{"report_id":"34ca9af8-bfd7-41f8-9fe4-4300899d794b","version":0,"status":"done","tags":[],"date":"2026-08-27T22:28:26Z","url":{"schema":"http","addr":"acceso-login-29370--accccess9.replit.app/","fqdn":"acceso-login-29370--accccess9.replit.app","domain":"acceso-login-29370--accccess9.replit.app","tld":"replit.app"},"ip":{"addr":"34.117.33.233","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"acceso-login-29370--accccess9.replit.app/","fqdn":"acceso-login-29370--accccess9.replit.app","domain":"acceso-login-29370--accccess9.replit.app","tld":"replit.app"},"title":"Crédito en Línea - Banco Pichincha","dom":{"size":18585,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9b42bc94170df828d726b134b4593f5c","sha1":"184fc8ed76f44974111ac7a0690ef34d0beda405","sha256":"70fa937cf64da59d1158d04991289586f79ab69eab2ac5ccb098c99e46ab9bf5","sha512":"c8df9c809af2af37fd76faf3d5cdb7f6dce64c025a1435e718c13fa192c984a1cc24182e1086d0294b46a13dc60388c873b2baba2f115550a9b6782478c75c53","ssdeep":"192:UrglY2Q3Pq4RS216S+8p/9GE6LXJIHtDghqYWHB1rYLzclN+IeKdgWx65/75utA3:Urahq7HQKFt+I0qGN0GeYur8uBk","tlshash":"5f82a66a56f30471ed93906927eb978a7154d003cc0ace697fdd47808fca994ada2bcc","dom_hash":"domhashd4b6ff0e091394f1194e401e71b33f9d","first_seen":"2026-08-27T22:28:29.927858Z","last_seen":"2026-08-27T22:28:29.927858Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"acceso-login-29370--accccess9.replit.app/","fqdn":"acceso-login-29370--accccess9.replit.app","domain":"acceso-login-29370--accccess9.replit.app","tld":"replit.app"},"ip":{"addr":"34.117.33.233","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-01T22:28:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bancopichincha.com.co","ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"domain_registered":"2010-09-07","domain_rank":1251628,"first_seen":"2013-05-14T12:02:30Z","last_seen":"2026-08-21T04:34:13.691676Z","alert_count":0,"request_count":3,"received_data":1051360,"sent_data":2029,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"acceso-login-29370--accccess9.replit.app","ip":{"addr":"34.117.33.233","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2021-04-16","domain_rank":0,"first_seen":"2026-08-27T22:28:26.487444Z","last_seen":"2026-08-27T22:28:26.487444Z","alert_count":8,"request_count":2,"received_data":20482,"sent_data":1303,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}]},{"fqdn":"replit-cdn.com","ip":{"addr":"35.190.3.23","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2025-12-25T23:16:20.86796Z","last_seen":"2026-08-27T09:23:37.428834Z","alert_count":0,"request_count":1,"received_data":12697,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-08-24T19:48:09.061873Z","alert_count":0,"request_count":1,"received_data":74299,"sent_data":675,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acceso-login-29370--accccess9.replit.app/","fqdn":"acceso-login-29370--accccess9.replit.app","domain":"acceso-login-29370--accccess9.replit.app","tld":"replit.app"},"ip":{"addr":"34.117.33.233","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f67c0ba34991188f08d0ec562d2c7be","sha1":"6b68b2249b093b3012049922dca78b150fb5deb9","sha256":"41660a301ebe87bafcb532ffbe0b3425b67367bb0b83f40e410ce02703bc7d90","sha512":"9a60775690cdf0afff198c09677189d110fc69ab678c38fbaa30abe4591da283bc581e0b7da250620f83cc17160d1b54ffcf97d6689fff6d105c8863f6e6a28c","ssdeep":"96:/m