/; Secure; HttpOnly"},{"name":"cookiesession1","value":"678B288601F38A65984B9BF44ABEF2A2","quoted":false,"path":"/","expires":"2027-10-01T15:58:00Z","raw_expires":"Fri, 01 Oct 2027 15:58:00 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"cookiesession1=678B288601F38A65984B9BF44ABEF2A2;Expires=Fri, 01 Oct 2027 15:58:00 GMT;Path=/;HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":207252,"size_decoded":209275,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1700x564, components 3","md5":"b13087d87f249ee35d571259f5577d34","sha1":"caa3020241e0070eb3a5430b5d805afd4fb1bb4b","sha256":"13b16984b5b35c31e2afcecec7f2daadfe29cc65a1e29f3f6fbe302315fb34d4","sha512":"c93944ae6753458ad0c9782661b5ed3dc329da1bbc0a9799ed2673b90e664a36c3d44cb1184e361aa0dcbdbe1f3caad64559966d70587799aeb94f07aecb6b44","ssdeep":"6144:ZHjh6/wOc4DJg9jrDP6ZDGIlIgrYIgFSRRU5HTHOnw:ljZV4DAjrDS4CrPU8w","tlshash":"fd14129f43caf84af8b8ae7d50e41f1adba0a68124a05856e334c4757fc73961e4d84f","first_seen":"2026-08-21T16:18:23.584639Z","last_seen":"2026-10-01T15:58:30.136287Z","times_seen":68,"resource_available":false,"data":null}},"time_used":1601,"timings":{"blocked":-1,"dns":4,"connect":196,"send":0,"wait":222,"receive":784,"ssl":395},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}