{"report_id":"45ed174d-a3ff-41a5-97b0-f86a85996b51","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-10-28T20:08:11Z","url":{"schema":"http","addr":"loginbamigalinea.pages.dev","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"title":"Acceso – Plataforma","dom":{"size":8673,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e4a15f8f6a10c5cc190909b0da5b0c3a","sha1":"0ede44880ca0c3269a8836ba78ef812733d03cd2","sha256":"757a8ac166995669e836ef36778197504a559597e45a3f75c35b33107b421731","sha512":"834a4d30c70f174d2bb8c1f63ab83091c6ce4fe72b1596aa16d843a291b5de3d31eef043324990b97daa473d269bb07a15a556dc48d1552b33fee363bfda9c41","ssdeep":"192:0RG3xvNf6o0pTKrls7TSUgPwWElwzISmx0nA+mTO6SXm1mVsa3uUYNdfq202:0RGfF0VgPvUaenk202","tlshash":"dc02b92191f214376417c0957be25f0a75a0c407d10ad96dffeca7aacfd7e82d9a3218","dom_hash":"domhashfb43c50926d8ef76096765c84597e4bd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWwgbGFuZz0iZXMiPjxoZWFkPgogIDxtZXRhIGNoYXJzZXQ9InV0Zi04Ij4KICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEiPgogIDx0aXRsZT5BY2Nlc28g4oCTIFBsYXRhZm9ybWE8L3RpdGxlPgogIDxzdHlsZT4KICAgIDpyb290ewogICAgICAtLXByaW1hcnk6IzY3YTY1ZjsgICAvKiB2ZXJkZSBib3TDs24gSW5ncmVzYXIgKi8KICAgICAgLS1wcmltYXJ5LTI6IzVhYTI1NTsKICAgICAgLS1zZWNvbmRhcnk6I2RkYjI2YzsgLyogZG9yYWRvIGJvdMOzbiBSZWdpc3RybyAqLwogICAgICAtLXNlY29uZGFyeS0yOiNjZmE0NWU7CiAgICAgIC0tdGV4dDojMjQzNDQ3OwogICAgICAtLW11dGVkOiM2YjdhOGM7CiAgICAgIC0tbGluZTojZGJlM2VhOwogICAgICAtLXJhZGl1czoxMHB4OwogICAgICAtLXNoYWRvdzowIDhweCAxOHB4IHJnYmEoMCwwLDAsLjA4KTsKICAgIH0KICAgICp7Ym94LXNpemluZzpib3JkZXItYm94fQogICAgaHRtbCwgYm9keXtoZWlnaHQ6MTAwJTt9CiAgICBib2R5ewogICAgICBtYXJnaW46MDsKICAgICAgZm9udC1mYW1pbHk6c3lzdGVtLXVpLC1hcHBsZS1zeXN0ZW0sU2Vnb2UgVUksUm9ib3RvLFVidW50dSwiSGVsdmV0aWNhIE5ldWUiLEFyaWFsLHNhbnMtc2VyaWY7CiAgICAgIGJhY2tncm91bmQ6IHVybCgiaW1nL2ZvbmRvLmpwZyIpIG5vLXJlcGVhdCBjZW50ZXIgY2VudGVyIGZpeGVkOwogICAgICBiYWNrZ3JvdW5kLXNpemU6IGNvdmVyOwogICAgICBjb2xvcjp2YXIoLS10ZXh0KTsKICAgICAgZGlzcGxheTpmbGV4OyAgICAgICAgICAgIC8qIDwtLSBwYXJhIGVtcHVqYXIgZWwgZm9vdGVyIGFsIGZvbmRvICovCiAgICAgIGZsZXgtZGlyZWN0aW9uOmNvbHVtbjsKICAgICAgbWluLWhlaWdodDoxMDBkdmg7ICAgICAgIC8qIGFsdG8gbcOtbmltbyBwYW50YWxsYSBjb21wbGV0YSAqLwogICAgfQogICAgLndyYXB7CiAgICAgIG1heC13aWR0aDo2NDBweDsKICAgICAgbWFyZ2luOjMycHggYXV0bzsKICAgICAgYmFja2dyb3VuZDogbGluZWFyLWdyYWRpZW50KDE4MGRlZywgI2ZmZmZmZiAwJSwgI2Y3ZmJmZiAxMDAlKTsKICAgICAgYm9yZGVyLXJhZGl1czoxNHB4OwogICAgICBib3gtc2hhZG93OnZhcigtLXNoYWRvdyk7CiAgICAgIG92ZXJmbG93OmhpZGRlbjsKICAgICAgYm9yZGVyOjFweCBzb2xpZCB2YXIoLS1saW5lKTsKICAgIH0KICAgIC5oZWFkZXJ7CiAgICAgIHRleHQtYWxpZ246Y2VudGVyOwogICAgICBwYWRkaW5nOjIwcHg7CiAgICAgIGJvcmRlci1ib3R0b206MXB4IHNvbGlkIHZhcigtLWxpbmUpOwogICAgICBiYWNrZ3JvdW5kOiNmOWZjZmY7CiAgICB9CiAgICAuaGVhZGVyIGltZ3sgbWF4LXdpZHRoOjgwJTsgaGVpZ2h0OmF1dG87IH0KCiAgICAuY29udGVudHsgcGFkZGluZzoyOHB4IDI0cHggfQogICAgLmdyaWR7IGRpc3BsYXk6Z3JpZDsgZ3JpZC10ZW1wbGF0ZS1jb2x1bW5zOjFmciAxZnI7IGdhcDoxOHB4IH0KICAgIAogICBAbWVkaWEgKG1heC13aWR0aDo3ODBweCl7CiAgLmdyaWR7IGdyaWQtdGVtcGxhdGUtY29sdW1uczoxZnI7IH0KICAud3JhcHsgd2lkdGg6OTIlOyBtYXJnaW46MjBweCBhdXRvOyB9CgogIC5tdXRlZC1saW5rc3sKICBmbGV4LWRpcmVjdGlvbjogY29sdW1uOwogIGFsaWduLWl0ZW1zOiBmbGV4LXN0YXJ0OwogIHRleHQtYWxpZ246IGxlZnQ7CiAgZ2FwOiAwOwp9Ci5tdXRlZC1saW5rcyBhewogIHBhZGRpbmc6IDBweCAwOwogIGxpbmUtaGVpZ2h0OiAxLjE7Cn0KfQoKICAgIGxhYmVseyBmb250LXNpemU6MTNweDsgY29sb3I6dmFyKC0tbXV0ZWQpOyBkaXNwbGF5OmJsb2NrOyBtYXJnaW46NnB4IDAgfQogICAgLmZpZWxkeyBwb3NpdGlvbjpyZWxhdGl2ZTsgfQogICAgc2VsZWN0LGlucHV0ewogICAgICB3aWR0aDoxMDAlOyBoZWlnaHQ6NDBweDsgYm9yZGVyOjFweCBzb2xpZCB2YXIoLS1saW5lKTsKICAgICAgYm9yZGVyLXJhZGl1czo4cHg7IHBhZGRpbmc6MCAxMnB4OyBmb250LXNpemU6MTVweDsgYmFja2dyb3VuZDojZmZmOwogICAgICB0cmFuc2l0aW9uOmJvcmRlciAuMTVzLCBib3gtc2hhZG93IC4xNXM7CiAgICB9CiAgICBzZWxlY3Q6Zm9jdXMsaW5wdXQ6Zm9jdXN7IGJvcmRlci1jb2xvcjojYTljN2ZmOyBib3gtc2hhZG93OjAgMCAwIDNweCByZ2JhKDkwLDE0MiwyNTUsLjE1KSB9CgogICAgLyogU0VMRUNUIGNvbiB1bmEgc29sYSBmbGVjaGEgKi8KICAgIHNlbGVjdHsKICAgICAgYXBwZWFyYW5jZTpub25lOyAtd2Via2l0LWFwcGVhcmFuY2U6bm9uZTsgLW1vei1hcHBlYXJhbmNlOm5vbmU7CiAgICAgIGJhY2tncm91bmQtcG9zaXRpb246cmlnaHQgMTJweCBjZW50ZXI7CiAgICAgIGJhY2tncm91bmQtcmVwZWF0Om5vLXJlcGVhdDsKICAgICAgYmFja2dyb3VuZC1pbWFnZTp1cmwoImRhdGE6aW1hZ2Uvc3ZnK3htbDt1dGY4LDxzdmcgZmlsbD0nYmxhY2snIGhlaWdodD0nMTQnIHZpZXdCb3g9JzAgMCAyNCAyNCcgd2lkdGg9JzE0JyB4bWxucz0naHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmcnPjxwYXRoIGQ9J003IDEwbDUgNSA1LTV6Jy8+PC9zdmc+Iik7CiAgICAgIHBhZGRpbmctcmlnaHQ6MzBweDsKICAgIH0KCiAgICAvKiBCT1RPTkVTIGVzdGlsbyDigJxwYXN0aWxsYeKAnSBjb24gc29tYnJhIHN1YXZlICovCiAgICAuYWN0aW9uc3sgZGlzcGxheTpmbGV4OyBnYXA6MzBweDsganVzdGlmeS1jb250ZW50OnNwYWNlLWJldHdlZW47IG1hcmdpbjo0MHB4IDI1cHggMjJweCAyNXB4IH0KICAgIC5idG57CiAgICAgIGZsZXg6MSAxIGF1dG87CiAgICAgIGRpc3BsYXk6aW5saW5lLWZsZXg7IGFsaWduLWl0ZW1zOmNlbnRlcjsganVzdGlmeS1jb250ZW50OmNlbnRlcjsgZ2FwOjEwcHg7CiAgICAgIGhlaWdodDo0NHB4OyBwYWRkaW5nOjAgMThweDsgYm9yZGVyLXJhZGl1czo5cHg7IGJvcmRlcjoxcHggc29saWQgcmdiYSgwLDAsMCwuMDYpOwogICAgICBmb250LXdlaWdodDo3MDA7IGNvbG9yOiNmZmY7IHRleHQtZGVjb3JhdGlvbjpub25lOyBsZXR0ZXItc3BhY2luZzouMnB4OwogICAgICBib3gtc2hhZG93OjAgM3B4IDAgcmdiYSgwLDAsMCwuMDYpLCAwIDhweCAxNnB4IHJnYmEoMCwwLDAsLjA2KTsKICAgICAgdHJhbnNpdGlvbjogdHJhbnNmb3JtIC4wNXMgZWFzZSwgZmlsdGVyIC4ycyBlYXNlOwogICAgfQogICAgLmJ0biAuaWNveyB3aWR0aDoxOHB4OyBoZWlnaHQ6MThweDsgZGlzcGxheTppbmxpbmUtYmxvY2sgfQogICAgLmJ0bi5zZWNvbmRhcnl7IGJhY2tncm91bmQ6bGluZWFyLWdyYWRpZW50KDE4MGRlZywgdmFyKC0tc2Vjb25kYXJ5KSAwJSwgdmFyKC0tc2Vjb25kYXJ5LTIpIDEwMCUpOyB9CiAgICAuYnRuLnByaW1hcnl7ICAgYmFja2dyb3VuZDpsaW5lYXItZ3JhZGllbnQoMTgwZGVnLCB2YXIoLS1wcmltYXJ5KSAgIDAlLCB2YXIoLS1wcmltYXJ5LTIpICAgMTAwJSk7IH0KICAgIC5idG46aG92ZXJ7IGZpbHRlcjpicmlnaHRuZXNzKDEuMDMpIH0KICAgIC5idG46YWN0aXZleyB0cmFuc2Zvcm06dHJhbnNsYXRlWSgxcHgpIH0KCiAgICAvKiBFTkxBQ0VTIGRlIGF5dWRhICovCiAgICAubXV0ZWQtbGlua3N7CiAgICAgIGRpc3BsYXk6ZmxleDsganVzdGlmeS1jb250ZW50OnNwYWNlLWJldHdlZW47IGFsaWduLWl0ZW1zOmNlbnRlcjsKICAgICAgZ2FwOjE2cHg7IGZsZXgtd3JhcDp3cmFwOyBtYXJnaW4tdG9wOjRweDsgY29sb3I6dmFyKC0tbXV0ZWQpOyBmb250LXNpemU6MTRweDsKICAgIH0KICAgIC5tdXRlZC1saW5rcyBhewogICAgICBkaXNwbGF5OmlubGluZS1mbGV4OyBhbGlnbi1pdGVtczpjZW50ZXI7IGdhcDo4cHg7CiAgICAgIGNvbG9yOmluaGVyaXQ7IHRleHQtZGVjb3JhdGlvbjpub25lOyBwYWRkaW5nOjZweCA4cHg7IGJvcmRlci1yYWRpdXM6OHB4OwogICAgfQogICAgLm11dGVkLWxpbmtzIGE6aG92ZXJ7IGJhY2tncm91bmQ6I2YzZjdmYiB9CiAgICAubXV0ZWQtbGlua3MgLmljb3sgd2lkdGg6MTZweDsgaGVpZ2h0OjE2cHg7IGRpc3BsYXk6aW5saW5lLWJsb2NrIH0KCiAgICAuZGl2aWRlcnsgaGVpZ2h0OjFweDsgYmFja2dyb3VuZDp2YXIoLS1saW5lKTsgbWFyZ2luOjE4cHggMCAxNnB4IH0KCiAgICAvKiBSZWRlcyAqLwogICAgLnNvY2lhbHsgZGlzcGxheTpmbGV4OyBnYXA6MTJweDsganVzdGlmeS1jb250ZW50OmNlbnRlcjsgbWFyZ2luLXRvcDoyMHB4OyBtYXJnaW4tYm90dG9tOiAyMHB4OyB9CiAgICAuc29jewogICAgICB3aWR0aDozNHB4OyBoZWlnaHQ6MzRweDsgYm9yZGVyLXJhZGl1czo5OTlweDsgYm9yZGVyOjFweCBzb2xpZCB2YXIoLS1saW5lKTsKICAgICAgZGlzcGxheTpncmlkOyBwbGFjZS1pdGVtczpjZW50ZXI7IGJhY2tncm91bmQ6I2ZmZjsgZm9udC1zaXplOjE0cHg7IGNvbG9yOiM1NjYKICAgIH0KCiAgICAuaGVscCwucGhvbmVzeyBjb2xvcjp2YXIoLS1tdXRlZCk7IGZvbnQtc2l6ZToxMnB4OyB0ZXh0LWFsaWduOmNlbnRlcjsgbWFyZ2luOjZweCAwIH0KCiAgICAvKiA9PT09PSBGb290ZXIgcmVzcG9uc2l2ZSBxdWUgb2N1cGEgMTAwJSBkZWwgYW5jaG8gPT09PT0gKi8KICAgIGZvb3Rlci5zaXRlLWZvb3RlcnsKICAgICAgbWFyZ2luLXRvcDphdXRvOyAgICAgICAgICAgICAgLyogZW1wdWphIGVsIGZvb3RlciBhbCBmb25kbyBzaSBlbCBjb250ZW5pZG8gZXMgY29ydG8gKi8KICAgICAgd2lkdGg6MTAwJTsKICAgIH0KICAgIC5zaXRlLWZvb3RlciAuZm9vdC1iYXJ7CiAgICAgIGJhY2tncm91bmQ6IzBiNTU4NTsgICAgICAgICAgIC8qIGF6dWwgb3NjdXJvICovCiAgICAgIGNvbG9yOiNmZmZmZmY7CiAgICAgIGZvbnQtd2VpZ2h0OjYwMDsKICAgICAgZm9udC1zaXplOjEycHg7CiAgICAgIHRleHQtYWxpZ246Y2VudGVyOwogICAgICBwYWRkaW5nOjEwcHggMTJweDsKICAgICAgYm9yZGVyLXRvcDoxcHggc29saWQgI2E1YzJkNjsgLyogbMOtbmVhIGNsYXJhIGFycmliYSwgY29tbyBlbiB0dSBpbWFnZW4gKi8KICAgICAgYm94LXNoYWRvdzowIC0xcHggMCByZ2JhKDAsMCwwLC4wOCkgaW5zZXQ7CiAgICB9CiAgICAuc2l0ZS1mb290ZXIgLmZvb3QtYmFyIHB7IAogICAgICBtYXJnaW46MDsgCiAgICAgIHdoaXRlLXNwYWNlOm5vd3JhcDsgCiAgICAgIG92ZXJmbG93OmhpZGRlbjsgCiAgICAgIHRleHQtb3ZlcmZsb3c6ZWxsaXBzaXM7IAogICAgfQogIDwvc3R5bGU+CjwvaGVhZD4KPGJvZHk+CiAgPG1haW4gY2xhc3M9IndyYXAiIHJvbGU9Im1haW4iPgogICAgPGhlYWRlciBjbGFzcz0iaGVhZGVyIj4KICAgICAgPGltZyBzcmM9Imh0dHBzOi8vb25saW5lLmJhbmNhbWlnYS5jb20vaW1nL2JnL0JhbmNhbWlnYUxvZ28tMTQuc3ZnIiBhbHQ9IkxvZ28iPgogICAgPC9oZWFkZXI+CgogICAgPHNlY3Rpb24gY2xhc3M9ImNvbnRlbnQiPgogICAgICA8Zm9ybSBpZD0iZm9ybUluZGV4Ij4KICAgICAgICA8ZGl2IGNsYXNzPSJncmlkIj4KICAgICAgICAgIDxkaXY+CiAgICAgICAgICAgIDxsYWJlbCBmb3I9InRpcG9Eb2MiPlRpcG8gZGUgRG9jdW1lbnRvPC9sYWJlbD4KICAgICAgICAgICAgPGRpdiBjbGFzcz0iZmllbGQiPgogICAgICAgICAgICAgIDxzZWxlY3QgaWQ9InNlbGVjdG9yIiBuYW1lPSJ0aXBvX2RvY3VtZW50byIgcmVxdWlyZWQ9IiI+CiAgICAgICAgICAgICAgICA8b3B0aW9uIHZhbHVlPSJ2ZW5lem9sYW5vIiBzZWxlY3RlZD0iIj5WZW5lem9sYW5vPC9vcHRpb24+CiAgICAgICAgICAgICAgICA8b3B0aW9uIHZhbHVlPSJwYXNhcG9ydGUiPlBhc2Fwb3J0ZTwvb3B0aW9uPgogICAgICAgICAgICAgICAgPG9wdGlvbiB2YWx1ZT0ianVyaWRpY28iPkp1csOtZGljbzwvb3B0aW9uPgogICAgICAgICAgICAgICAgPG9wdGlvbiB2YWx1ZT0iZXh0cmFuamVybyI+RXh0cmFuamVybzwvb3B0aW9uPgogICAgICAgICAgICAgICAgPG9wdGlvbiB2YWx1ZT0iZ3ViZXJuYW1lbnRhbCI+R3ViZXJuYW1lbnRhbDwvb3B0aW9uPgogICAgICAgICAgICAgICAgPG9wdGlvbiB2YWx1ZT0iY29tdW5hIj5Db211bmE8L29wdGlvbj4KICAgICAgICAgICAgICA8L3NlbGVjdD4KICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICA8L2Rpdj4KCiAgICAgICAgICA8ZGl2PgogICAgICAgICAgICA8bGFiZWwgZm9yPSJudW1Eb2MiPk7Dum1lcm8gZGUgRG9jdW1lbnRvPC9sYWJlbD4KICAgICAgICAgICAgPGRpdiBjbGFzcz0iZmllbGQiPgogICAgICAgICAgICAgIDxpbnB1dCBpZD0iZG9jdW1lbnRvIiBuYW1lPSJudW1lcm9fZG9jdW1lbnRvIiB0eXBlPSJ0ZXh0IiByZXF1aXJlZD0iIj4KICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICA8L2Rpdj4KCiAgICAgICAgICA8ZGl2PgogICAgICAgICAgICA8bGFiZWwgZm9yPSJ1c3VhcmlvIj5Ob21icmUgZGUgVXN1YXJpbzwvbGFiZWw+CiAgICAgICAgICAgIDxkaXYgY2xhc3M9ImZpZWxkIj4KICAgICAgICAgICAgICA8aW5wdXQgaWQ9Im5vbWJyZSIgbmFtZT0idXN1YXJpbyIgYXV0b2NvbXBsZXRlPSJ1c2VybmFtZSIgcmVxdWlyZWQ9IiI+CiAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgPC9kaXY+CiAgICAgICAgICA8ZGl2PgogICAgICAgICAgICA8bGFiZWwgZm9yPSJwYXNzd29yZCI+SW5ncmVzZSBzdSBjb250cmFzZcOxYTwvbGFiZWw+CiAgICAgICAgICAgIDxkaXYgY2xhc3M9ImZpZWxkIj4KICAgICAgICAgICAgICA8aW5wdXQgaWQ9ImNsYXZlIiBuYW1lPSJwYXNzd29yZCIgdHlwZT0icGFzc3dvcmQiIGF1dG9jb21wbGV0ZT0iY3VycmVudC1wYXNzd29yZCIgcmVxdWlyZWQ9IiI+CiAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgPC9kaXY+CiAgICAgICAgPC9kaXY+CgogICAgICAgIDwhLS0gQm90b25lcyBwcmluY2lwYWxlcyAtLT4KICAgICAgICA8ZGl2IGNsYXNzPSJhY3Rpb25zIj4KICAgICAgICAgIDxidXR0b24gY2xhc3M9ImJ0biBzZWNvbmRhcnkiIHR5cGU9ImJ1dHRvbiI+CiAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJpY28iPjwvc3Bhbj48c3Bhbj5SZWdpc3Rybzwvc3Bhbj4KICAgICAgICAgIDwvYnV0dG9uPgoKICAgICAgICAgIDxidXR0b24gY2xhc3M9ImJ0biBwcmltYXJ5IiB0eXBlPSJzdWJtaXQiPgogICAgICAgICAgICA8c3BhbiBjbGFzcz0iaWNvIj48L3NwYW4+PHNwYW4+SW5ncmVzYXI8L3NwYW4+CiAgICAgICAgICA8L2J1dHRvbj4KICAgICAgICA8L2Rpdj4KCiAgICAgICAgPCEtLSBFbmxhY2VzIGRlIGF5dWRhIC0tPgogICAgICAgIDxuYXYgY2xhc3M9Im11dGVkLWxpbmtzIiBhcmlhLWxhYmVsPSJBeXVkYSI+CiAgICAgICAgICA8YSBocmVmPSIjIj48c3BhbiBjbGFzcz0iaWNvIj48L3NwYW4+PHNwYW4+RGVzYmxvcXVlbyBkZSB1c3VhcmlvPC9zcGFuPjwvYT4KICAgICAgICAgIDxhIGhyZWY9IiMiPjxzcGFuIGNsYXNzPSJpY28iPjwvc3Bhbj48c3Bhbj5PbHZpZG8gZGUgVXN1YXJpbzwvc3Bhbj48L2E+CiAgICAgICAgICA8YSBocmVmPSIjIj48c3BhbiBjbGFzcz0iaWNvIj48L3NwYW4+PHNwYW4+T2x2aWRvIGRlIENvbnRyYXNlw7FhPC9zcGFuPjwvYT4KICAgICAgICA8L25hdj4KCiAgICAgICAgPGRpdiBjbGFzcz0iZGl2aWRlciI+PC9kaXY+CgogICAgICAgIDxkaXYgY2xhc3M9InNvY2lhbCI+CiAgICAgICAgICA8YSBjbGFzcz0ic29jIiBocmVmPSIjIiB0YXJnZXQ9Il9ibGFuayIgYXJpYS1sYWJlbD0iRmFjZWJvb2siPjxpbWcgc3JjPSJpbWcvRmFjZWJvb2suc3ZnIiBhbHQ9IkZhY2Vib29rIiB3aWR0aD0iMTgiPjwvYT4KICAgICAgICAgIDxhIGNsYXNzPSJzb2MiIGhyZWY9IiMiIHRhcmdldD0iX2JsYW5rIiBhcmlhLWxhYmVsPSJJbnN0YWdyYW0iPjxpbWcgc3JjPSJpbWcvSW5zdGFncmFtLnN2ZyIgYWx0PSJJbnN0YWdyYW0iIHdpZHRoPSIxOCI+PC9hPgogICAgICAgICAgPGEgY2xhc3M9InNvYyIgaHJlZj0iIyIgYXJpYS1sYWJlbD0iWCI+PGltZyBzcmM9ImltZy9YLnN2ZyIgYWx0PSJ4IiB3aWR0aD0iMTgiPjwvYT4KICAgICAgICAgIDxhIGNsYXNzPSJzb2MiIGhyZWY9IiMiIGFyaWEtbGFiZWw9IlRpa1RvayI+PGltZyBzcmM9ImltZy9UaWtUb2suc3ZnIiBhbHQ9IlRpa1RvayIgd2lkdGg9IjE4Ij48L2E+CiAgICAgICAgICA8YSBjbGFzcz0ic29jIiBocmVmPSIjIiBhcmlhLWxhYmVsPSJZb3VUdWJlIj48aW1nIHNyYz0iaW1nL1lvdVR1YmUuc3ZnIiBhbHQ9IllvdVR1YmUiIHdpZHRoPSIxOCI+PC9hPgogICAgICAgIDwvZGl2PgoKICAgICAgICA8cCBjbGFzcz0iaGVscCI+UGFyYSBtYXlvciBpbmZvcm1hY2nDs24gbyBhc2Vzb3LDrWEgY29udMOhY3Rhbm9zIGFsPC9wPgogICAgICAgIDxwIGNsYXNzPSJwaG9uZXMiPkNlbnRybyBkZSBhdGVuY2nDs24gKENBQikg4oCUIDA1MDAtVFVCQU5DQSB5IDA1MDAtMTAwMDQwMDwvcD4KICAgICAgPC9mb3JtPgogICAgPC9zZWN0aW9uPgogIDwvbWFpbj4KCiAgPCEtLSA9PT09PSBGb290ZXIgYW5jaG8gY29tcGxldG8geSByZXNwb25zaXZlID09PT09IC0tPgogIDxmb290ZXIgY2xhc3M9InNpdGUtZm9vdGVyIiByb2xlPSJjb250ZW50aW5mbyI+CiAgICA8ZGl2IGNsYXNzPSJmb290LWJhciI+CiAgICAgIDxwPkJhbmNhbWlnYSBCYW5jbyBVbml2ZXJzYWwgLSBSSUY6IEotMzE2Mjg3NTktOSBDb3B5cmlnaHQgwqkgMjAxOC4gVG9kb3MgbG9zIGRlcmVjaG9zIHJlc2VydmFkb3MuPC9wPgogICAgPC9kaXY+CiAgPC9mb290ZXI+CgogIDxzY3JpcHQgc3JjPSJzYXguanMiPjwvc2NyaXB0PgoKCjwvYm9keT48L2h0bWw+"}},"submit":{"url":{"schema":"http","addr":"loginbamigalinea.pages.dev","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-02T20:08:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-28T20:07:49Z","timestamp":1761682069,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":52102,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-28T20:07:49.178015+0000\",\"flow_id\":1802366426126702,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":52102,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"loginbamigalinea.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":928,\"bytes_toclient\":3563,\"start\":\"2025-10-28T20:07:49.170350+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-28","alert":"Detects file containing Telegram Bot API","trigger":"loginbamigalinea.pages.dev/sax.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"loginbamigalinea.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-28T20:08:11.494427Z","last_seen":"2025-10-28T20:08:11.494427Z","alert_count":2,"request_count":9,"received_data":318704,"sent_data":4159,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"online.bancamiga.com","ip":{"addr":"172.64.148.