9xN5xot4i6HoH82rUnzolMj6yjRCbfecCn1GMCweGLSKtw0tKAyZ583oK2BH:I5utAIc7QMG0obGhn0xweYw0tKr83+BH","tlshash":"2cb1ee7f36b309304edbb46a27df978a702091472c40ca66fb7d83505f98e4466a6be4","size":5155,"data":"","first_seen":"2026-08-27T22:28:29.934562Z","last_seen":"2026-08-27T22:28:29.934562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"replit-cdn.com/replit-pill/replit-pill.global.js","fqdn":"replit-cdn.com","domain":"replit-cdn.com","tld":"com"},"ip":{"addr":"35.190.3.23","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd488b6d904e8532164891711d011f87","sha1":"5f1a87c65602c024da79fe3b7003750724070095","sha256":"55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7","sha512":"2904aca09060631b64e70547859f952849a95eea2febd418dcc302d2a163156794925dbaba95f6ce73509fb574b6f704544dce90411889b1b18766da15fe2a37","ssdeep":"192:rDdOHpSGqvPrgqTsYfX+vM8r2SgCTpEAg4KA5yNJKvNw2ENTEfq/Y8yqwy48lP+O:rDgHp+vD5gT1cScBX3y/ywdyt","tlshash":"9732b73e9be20e35638782897bf5b71c323a52535002cc1cb6ceac599f1dd4cd9a5b92","size":11957,"data":"","first_seen":"2026-06-18T11:15:05.297202Z","last_seen":"2026-08-27T22:28:29.932749Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bancopichincha.com.co/documents/37198/38855/Cr%C3%A9dito+de+Tesorer%C3%ADa_Desktop.jpg/f06f47e3-c719-9841-58ca-73bbf00a19cd?t=1777043057597","fqdn":"www.bancopichincha.com.co","domain":"bancopichincha.com.co","tld":"com.co"},"ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acceso-login-29370--accccess9.replit.app/","date":"2026-08-27T22:27:54.473Z","timestamp":1787869674473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bancopichincha.com.co","organization":""},"issuer":{"commonName":"GeoTrust EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:00:27:4F:B1:15:FE:48:EA:5A:BE:12:86:F4:B5:ED:BC:5D:D1:61","sha256":"7A:B2:4B:F7:4D:5C:8A:CD:58:97:CE:9C:08:2C:99:FB:2B:47:30:5B:79:9B:84:1A:5F:BB:91:E9:D1:EE:9A:C5"}}},"request":{"raw":"GET /documents/37198/38855/Cr%C3%A9dito+de+Tesorer%C3%ADa_Desktop.jpg/f06f47e3-c719-9841-58ca-73bbf00a19cd?t=1777043057597 HTTP/1.1\r\nHost: www.bancopichincha.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acceso-login-29370--accccess9.replit.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Thu, 27 Aug 2026 22:27:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 243495\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 24 Apr 2026 15:04:17 GMT\r\nCache-Control: must-revalidate, max-age=600\r\nContent-Disposition: inline; filename*=UTF-8''Cr%C3%A9dito%20de%20Tesorer%C3%ADa_Desktop.jpg\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src *; frame-src *; base-uri 'self'; form-action 'self'; frame-ancestors 'self'\r\nSet-Cookie: JSESSIONID=104679DBEB4C425EEE720FAF61BEF85F; Path=/; Secure; HttpOnly\ncookiesession1=678B2886B12B8B7A3341D65CA6918384;Expires=Fri, 27 Aug 2027 22:27:55 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"104679DBEB4C425EEE720FAF61BEF85F","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=104679DBEB4C425EEE720FAF61BEF85F; Path=/; Secure; HttpOnly"},{"name":"cookiesession1","value":"678B2886B12B8B7A3341D65CA6918384","quoted":false,"path":"/","expires":"2027-08-27T22:27:55Z","raw_expires":"Fri, 27 Aug 2027 22:27:55 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"cookiesession1=678B2886B12B8B7A3341D65CA6918384;Expires=Fri, 27 Aug 2027 22:27:55 