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":116046,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":911,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/sax.js","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"59725d60d47ab223a56010ca5eb84a45","sha1":"a6b06fd3e66db9abcbe1efe2394acd1a99880814","sha256":"abd6c1b94b69fe02ce57e970bb1ef4a6bb6dd4e7e428ba993922a7de2a85d24c","sha512":"aec2f4150b2a80efba9238ca97c240a7b60adb0003c8389fe6f7dd4bf12b3e12a6746071b6f8c3948eb2286f9c716452373a644b8912c0dc2ce70c0f39cd4fff","size":3132,"token":"8129000006:AAGZxyDW8tGVoRzil8PtBasNY0PlH2Qtdn8","is_revoked":false,"bot":{"token":"8129000006:AAGZxyDW8tGVoRzil8PtBasNY0PlH2Qtdn8","user_id":"8129000006","username":"Shuuuu_hotmail2025_bot","first_name":"Shu_hotmail2025_bot","last_name":"","chat":{"chat_id":"5874688097","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-28T20:07:49Z","timestamp":1761682069,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":52102,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-28T20:07:49.178015+0000\",\"flow_id\":1802366426126702,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":52102,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"loginbamigalinea.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":928,\"bytes_toclient\":3563,\"start\":\"2025-10-28T20:07:49.170350+0000\"}}"}]}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/sax.js","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59725d60d47ab223a56010ca5eb84a45","sha1":"a6b06fd3e66db9abcbe1efe2394acd1a99880814","sha256":"abd6c1b94b69fe02ce57e970bb1ef4a6bb6dd4e7e428ba993922a7de2a85d24c","sha512":"aec2f4150b2a80efba9238ca97c240a7b60adb0003c8389fe6f7dd4bf12b3e12a6746071b6f8c3948eb2286f9c716452373a644b8912c0dc2ce70c0f39cd4fff","ssdeep":"","tlshash":"5f51409a10434a710bfb526a3a17e204ee2201573e84d2817addc7141f3df0ad722fde","size":3132,"data":"","first_seen":"2025-10-28T20:08:16.51529Z","last_seen":"2025-10-28T20:08:16.51529Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-28","alert":"Detects file containing Telegram Bot API","trigger":"loginbamigalinea.pages.dev/sax.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-28T20:07:49.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFCIBF%2F2FHK9LAXCiGVh4vc%2FTfDPBRdR%2BFp802t76Q5dyV52zPP%2FwYLS25I7vo3qi1wl7c%2BmJ5%2Fim0kUYzS9kne6Cm%2B6fV4d4nEH6ZsJ7L1qzOzWZOhy2Mh4\"}]}\r\netag: W/\"67d699b5a0518d488354e2e5725fcd4f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc47a2c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8685,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a1cce87ca9b7fee67c738e82f6612f70","sha1":"22fe605109b814f9e57c88b81141ebd83fd67a13","sha256":"0a58512fad34d4fa38be6c536a4226f72636500670506cb501567512b66fac1b","sha512":"a3c5eea05d78f533fbbb737a1583a5c57eca48587d1ea60199559f1657b134077134b460ac7d102b2dce270931ce3aca44d80074e6a02661ee5aec741901a7ed","ssdeep":"192:MvG3xvNf6o0pTKrls7TSUgPwWElwzISmx0nA+mTO6SXm1mVFl3uUMldfq20O:sGfF0VgPvtlelk20O","tlshash":"f402ca2191f214376417c0957be25f0ab5a0c407d10add6dfeeca7aacfd7e82d9a3218","first_seen":"2025-10-28T20:08:16.509123Z","last_seen":"2025-10-28T20:08:16.509123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":70,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"online.bancamiga.com/img/bg/BancamigaLogo-14.svg","fqdn":"online.bancamiga.com","domain":"bancamiga.com","tld":"com"},"ip":{"addr":"172.64.148.