GMT;Path=/;HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":243495,"size_decoded":244421,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1700x564, components 3","md5":"14b791dbc9eacc5c0768e92c585a3a7f","sha1":"ba173306dccb755302881f1b3dec4904acc0b993","sha256":"10945ea01a57cc132db2afe7d43e4846c1b70e374b50873646a22c056e4d62b6","sha512":"88d5ea483fa365a0a2072527edd1e3f4bd3b31908f5fcef239194ae09d1b91d5ba2633dd44f6fd9802322c56c2a79c3fd1b9766e2a90b87acf548d78f439eea2","ssdeep":"6144:voWFVRAmY3Ie2YolxeC9l06VJWUd8qyjb3Ehp34mJ8wSUfLQ:fDiN3wYoc6VJWcZhBJ8wSCQ","tlshash":"eb3413fa42cc5c02f7308c3461e8ed04af9873cedad76782eab1860555e53b1458e7a7","first_seen":"2026-08-21T16:18:23.585722Z","last_seen":"2026-08-27T22:28:29.929509Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2454,"timings":{"blocked":-1,"dns":548,"connect":210,"send":0,"wait":237,"receive":834,"ssl":625},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bancopichincha.com.co/documents/37198/38689/01.+Capital+de+Trabajo+Desktop.png/30da9a49-69e1-8729-9e0a-738cbf83592e?t=1777042448633","fqdn":"www.bancopichincha.com.co","domain":"bancopichincha.com.co","tld":"com.co"},"ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acceso-login-29370--accccess9.replit.app/","date":"2026-08-27T22:27:54.474Z","timestamp":1787869674474,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bancopichincha.com.co","organization":""},"issuer":{"commonName":"GeoTrust EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:00:27:4F:B1:15:FE:48:EA:5A:BE:12:86:F4:B5:ED:BC:5D:D1:61","sha256":"7A:B2:4B:F7:4D:5C:8A:CD:58:97:CE:9C:08:2C:99:FB:2B:47:30:5B:79:9B:84:1A:5F:BB:91:E9:D1:EE:9A:C5"}}},"request":{"raw":"GET /documents/37198/38689/01.+Capital+de+Trabajo+Desktop.png/30da9a49-69e1-8729-9e0a-738cbf83592e?t=1777042448633 HTTP/1.1\r\nHost: www.bancopichincha.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acceso-login-29370--accccess9.replit.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Thu, 27 Aug 2026 22:27:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 597858\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 24 Apr 2026 14:54:08 GMT\r\nCache-Control: must-revalidate, max-age=600\r\nContent-Disposition: inline; filename=\"01. Capital de Trabajo Desktop.png\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src *; frame-src *; base-uri 'self'; form-action 'self'; frame-ancestors 'self'\r\nSet-Cookie: JSESSIONID=F91FAA8CBCDB218523B259799A2C5260; Path=/; Secure; HttpOnly\ncookiesession1=678B28868E9EB2208FB4732308A6EE9F;Expires=Fri, 27 Aug 2027 22:27:55 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"F91FAA8CBCDB218523B259799A2C5260","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=F91FAA8CBCDB218523B259799A2C5260; Path=/; Secure; HttpOnly"},{"name":"cookiesession1","value":"678B28868E9EB2208FB4732308A6EE9F","quoted":false,"path":"/","expires":"2027-08-27T22:27:55Z","raw_expires":"Fri, 27 Aug 2027 22:27:55 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"cookiesession1=678B28868E9EB2208FB4732308A6EE9F;Expires=Fri, 27 Aug 2027 22:27:55 GMT;Path=/;HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":597858,"size_decoded":598765,"mime_type":"image/png","magic":"PNG image data, 1701 x 565, 8-bit/color RGBA, non-interlaced","md5":"2dbd6e58d856ec29fbfe5c071c8f6e61","sha1":"638a06d7c83006e00cbf798902eedc853c3bb5ef","sha256":"c44d27f385e1e4b317c9482b741e71ccc1ddadc992c300bfc03a878dae414d21","sha512":"70faa726b40590aec4909c79e1839740e477f992bd1f14a1237fca30c052cc1925f038bceb77d63bdec35ae248b38bc592c7bca985d8111741a24e241d96a493","ssdeep":"12288:qahDolT8KL9DrMEI1gBW8JXUj48bh6gW1LPSksqQfhf6:fhsmo/ZBW8BU3b60qQl6","tlshash":"69d42397eb0b08377561169c1b8e927d368d60cda0c4326836369be1ee9fbe60dc7507","first_seen":"2026-08-21T16:18:23.586654Z","last_seen":"2026-08-27T22:28:29.930107Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2628,"timings":{"blocked":-1,"dns":546,"connect":203,"send":0,"wait":229,"receive":1029,"ssl":621},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acceso-login-29370--accccess9.replit.app/favicon.ico","fqdn":"acceso-login-29370--accccess9.replit.app","domain":"acceso-login-29370--accccess9.replit.app","tld":"replit.app"},"ip":{"addr":"34.117.33.233","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acceso-login-29370--accccess9.replit.app/","date":"2026-08-27T22:27:54.917Z","timestamp":1787869674917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"replit.app","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 10:12:48 GMT","end":"Wed, 07 Oct 2026 11:08:41 GMT"},"fingerprint":{"sha1":"85:9E:2A:EE:8B:2F:8A:30:89:FC:C8:7A:A7:34:96:E9:B3:07:E3:9F","sha256":"A1:2F:2E:82:28:49:B9:EC:FF:39:64:7F:29:06:06:1A:17:8F:A6:C8:29:9C:BB:26:11:68:85:0E:42:D8:26:FD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: acceso-login-29370--accccess9.replit.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acceso-login-29370--accccess9.replit.app/\r\nCookie: GAESA=CpwBMDBhNDFlOGMxZGQ5OTdiMTIyNTllMzA4ZjJlNmRmZDUzYzRhNTc0M2Y3NzA4ZWI4ODA2YjYxMzY5NTEwNjkzNmIxYjcwYjRlNDAxNGQwYTZiYmY2NGE1MWVlODdlYmFiN2E2OTY5YWE4MmRjMDUwN2JiNjFjOTM5YTgyNTdiYjk1YTIyZjdiNGRjMjViMWM5NmM0MWJlNTQyODI0EPnz2KqENA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 27 Aug 2026 22:27:55 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: d9d4344d5101653221aaf3d9ea0fc7e5\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":710,"size_decoded":997,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (308)","md5":"198147caed7038cdd840b434166a4d40","sha1":"471bdeec6e22bd422a371f947e64dcf598afad5e","sha256":"bad6bd2a90561e192bbaebda4f1de9b7c5d3fdb33df36c972cfebcb5822ceb27","sha512":"efc59a5c472f6a3ac741e54c9837d3be69a5ae2e12d0663997fd43364ed1e2de5468506e54737aef7f172f8d32810f6d01752ab58cc86ef506adf4b3ee63f06a","ssdeep":"","tlshash":"b901102bcb42280bb16a18e96ed25208630e82a2f8a04f717d915f34c01c8743c2a78e","first_seen":"2026-08-27T22:28:29.930634Z","last_seen":"2026-08-27T22:28:29.930634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acceso-login-29370--accccess9.replit.app/","fqdn":"acceso-login-29370--accccess9.replit.app","domain":"acceso-login-29370--accccess9.replit.app","tld":"replit.app"},"ip":{"addr":"34.117.33.233","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-27T22:27:53.724Z","timestamp":1787869673724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"replit.app","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 10:12:48 GMT","end":"Wed, 07 Oct 2026 11:08:41 GMT"},"fingerprint":{"sha1":"85:9E:2A:EE:8B:2F:8A:30:89:FC:C8:7A:A7:34:96:E9:B3:07:E3:9F","sha256":"A1:2F:2E:82:28:49:B9:EC:FF:39:64:7F:29:06:06:1A:17:8F:A6:C8:29:9C:BB:26:11:68:85:0E:42:D8:26:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: acceso-login-29370--accccess9.replit.