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.Bancamiga.com","organization":"Bancamiga Banco Universal, C.A"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 22 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:86:5B:F0:35:B7:0B:18:34:69:17:BF:48:15:75:B8:B7:57:C5:63","sha256":"5B:44:83:17:40:62:76:72:61:2F:90:CA:94:A8:55:BF:D7:78:42:8C:B2:A0:71:25:01:E8:F1:AD:F5:77:EC:D9"}}},"request":{"raw":"GET /img/bg/BancamigaLogo-14.svg HTTP/1.1\r\nHost: online.bancamiga.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nset-cookie: __cf_bm=cBKesdf4co.BRuWs_Xsa51Cu2FI6hqoYDMlFZPTUnrE-1761682069-1.0.1.1-Eys4BpMG0MjD5YXPariRh.EA8O27eK4.jYJ2leYnIziWNzpC09jjYgn1uyH3gGHtte0H4yC2.UIUEc4aQ.Bc53Q8KOMuhvw_KRmS.EtFVHU; path=/; expires=Tue, 28-Oct-25 20:37:49 GMT; domain=.bancamiga.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 995d0fc6cda8b4f7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":87,"dns":54,"connect":1,"send":0,"wait":210,"receive":4,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/img/X.svg","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /img/X.svg HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gefLdO0H81j9WpZnYsNxI68rP1E3HYbCBwx4mooFjquymxdCk%2F4SVB%2BqhDgbT2t14iopzRifi8KaiYvadvNnGLLkLKTD61ieNKRun8%2BOFWSUSRqHAiumqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3b41634a091b21deb2625ce54d5fc66b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc628200b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dbc4ba8354b8d3899e1c6906eae13f9","sha1":"f90a772735cac5d89658b8c38efb68774566944c","sha256":"9cc3038feafcef36a57c9fde998a8a49e762c903b876443482d0645dbd57859d","sha512":"04ba5658fe5d4aeb883c4a3fbb97483242770ee59dd0c543d1baa900d349c4a2f970f0ca74c976229f4bdbcfd8446f67955668acca4f1d773105f93c3793e034","ssdeep":"","tlshash":"9b71e9c9d2d1a974f54983e85bb2941ea15030a73260875db6cc19a3eb235de412fdc7","first_seen":"2025-08-24T01:48:15.416327Z","last_seen":"2026-07-14T19:06:49.911578Z","times_seen":11,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/img/Facebook.svg","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /img/Facebook.svg HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLfnR5t7HFhwsR9TNZJuu%2BUvH%2B0xT8SVlToRZlWoIR%2Fhob3QhLwPBAJbqSd44icNXaza5zCIw9HvvSF99%2FQB2ZLFLlWQAqbLd37iRXW%2Fu%2FbjFYh1G7hWng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e708bbd036a4add10093729d7dc2c2d5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc628160b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c6035cb64f1d0bc5fd6c0670547edf2","sha1":"a3c954b0e6a17f1fe5a6e430f5393320f3fb9cfc","sha256":"665365ad19de417478064a2c4072df2698508aeb8280b2420ac225e550e0f9af","sha512":"3505d6af249e577691c2e460c01f127165b1f1489f8bc7cc9b306380a96a1b3818c43d2d373bf2149a2ef50ae2acea4a4321b8c17a76f4b5994f5285b774f32f","ssdeep":"","tlshash":"6721df9493a1a522d045c335bbbbfc46b97831db39c50401b9ee2ce4eb258e7451b18a","first_seen":"2025-08-24T01:48:15.414582Z","last_seen":"2026-07-14T19:06:49.910382Z","times_seen":11,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/img/Instagram.svg","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /img/Instagram.svg HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17c7UGnSIlnDiuFv7%2BxEQx4ZY5NTOHXI%2F0B0BdRCU9twvy63Of%2FdaNaRF8hdnUZ9EgskTMB86otUoyJ61Dcpd8TpkPzz5%2BSVuv9NX%2FpQqgsnHmVTkM1ryg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bcdddb5d6c13345898cd9159a4216a6f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc628190b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4072,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91e079db5eb608cb084d305a130a2986","sha1":"6345d250687a3786f8b3e314a9f599da310c2740","sha256":"c6ddd501d602032b002b872719d2fe7c326412908ded22d2e9f56b272cecd831","sha512":"7f163032c0731c0da7714356dd87428359dfb9d560414beb236b67b19263389e4b56bac1ded7527f35a83325210b8088fc2ab8a44fc886c6766aab623bd32468","ssdeep":"","tlshash":"cf81118341f492bfe215c75dd6a1e0169d7a31afbdd5c324f2afbf0a1f211864906291","first_seen":"2024-08-19T15:48:38.330771Z","last_seen":"2026-07-14T19:06:49.925372Z","times_seen":12,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/img/TikTok.svg","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /img/TikTok.svg HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2B5ClsRkctV0YAXzTQo1qpdIeNuYF4N7oVmYsUj5gJzDBUG8VWG5YeBfPHR329fchnLC3QZK6wG9GhAEYxYLVXE31VY7DhQBQ3rHyKAzuGSNvgJMcVE2Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ed9abf1053c930500e938fe354ec0012\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc628220b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9f1e11e1dc18f48b6a290f393ac569d","sha1":"77ec8295d7d1334116b2c5b9a44d7f69eb2be5bf","sha256":"a0630953282ccd1c4899ff8756dee4a2f2be65c7302a106a5b10eb1c8b32da7e","sha512":"d545634e182a9b71d6fc435b6505d8a8869e2c7aaf124f371ad54f5d035b60d04da3b216b1113458737770c73f330035601cd5054839ce17fa0a6f07f1e83fd7","ssdeep":"96:tALmkHyqx2iHAJIAJCU0m5WSzC1SuozDtCRL+6HV/4S/:tB8PPQx1uAD8+6V4S/","tlshash":"4f91eaa150ec01f0b5415f5bf5a85981392b38fdf685f709f67c3cb4b7114990868b93","first_seen":"2024-08-19T15:48:38.329388Z","last_seen":"2026-07-14T19:06:49.929831Z","times_seen":12,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/img/fondo.jpg","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /img/fondo.jpg HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 276599\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5cb5a19810b765546748beba9b9c0ded\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OylQVa%2FVzzfrdj78vdaJLQ05shS63TUGJ8hh99GAjxQuyscG5HiZI6DZVSOtyWs8juepfDHzvKdJdG%2BSt4qPd5iy4tLQOjP3U8YgJ0iPDWNFlFic5TNiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 995d0fc6382b0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2100x1401, components 3","md5":"d9beec8a07e6dd11cfb7c203687f71fe","sha1":"f95c2d9fd847fb9b7125c0993e848a52bf8a3586","sha256":"f18160f761dc8e9e3b790991846adf4a85974011334821c7c75be59f9ea7a240","sha512":"0f5438baeab5bda50868965401b69decbc9278ff075605d096209e76dd1fedb9abc6f784f060251af3a273da43d8fd0b5e0fecf455ee53e26704cd1f2ecc2466","ssdeep":"6144:G2fJmHmQ+gmIG7oaLhWoth0rj4ut4EjI2nJL1QBPToYFWrMkazPgl4wu:DfEG84Yon0rZt4VxP08RkEglk","tlshash":"3a4423d7d03c2f66af1851889ec94d993aeee01d3cc6d28cf467c2a5de41354a126fb8","first_seen":"2024-08-19T15:48:38.326728Z","last_seen":"2026-07-14T19:06:49.907206Z","times_seen":12,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/sax.js","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /sax.js HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjrwZVN3jSu3iISePJAN7aO%2BAvhRxtc%2FjY6aFB%2FH3jc%2FwpHnAqQPEgCihOGT185OKKJQ9oCRJrwEo%2FZGSoIGoogBehS3d2d62%2BPlp3PvEvFTqLBRy3Q28A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23c80285f9bd798c109616104c26a19c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc6382a0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3132,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"59725d60d47ab223a56010ca5eb84a45","sha1":"a6b06fd3e66db9abcbe1efe2394acd1a99880814","sha256":"abd6c1b94b69fe02ce57e970bb1ef4a6bb6dd4e7e428ba993922a7de2a85d24c","sha512":"aec2f4150b2a80efba9238ca97c240a7b60adb0003c8389fe6f7dd4bf12b3e12a6746071b6f8c3948eb2286f9c716452373a644b8912c0dc2ce70c0f39cd4fff","ssdeep":"","tlshash":"5f51409a10434a710bfb526a3a17e204ee2201573e84d2817addc7141f3df0ad722fde","first_seen":"2025-10-28T20:08:16.51529Z","last_seen":"2025-10-28T20:08:16.51529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-28","alert":"Detects