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 27 Aug 2026 22:27:53 GMT\r\nexpires: Thu, 27 Aug 2026 22:27:53 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=CpwBMDBhNDFlOGMxZGQ5OTdiMTIyNTllMzA4ZjJlNmRmZDUzYzRhNTc0M2Y3NzA4ZWI4ODA2YjYxMzY5NTEwNjkzNmIxYjcwYjRlNDAxNGQwYTZiYmY2NGE1MWVlODdlYmFiN2E2OTY5YWE4MmRjMDUwN2JiNjFjOTM5YTgyNTdiYjk1YTIyZjdiNGRjMjViMWM5NmM0MWJlNTQyODI0EPnz2KqENA; expires=Sat, 26-Sep-2026 22:27:53 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 577bcd9e66d43170ca59df47c534fd87;o=1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CpwBMDBhNDFlOGMxZGQ5OTdiMTIyNTllMzA4ZjJlNmRmZDUzYzRhNTc0M2Y3NzA4ZWI4ODA2YjYxMzY5NTEwNjkzNmIxYjcwYjRlNDAxNGQwYTZiYmY2NGE1MWVlODdlYmFiN2E2OTY5YWE4MmRjMDUwN2JiNjFjOTM5YTgyNTdiYjk1YTIyZjdiNGRjMjViMWM5NmM0MWJlNTQyODI0EPnz2KqENA","quoted":false,"path":"/","expires":"2026-09-26T22:27:53Z","raw_expires":"Sat, 26-Sep-2026 22:27:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"GAESA=CpwBMDBhNDFlOGMxZGQ5OTdiMTIyNTllMzA4ZjJlNmRmZDUzYzRhNTc0M2Y3NzA4ZWI4ODA2YjYxMzY5NTEwNjkzNmIxYjcwYjRlNDAxNGQwYTZiYmY2NGE1MWVlODdlYmFiN2E2OTY5YWE4MmRjMDUwN2JiNjFjOTM5YTgyNTdiYjk1YTIyZjdiNGRjMjViMWM5NmM0MWJlNTQyODI0EPnz2KqENA; expires=Sat, 26-Sep-2026 22:27:53 GMT; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":18821,"size_decoded":19485,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e6f55317bd1d021fb2c1325d773e66cb","sha1":"e1a9131ac55ff255f0d9c2a53c9013a2a3b2e226","sha256":"9a4f35f5543900f75fb1c8f47c6461a771b0d1cea4b5b837c0d64293d796a5f9","sha512":"50dd476d4fc21c050244d9a89a92ca3c579412a15976de3e8394de7a78bd1aaf6d77a6a22e916cf8568909a07f14b0a3f6bd347cc46838bdac48dc2b7754b26d","ssdeep":"192:YrglY2P3Pq4RS216S+8p/9GE6LXJIHtDghqYWHB1rYOFzclN+IQj4jWx65/75utM:YraQq7HfHjlt+I0qGN0GeYur8uB0","tlshash":"de82a76a56f30471dd97906927eb978a7154d003cc0ace297fdd47908fcaa90ada3bcc","first_seen":"2026-08-27T22:28:29.931577Z","last_seen":"2026-08-27T22:28:29.931577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":20,"connect":13,"send":0,"wait":326,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"acceso-login-29370--accccess9.replit.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"replit-cdn.com/replit-pill/replit-pill.global.js","fqdn":"replit-cdn.com","domain":"replit-cdn.com","tld":"com"},"ip":{"addr":"35.190.3.23","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acceso-login-29370--accccess9.replit.app/","date":"2026-08-27T22:27:54.463Z","timestamp":1787869674463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"replit-cdn.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:46:59 GMT","end":"Tue, 13 Oct 2026 16:42:54 GMT"},"fingerprint":{"sha1":"D6:C6:6B:2C:7C:0A:2A:D2:3C:A7:84:5B:8D:65:30:1C:14:FB:A4:3C","sha256":"F5:DC:08:84:C4:85:F8:84:1D:62:F8:4C:FA:38:1E:B3:39:D4:BE:C2:F5:AA:4E:E5:B5:82:15:09:36:40:DA:C3"}}},"request":{"raw":"GET /replit-pill/replit-pill.global.js HTTP/1.1\r\nHost: replit-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acceso-login-29370--accccess9.replit.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-guploader-uploadid: AJjja9b9rJIxgCcJkaFuPUqM34AzXQKCwSPCjOy0KmN3wfbG5WySFXPE6eHLUi6caCtKCvs_frWgcJA\r\nx-goog-generation: 1784294929363880\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 11957\r\nx-goog-hash: crc32c=9AStjw==, md5=3UiLbZBOhTIWSJFxHQEfhw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 11957\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ndate: Thu, 27 Aug 2026 22:03:45 GMT\r\nage: 1449\r\nlast-modified: Fri, 17 Jul 2026 13:28:49 GMT\r\netag: \"dd488b6d904e8532164891711d011f87\"\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":11957,"size_decoded":12697,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3743)","md5":"dd488b6d904e8532164891711d011f87","sha1":"5f1a87c65602c024da79fe3b7003750724070095","sha256":"55d59f5ed62299f2df0fe22b6ceae87ca8d26d51de860d35f3bc8ad93f9772d7","sha512":"2904aca09060631b64e70547859f952849a95eea2febd418dcc302d2a163156794925dbaba95f6ce73509fb574b6f704544dce90411889b1b18766da15fe2a37","ssdeep":"192:rDdOHpSGqvPrgqTsYfX+vM8r2SgCTpEAg4KA5yNJKvNw2ENTEfq/Y8yqwy48lP+O:rDgHp+vD5gT1cScBX3y/ywdyt","tlshash":"9732b73e9be20e35638782897bf5b71c323a52535002cc1cb6ceac599f1dd4cd9a5b92","first_seen":"2026-06-18T11:15:05.297202Z","last_seen":"2026-08-27T22:28:29.932749Z","times_seen":432,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":8,"connect":13,"send":0,"wait":15,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/4/45/Banco_Pichincha_nuevo.png?utm_source=es.wikipedia.org\u0026utm_campaign=index\u0026utm_content=original","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acceso-login-29370--accccess9.replit.app/","date":"2026-08-27T22:27:54.468Z","timestamp":1787869674468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/4/45/Banco_Pichincha_nuevo.png?utm_source=es.wikipedia.org\u0026utm_campaign=index\u0026utm_content=original HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acceso-login-29370--accccess9.replit.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 27 Aug 2026 16:08:12 GMT\r\netag: 9b446670f66bfeef6ab4725bf87c1f93\r\nserver: ATS/9.2.15\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: hd8qulauwrg3ypkciposu8hdo0kj00k\r\nlast-modified: Fri, 08 Feb 2019 21:31:50 GMT\r\ncontent-length: 72254\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 18\r\nage: 22782\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/27\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=veTAYoEkIknSb8djjB0z9QPJAAAAAFvdrR3EyK6wA-l-aqiM174ejn1pjPrZ0mX3;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Fri, 27 Aug 2027 00:00:00 GMT\r\nx-request-id: fd7bcca4-e297-49f9-a5de-d5ec6bb9a146\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"veTAYoEkIknSb8djjB0z9QPJAAAAAFvdrR3EyK6wA-l-aqiM174ejn1pjPrZ0mX3","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-08-27T00:00:00Z","raw_expires":"Fri, 27 Aug 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=veTAYoEkIknSb8djjB0z9QPJAAAAAFvdrR3EyK6wA-l-aqiM174ejn1pjPrZ0mX3;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Fri, 27 Aug 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":72254,"size_decoded":74299,"mime_type":"image/png","magic":"PNG image data, 843 x 208, 8-bit/color RGBA, non-interlaced","md5":"9b446670f66bfeef6ab4725bf87c1f93","sha1":"94aee7f2849277a663aa99ea97064f0c6c91dad4","sha256":"0fb5f4df2a0b0f33ed7e75b7bba5f99f387812b8486c15150d3e404026b5719f","sha512":"8239b6c6ae2c804d7d017d8762f17cc1e667e323511f50178d341e62586359ac4e4d4aa9b8fed5f609bf7f68bfd21c645e146871d5edcfd47115869d89a5a78b","ssdeep":"1536:jNgYMCConxuD2ykvQ1nXwTM3OkJMcnheaAUWw8cEfvQnJ8z:/fV22doBX085McsbUL8cEfvQJw","tlshash":"b563025e760f98c46f19e243c35a7eccb7b10d906cd34231796bad6b0130f22da99974","first_seen":"2026-01-13T01:00:50.571063Z","last_seen":"2026-08-27T22:28:29.933315Z","times_seen":153,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":32,"receive":38,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bancopichincha.com.co/documents/37198/38952/Cr%C3%A9dito+de+Cartera+_Desktop.jpg/2a659e50-6fd3-3e96-160e-ee59e7f2ecee?t=1777043582123","fqdn":"www.bancopichincha.com.co","domain":"bancopichincha.com.co","tld":"com.co"},"ip":{"addr":"177.253.96.14","port":443,"asn":27831,"as":"Colombia