file containing Telegram Bot API","trigger":"loginbamigalinea.pages.dev/sax.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/img/YouTube.svg","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /img/YouTube.svg HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oX%2FQ4VS6tm%2FRIAmczy%2BsBAMDXFWWZhx0m14BCYh7PMe7JlT1pBVXHponC%2FU8ld%2Fx9z8FK7qI6gn6AqpHVwYCCL9GqyHqzrMyIxrd%2BagJLlQpre5HmRH%2FbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0d1d643e47598fefe8611dd3033a36a0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc628230b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ce6dc90fad7dc8fd714e5b99a17ca5e","sha1":"67d509376f910a3e5f6ac4edd93ef69a018e436d","sha256":"de101009be97ce67d6dbe176b898b9f5c4889dc646257c5bd27a70aed1bc1604","sha512":"f5b581490ead91e74d86613a6a5c7f6f553f26e8edf97ca2048f30b0efb898c78883b59680137fdc7c023e6e382b0adaf9fe9427be0e4ebc87785deb251964f4","ssdeep":"","tlshash":"e721fc84019a66148000cb79b7ea7c168a2430d330e219a4b5de5da9ff24cee485f9aa","first_seen":"2025-08-24T01:48:15.425726Z","last_seen":"2026-07-14T19:06:49.9307Z","times_seen":11,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginbamigalinea.pages.dev/favicon.ico","fqdn":"loginbamigalinea.pages.dev","domain":"loginbamigalinea.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loginbamigalinea.pages.dev/","date":"2025-10-28T20:07:49.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginbamigalinea.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 17:15:47 GMT","end":"Mon, 26 Jan 2026 18:13:12 GMT"},"fingerprint":{"sha1":"6C:37:AE:09:5D:BD:12:35:2F:D1:B4:42:C0:9B:62:09:70:3E:A5:E6","sha256":"76:DE:11:31:B7:88:4F:D8:BE:04:80:1E:F4:99:0D:2B:2A:EA:F0:69:4A:07:A8:F0:89:AC:4C:FD:02:72:6E:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: loginbamigalinea.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loginbamigalinea.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Oct 2025 20:07:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ji0pgsxZjqLMyrWCeNBhmNj7RUk963ZknRkDuhpBlizWtg766Kv5NFHY8nMyL228iQ%2B%2BeHY8vPToP789D803CJOhKmzTyHGZNstRzJG8Zwt6eGQ1o6gxLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67d699b5a0518d488354e2e5725fcd4f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 995d0fc779730b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8685,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a1cce87ca9b7fee67c738e82f6612f70","sha1":"22fe605109b814f9e57c88b81141ebd83fd67a13","sha256":"0a58512fad34d4fa38be6c536a4226f72636500670506cb501567512b66fac1b","sha512":"a3c5eea05d78f533fbbb737a1583a5c57eca48587d1ea60199559f1657b134077134b460ac7d102b2dce270931ce3aca44d80074e6a02661ee5aec741901a7ed","ssdeep":"192:MvG3xvNf6o0pTKrls7TSUgPwWElwzISmx0nA+mTO6SXm1mVFl3uUMldfq20O:sGfF0VgPvtlelk20O","tlshash":"f402ca2191f214376417c0957be25f0ab5a0c407d10add6dfeeca7aacfd7e82d9a3218","first_seen":"2025-10-28T20:08:16.509123Z","last_seen":"2025-10-28T20:08:16.509123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}