Movil","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acceso-login-29370--accccess9.replit.app/","date":"2026-08-27T22:27:54.471Z","timestamp":1787869674471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bancopichincha.com.co","organization":""},"issuer":{"commonName":"GeoTrust EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:00:27:4F:B1:15:FE:48:EA:5A:BE:12:86:F4:B5:ED:BC:5D:D1:61","sha256":"7A:B2:4B:F7:4D:5C:8A:CD:58:97:CE:9C:08:2C:99:FB:2B:47:30:5B:79:9B:84:1A:5F:BB:91:E9:D1:EE:9A:C5"}}},"request":{"raw":"GET /documents/37198/38952/Cr%C3%A9dito+de+Cartera+_Desktop.jpg/2a659e50-6fd3-3e96-160e-ee59e7f2ecee?t=1777043582123 HTTP/1.1\r\nHost: www.bancopichincha.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://acceso-login-29370--accccess9.replit.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Thu, 27 Aug 2026 22:27:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 207252\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 24 Apr 2026 15:13:02 GMT\r\nCache-Control: must-revalidate, max-age=600\r\nContent-Disposition: inline; filename*=UTF-8''Cr%C3%A9dito%20de%20Cartera%20_Desktop.jpg\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src * data:; font-src *; connect-src *; media-src *; object-src *; frame-src *; base-uri 'self'; form-action 'self'; frame-ancestors 'self'\r\nSet-Cookie: JSESSIONID=A7D326D8ABD2A7B9D5856C00A83CFF95; Path=/; Secure; HttpOnly\ncookiesession1=678B2886FC4DB6A36800F2925A25563D;Expires=Fri, 27 Aug 2027 22:27:55 GMT;Path=/;HttpOnly\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"A7D326D8ABD2A7B9D5856C00A83CFF95","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=A7D326D8ABD2A7B9D5856C00A83CFF95; Path=/; Secure; HttpOnly"},{"name":"cookiesession1","value":"678B2886FC4DB6A36800F2925A25563D","quoted":false,"path":"/","expires":"2027-08-27T22:27:55Z","raw_expires":"Fri, 27 Aug 2027 22:27:55 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"cookiesession1=678B2886FC4DB6A36800F2925A25563D;Expires=Fri, 27 Aug 2027 22:27:55 GMT;Path=/;HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":207252,"size_decoded":208174,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1700x564, components 3","md5":"b13087d87f249ee35d571259f5577d34","sha1":"caa3020241e0070eb3a5430b5d805afd4fb1bb4b","sha256":"13b16984b5b35c31e2afcecec7f2daadfe29cc65a1e29f3f6fbe302315fb34d4","sha512":"c93944ae6753458ad0c9782661b5ed3dc329da1bbc0a9799ed2673b90e664a36c3d44cb1184e361aa0dcbdbe1f3caad64559966d70587799aeb94f07aecb6b44","ssdeep":"6144:ZHjh6/wOc4DJg9jrDP6ZDGIlIgrYIgFSRRU5HTHOnw:ljZV4DAjrDS4CrPU8w","tlshash":"fd14129f43caf84af8b8ae7d50e41f1adba0a68124a05856e334c4757fc73961e4d84f","first_seen":"2026-08-21T16:18:23.584639Z","last_seen":"2026-08-27T22:28:29.933928Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2353,"timings":{"blocked":-1,"dns":549,"connect":198,"send":0,"wait":226,"receive":787,"ssl":592},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}